AI Compliance Calendar MCP Server
Click on "Deploy Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@AI Compliance Calendar MCP ServerShow upcoming EU AI Act deadlines"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
AI Compliance Calendar MCP Server
ποΈ AI Compliance Calendar β Your comprehensive AI regulations and compliance deadline tracker
Track AI regulations, deadlines, risk assessments, and policy updates across global jurisdictions. Never miss a compliance deadline again.
π Coverage
Jurisdictions: EU, US, UK, Canada, China, Singapore
Regulations: EU AI Act, CCPA/CPRA, NIST AI Framework, UK AI Act, Canada AIDA, and more
Data: Pre-populated with real compliance data and deadlines
Related MCP server: brehon-mcp-server
π οΈ Tools
1. get_regulations
Search and filter AI regulations by jurisdiction, category, and status.
jurisdiction: US | EU | UK | CA | CN | SG (optional)
category: privacy, safety, transparency, governance (optional)
status: active, enacted, draft, bill, guidance (optional)
search: free text search (optional)2. compliance_calendar
Get upcoming compliance deadlines and milestones with priority levels.
jurisdiction: filter by region (optional)
days_ahead: how far to look ahead (default: 365)
priority: critical, high, medium, low (optional)
regulation: specific regulation filter (optional)3. regulation_summary
Detailed breakdown of specific AI regulations including requirements and timelines.
regulation_id: eu-ai-act, ccpa, nist-ai-framework, etc.4. risk_assessment
Assess compliance risks for AI use cases across jurisdictions.
use_case: healthcare-diagnosis, hiring-screening, content-moderation, etc.
jurisdictions: array of jurisdictions to assess
custom_description: for custom use cases (optional)5. policy_updates
Track recent policy changes and regulatory developments.
jurisdiction: filter by region (optional)
regulation: filter by regulation (optional)
days_back: how far back to search (default: 90)
impact_level: high, medium, low (optional)6. jurisdiction_compare
Compare AI regulations across multiple jurisdictions.
jurisdictions: array of jurisdictions to compare
focus_area: privacy, safety, transparency, penalties, timelines (optional)π― Use Cases
Legal Teams: Track compliance deadlines and regulatory changes
AI Developers: Assess risks for AI systems across markets
Compliance Officers: Monitor upcoming requirements and deadlines
Policy Researchers: Compare regulatory approaches globally
Consultants: Advise clients on multi-jurisdictional compliance
π Quick Start
Install & Build
cd /path/to/compliance-mcp
npm install
npm run buildTest the Server
npm run devUse with Claude Desktop
Add to your claude_desktop_config.json:
{
"mcpServers": {
"compliance-mcp": {
"command": "node",
"args": ["/path/to/compliance-mcp/build/index.js"]
}
}
}π Data Coverage
Regulations Tracked
πͺπΊ EU AI Act (2024-2026 timeline)
πΊπΈ CCPA/CPRA (California privacy laws)
πΊπΈ NIST AI Framework (Federal guidance)
π¬π§ UK AI Act (Draft legislation)
π¨π¦ Canada AIDA (Bill C-27)
π¨π³ Algorithm Provisions (China)
πΈπ¬ Model AI Governance (Singapore)
Risk Assessment Templates
Healthcare diagnosis systems
Hiring and recruitment AI
Content moderation systems
Financial credit scoring
Autonomous vehicles
Customer service chatbots
Compliance Calendar Highlights
π΄ Aug 2, 2026: EU AI Act full compliance deadline
π Feb 2, 2025: EU AI Act prohibited practices ban
π‘ 2024-2025: Multiple regulatory guidance releases
ποΈ Architecture
src/
βββ index.ts # Main MCP server implementation
βββ data/ # JSON databases (no external APIs needed)
βββ regulations.json # Comprehensive regulation data
βββ calendar.json # Compliance deadlines & milestones
βββ risk-templates.json # Risk assessment templates
βββ policy-updates.json # Recent policy developmentsFeatures:
β Zero API dependencies β all data local
β Real regulation data β not synthetic
β Multi-jurisdiction β global coverage
β Risk-based approach β practical assessments
β Calendar integration β never miss deadlines
π Example Queries
"What are the upcoming EU AI Act deadlines?"
compliance_calendar(jurisdiction="EU", regulation="eu-ai-act")"Assess hiring AI risks in US and EU"
risk_assessment(use_case="hiring-screening", jurisdictions=["US", "EU"])"What's new in AI policy this month?"
policy_updates(days_back=30, impact_level="high")"Compare privacy approaches: EU vs US"
jurisdiction_compare(jurisdictions=["EU", "US"], focus_area="privacy")π Updates
The regulation database is manually curated from official sources and updated regularly. Key data sources:
EU AI Act official text and implementing acts
NIST AI Risk Management Framework
State and federal AI legislation (US)
Regulatory guidance documents
Official government publications
π License
MIT License - see LICENSE for details.
π€ Contributing
Contributions welcome! Please:
Ensure data accuracy with official sources
Follow the existing JSON schema
Update both data files and documentation
Test thoroughly before submitting
βοΈ Built for AI practitioners who take compliance seriously.
Note: This tool provides information for educational purposes. Always consult with qualified legal professionals for compliance advice.
Available Tools
6 toolscompliance_calendarC
Get upcoming compliance deadlines and milestones. Shows critical dates for AI regulations across jurisdictions with priority levels and requirements.
| Name | Required | Description | Default |
|---|---|---|---|
| priority | No | Filter by priority level: critical, high, medium, low | |
| days_ahead | No | Number of days to look ahead (default: 365) | |
| regulation | No | Filter by specific regulation ID | |
| jurisdiction | No | Filter by jurisdiction (US, EU, UK, CA, CN, SG) |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description bears the full behavioral burden, and it discloses little beyond output content. It does not mention the default look-ahead window, whether deadlines recur, pagination, ordering, or any auth requirements. Saying it 'shows critical dates with priority levels and requirements' is a content hint, not a behavioral disclosure.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two short sentences with no filler, and the core purpose is front-loaded in the first sentence. The second sentence adds some value by naming what the results contain, though it is somewhat redundant with 'compliance deadlines'.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple, optional-parameter read tool with 100% schema coverage and no output schema, the description is adequate: it covers purpose, scope, and result content. It is thin on behavioral traits (no annotations supplied), which leaves the agent without guidance on default windows or result volume.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so all four parameters (priority, days_ahead, regulation, jurisdiction) are already documented in the schema. The description adds no parameter syntax or semantics beyond the schema, so the baseline 3 applies.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description pairs a clear verb ('Get') with a specific resource ('upcoming compliance deadlines and milestones') and clarifies the domain (AI regulations across jurisdictions). It is distinguishable from siblings like get_regulations or regulation_summary by its temporal focus, but it never names or explicitly contrasts with any sibling.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
There is no statement of when to use this tool versus alternatives such as policy_updates, get_regulations, or regulation_summary, nor any prerequisites or exclusions. The only usage signal is the implied 'upcoming dates' context, which the agent must infer.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_regulationsA
Search and filter AI regulations by jurisdiction, category, and status. Returns comprehensive regulatory information including requirements, deadlines, and penalties.
| Name | Required | Description | Default |
|---|---|---|---|
| search | No | Search term to filter regulations by name or description | |
| status | No | Filter by status: active, enacted, draft, bill, guidance | |
| category | No | Filter by category: privacy, safety, transparency, governance, risk-management, algorithmic-accountability | |
| jurisdiction | No | Filter by jurisdiction (US, EU, UK, CA, CN, SG) - case insensitive |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden. It usefully discloses that results include requirements, deadlines, and penalties, but says nothing about read-only nature (inferable from 'Search'), result volume, pagination, or rate limits. Partial behavioral coverage for a zero-annotation tool.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences, front-loaded with the action and filters, and no filler. The second sentence is somewhat general but still earns its place given the absence of an output schema.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
With no output schema and four optional filters, the description does the right thing by sketching the return payload (requirements, deadlines, penalties). It falls short only on result-size/pagination behavior, which an agent might still need.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so all four parameters (search, status, category, jurisdiction) are already documented with allowed values in the schema. The description only restates the filter dimensions and adds no syntax, format, or combination guidance beyond that, so the baseline 3 applies.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description pairs a specific verb ('Search and filter') with the resource ('AI regulations') and names the filter axes, so the agent knows exactly what the tool does. It does not differentiate itself from siblings like regulation_summary or jurisdiction_compare, which is the only thing keeping it out of the top band.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Usage is implied by the search/filter framing, but there is no explicit statement of when to reach for this tool versus regulation_summary or jurisdiction_compare, nor any exclusions or prerequisites. Adequate but leaves the agent to infer routing.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
jurisdiction_compareB
Compare AI regulations across multiple jurisdictions. Analyze differences in approach, requirements, timelines, and penalties.
| Name | Required | Description | Default |
|---|---|---|---|
| focus_area | No | Specific area to focus on: privacy, safety, transparency, penalties, timelines | |
| jurisdictions | Yes | Jurisdictions to compare (e.g., ['EU', 'US', 'UK']) |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full behavioral burden, but it discloses nothing about data freshness, whether the comparison is generated or retrieved, latency, or any access constraints. It only restates the analytical dimensions already implied by the focus_area field.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two short sentences, front-loaded with the core verb and resource, then the analysis scope. No filler or redundancy.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a two-parameter read tool with a fully documented schema this is minimally adequate, but with no annotations and no output schema the description should say something about what a comparison returns (structured table, narrative, per-dimension breakdown) and any jurisdiction count limits.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so both parameters are already documented with examples and allowed focus values. The description lists comparison dimensions (approach, requirements, timelines, penalties) that loosely echo the focus_area options but add no syntax, format, or defaulting information beyond the schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb ('Compare') and resource ('AI regulations across multiple jurisdictions'), plus the dimensions of comparison. This is clearly distinguishable from get_regulations and regulation_summary by intent, though the description never names an alternative to reinforce the distinction.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No explicit guidance on when to choose this over regulation_summary (single-jurisdiction summary) or get_regulations (fetch). Usage is only weakly implied by the cross-jurisdiction framing, and there are no prerequisites or exclusions stated.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
policy_updatesC
Get recent policy changes and regulatory updates in AI governance. Track the latest developments across jurisdictions.
| Name | Required | Description | Default |
|---|---|---|---|
| days_back | No | Number of days to look back (default: 90) | |
| regulation | No | Filter by specific regulation | |
| impact_level | No | Filter by impact level: high, medium, low | |
| jurisdiction | No | Filter by jurisdiction (US, EU, UK, CA, CN, SG) |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the full behavioral burden. It implies a read operation but says nothing about return format, pagination, data sources, refresh cadence, or whether results are limited to a default window β all meaningful gaps for a 'latest updates' feed.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two short sentences with the core purpose front-loaded. The second sentence largely restates the first ('latest developments' vs 'recent policy changes'), so it earns less than a full 5.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a 4-param, no-required-filter read tool with no annotations and no output schema, the description covers what it does but not what comes back or how it differs from near-identical siblings. It is minimally viable but leaves real gaps an agent would need filled.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, and all four filters (days_back, regulation, impact_level, jurisdiction) are documented in the schema itself. The description only faintly gestures at jurisdictions ('across jurisdictions') and adds no syntax, default, or filtering semantics beyond the schema, so the baseline 3 applies.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description names a clear verb (Get) and resource (recent policy changes and regulatory updates in AI governance), so an agent knows what it retrieves. However, it does not differentiate itself from siblings like get_regulations or regulation_summary, which sound like they could return overlapping content.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
There is no explicit when-to-use guidance and no mention of alternatives. 'Track the latest developments' weakly implies a recency/timeliness focus, but with three related siblings (get_regulations, regulation_summary, compliance_calendar) the agent gets no signal for choosing this tool over them.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
regulation_summaryA
Get detailed breakdown of a specific AI regulation including full requirements, timelines, penalties, and implementation guidance.
| Name | Required | Description | Default |
|---|---|---|---|
| regulation_id | Yes | Regulation ID (e.g., 'eu-ai-act', 'ccpa', 'nist-ai-framework') |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the full behavioral burden. 'Get' implies a non-mutating read, and it discloses the content scope (requirements, timelines, penalties, guidance), but it says nothing about auth requirements, rate limits, or whether lookup can fail on unknown IDs.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
A single front-loaded sentence that packs the verb, resource, and returned content areas with no filler. Nothing is wasted.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a one-parameter read tool with no output schema, the description is complete enough: it tells the agent what content the breakdown contains. The main gap is routing guidance relative to its five siblings.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100% and the regulation_id parameter already documents format with concrete examples ('eu-ai-act', 'ccpa'). The description adds no meaning beyond the schema, so the 3 baseline applies.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb ('Get detailed breakdown') and resource ('a specific AI regulation'), plus enumerates the returned content areas. It implies a single-regulation lookup vs. the sibling get_regulations list, but never names that distinction explicitly.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Usage is only implied: an agent infers this is for deep detail on one regulation by ID, versus list/browse tools. There is no explicit when-to-use, when-not, or reference to any sibling such as get_regulations or jurisdiction_compare.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
risk_assessmentB
Assess compliance risks for an AI use case across specified jurisdictions. Provides risk levels, classification, and specific requirements based on use case.
| Name | Required | Description | Default |
|---|---|---|---|
| use_case | Yes | AI use case (e.g., 'healthcare-diagnosis', 'hiring-screening', 'content-moderation', 'financial-credit-scoring', 'autonomous-vehicle', 'chatbot-customer-service') | |
| jurisdictions | Yes | Jurisdictions to assess (US, EU, UK, CA, CN, SG) | |
| custom_description | No | Custom description if use case not in templates |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden and does disclose the return content (risk levels, classification, specific requirements), which is real behavioral value. However, it does not state that this is a read-only/computational operation, whether unknown use cases fall back to templates or custom_description, or whether the assessment is deterministic.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two tight sentences with the action front-loaded and the deliverable second; no filler. It could have used the second sentence's space to cover routing or fallback behavior, but nothing present is wasted.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
No output schema exists, and the description does describe the return values, which is the right call. Still, for an unannotated tool with no output schema it omits fallback behavior for non-template use cases and any guidance on choosing jurisdictions, leaving meaningful gaps.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so the schema already documents use_case, jurisdictions, and custom_description with examples. The description only echoes these ('use case', 'specified jurisdictions') and adds no syntax, format, or interaction detail beyond the schema, so the baseline 3 applies.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb and resource: 'Assess compliance risks for an AI use case across specified jurisdictions,' plus the output shape (risk levels, classification, requirements). An agent can distinguish it from get_regulations or regulation_summary, though it never names a sibling explicitly.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description never says when to reach for this tool versus get_regulations, jurisdiction_compare, or regulation_summary, nor does it state any exclusions or prerequisites. Usage is only inferable from the phrase 'based on use case,' which is thin for a domain with five sibling tools.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
6 tool updates
v1.0.1- First observed
compliance_calendar - First observed
get_regulations - First observed
jurisdiction_compare - First observed
policy_updates - First observed
regulation_summary - First observed
risk_assessment
TDQS
Scored across 6 tools
Most tools target distinct facets of AI compliance information, but get_regulations and regulation_summary overlap since both retrieve regulatory details. Descriptions clarify the difference between broad search/filter and focused single-regulation breakdown, though an agent could still misselect when seeking one regulation's details.
All names use snake_case and are readable, but conventions are mixed: get_regulations uses verb_noun while the other five are noun phrases or noun_noun compounds. There is no predictable action-first pattern across the set.
Six tools is well-scoped for an AI compliance calendar server. Each tool covers a clear capability area without obvious redundancy or excessive breadth.
The surface covers regulatory search, deadlines, summaries, risk assessment, policy updates, and jurisdiction comparison, which is strong for an informational compliance calendar. Minor gaps exist around tracking or alerting on specific deadlines, but core workflows are covered.
Maintenance
Related MCP Connectors
Verified, tier-0 regulatory data for AI across 850+ official sources and 50+ jurisdictions.
Multi-jurisdictional AI compliance readiness scoring with sourced penalty math.
AI laws from 110+ countries, enforcement actions and a 3,900-term glossary. Free, no API key.
Register every AI agent, log every action, prove it. EU AI Act compliance built in.
Related MCP Servers
- FlicenseAqualityDmaintenanceEnables users to search and monitor European regulatory publications including GDPR, ISO27001, and AI Act. Supports creating monitoring topics, generating compliance briefs, and setting up notifications for regulatory updates.5-

brehon-mcp-serverofficial
AlicenseNot gradedqualityDmaintenanceProvides AI assistants with real-time, structured access to 32 privacy and AI governance laws across 28 jurisdictions to prevent hallucination in compliance answers.0MIT- AlicenseAqualityDmaintenanceSource-verified regulatory and compliance intelligence: 10,000+ obligations across 39 pillars, each grounded in a primary legal source with a content hash. Covers the EU AI Act, GDPR, DORA, NIS2, HIPAA, Basel III and the MITRE ATT&CK/ATLAS families.251MIT
- AlicenseNot gradedqualityCmaintenanceComputes multi-jurisdictional AI compliance readiness scores with sourced penalty math, enabling gap analysis and audit tier recommendations.MIT