EU AI Act Compliance MCP
EU AI Act risk classification, 42-point audit, documentation generation, penalties and deadlines by MEOK AI Labs
EU AI Act + Multi-Regulation Compliance MCP Server
Buy Starter — £29/mo
Signed attestations + unlimited audits + email support. 👉 Subscribe at meok.ai — instant HMAC signing key + Stripe-managed billing.
Free tier remains MIT-licensed and zero-config. Upgrade only when you need signed compliance artefacts for audit.
Six EU regulations, one MCP. Verbatim text + active compliance scanning + cryptographic attestations.
Covers EU AI Act · DORA · NIS2 · Cyber Resilience Act · CSRD · GDPR — 400+ articles indexed for FTS5 search, every quote auditor-defensible, every citation linked back to the canonical EUR-Lex URL.
🆕 v1.4 — Verbatim EU regulation text from publications.europa.eu Cellar SPARQL, in SQLite FTS5. Daily sync.
Search regulation text · Quote full articles · Classify AI risk levels · Run 42-point audits · Generate Annex IV docs · Assess penalties · Track deadlines · Sign attestations
Installation · Tools · Docs · Report Bug
Quick Install
| Client | Install |
|---|---|
| Claude Desktop | |
| Cursor | |
| VS Code | |
| Windsurf | |
| Docker | docker run -p 8000:8000 eu-ai-act-compliance-mcp |
| pip | pip install eu-ai-act-compliance-mcp |
Connect via MCPize
Use this MCP server instantly with no local installation:
npx -y mcpize connect @meok-ai-labs/eu-ai-act-compliance --client claude
Or connect at: https://mcpize.com/mcp/eu-ai-act-compliance
Quick Start
pip install eu-ai-act-compliance-mcp
# or
npm install -g @meok-ai/eu-ai-act-compliance-mcp
Why This Exists
The EU AI Act (Reg 2024/1689) is now in force. Following the March 2026 Digital Omnibus vote, the timeline shifted:
- Article 50 transparency obligations: 2 November 2026 (was August 2026)
- Annex III high-risk systems: 2 December 2027 (was August 2026)
- Annex I high-risk systems: 2 August 2028 (was August 2027)
Penalties remain unchanged: up to €35M or 7% of global turnover.
Most teams are using PDF binders and Word checklists to track Article 6 risk classifications, Article 26(9) FRIA artifacts, and Article 50 disclosures. When a regulator asks "how do we know this artifact wasn't fabricated last week?", the answer today is "trust us".
This MCP turns Article 6 / 26(9) / 50 obligations into a single AI-agent-callable tool, signs each artifact with HMAC-SHA256, and gives you a verifiable URL the auditor can curl independently.
Real Usage Example
A German Mittelstand HR-tech firm needed to dry-run their Article 6 classification + Article 26(9) FRIA for a CV-screening AI. Their compliance lead installed this MCP into Claude Code:
pip install eu-ai-act-compliance-mcp
Then prompted Claude:
"Classify our CV-scoring product against EU AI Act Article 6. Treat it as Annex III (employment). Generate the risk-tier rationale and the high-risk obligations checklist. Then produce the Article 26(9) FRIA. Sign with the attestation API."
Result: 49-page audit pack with cryptographically verifiable HMAC-signed sections in ~14 hours of review time.
Traditional consulting estimate: 230 hours / £42-62K.
Saved: ~£40K and 4-5 weeks.
Tools
🆕 v1.4 — EUR-Lex Search (free tier)
| Tool | Description |
|---|---|
search_regulation | Full-text FTS5 search across verbatim EU regulation text (EU AI Act, DORA, NIS2, CRA, CSRD, GDPR). Returns 64-token snippets with relevance scores and a canonical EUR-Lex URL for every hit. |
get_article_text | Return the full verbatim text of a single article (e.g. GDPR Article 33) plus its canonical EUR-Lex URL. Drop straight into audit evidence packs. |
list_regulations_in_db | List all regulations in the local DB with article counts + last-sync date. |
Core compliance tools
| Tool | Description |
|---|---|
quick_scan | One-sentence AI system description → instant risk classification (no API key) |
deadline_check | All EU AI Act enforcement deadlines with days remaining (zero params) |
classify_ai_risk | Detailed Article 5/6/50 risk classification |
check_compliance | 42-point compliance audit against Annex I-IX |
generate_annex_iv_docs | Article 11 technical documentation generator |
assess_penalties | Penalty exposure calculator (up to €35M or 7% global turnover) |
multi_jurisdiction_map | Cross-border compliance mapping |
predict_risk_neural | Neural-net risk prediction (Pro tier) |
neural_insights | Compliance pattern insights from training data (Pro tier) |
Example: search the EU AI Act for "biometric"
result = search_regulation(query="biometric", regulation="eu-ai-act", limit=3)
Returns matched snippets from Article 3 (definitions), Article 5 (prohibitions), Article 26 (deployer duties), with relevance scores and >>>highlight<<< markers.
Why FTS5?
- Verbatim text — no LLM summarization, every quote is auditor-defensible
- Token-safe — 64-token snippets fit in any context window
- Daily sync — GitHub Actions polls EUR-Lex Atom feed at 06:00 UTC
- Stdlib only — no Postgres, no external deps
x402 Payment Deployment
Deploy this server with x402 micropayments so AI agents can pay per-call in USDC on Base L2 — no API keys, no subscriptions, no accounts. The x402_server.ts wrapper gates high-value tools behind USDC payments while keeping discovery tools free.
Quick Start
# 1. Install the x402 wrapper dependencies
npm install x402-mcp zod
# 2. Start the underlying Python MCP server
pip install -r requirements.txt
python server.py & # runs on :8000
# 3. Start the x402 payment wrapper
USDC_WALLET_ADDRESS=0xYourBaseWalletAddress npx tsx x402_server.ts
Environment Variables
| Variable | Required | Description |
|---|---|---|
USDC_WALLET_ADDRESS | Yes | Your Base L2 USDC receiving address (0x...) |
EU_AI_ACT_MCP_URL | No | URL of the Python MCP server (default: http://localhost:8000) |
Pricing Tiers (x402 per-call)
| Tool | Price | Description |
|---|---|---|
quick_scan | Free | One-sentence → instant risk classification |
deadline_check | Free | All enforcement deadlines with days remaining |
search_regulation | Free | FTS5 search across 410 EU regulation articles |
list_regulations_in_db | Free | List regulations in the database |
assess_penalties | Free | Penalty calculator (Article 99) |
get_timeline | Free | Implementation timeline |
multi_jurisdiction_map | Free | Cross-border compliance mapping |
classify_ai_risk | $0.01 | Detailed Article 5/6/Annex III risk classification |
check_compliance | $0.05 | 42-point Articles 9-15 compliance audit |
generate_documentation | $0.25 | Annex IV technical documentation template |
audit_report | $0.50 | Full compliance audit report (all-in-one) |
How Agents Connect and Pay
Agents using x402-compatible MCP clients (e.g. Claude, Cursor, custom agents with x402 wallets) connect to this server over HTTP. When an agent calls a paid tool:
- The server responds with HTTP
402 Payment Requiredand an x402 payment challenge - The agent's wallet signs a USDC transfer on Base L2 for the tool's price
- The server verifies the payment and executes the tool
- USDC arrives in your
USDC_WALLET_ADDRESS— no intermediary
Free tools (quick_scan, deadline_check, etc.) respond immediately without any payment challenge.
Docker Deployment
FROM node:22-slim AS wrapper
WORKDIR /app
COPY package.json package-lock.json ./
RUN npm ci
COPY x402_server.ts .
ENV USDC_WALLET_ADDRESS=0xYourBaseWalletAddress
ENV EU_AI_ACT_MCP_URL=http://python-server:8000
CMD ["npx", "tsx", "x402_server.ts"]
Architecture
┌─────────────────────┐ ┌──────────────────────┐ ┌─────────────────────┐
│ AI Agent / LLM │────▶│ x402_server.ts │────▶│ server.py (Python) │
│ (x402 wallet) │◀────│ (payment gate) │◀────│ EU AI Act tools │
│ │ 402 │ │ │ │
│ Pays USDC on call │ │ Verifies payment │ │ Runs compliance │
│ │ │ Proxies to Python │ │ analysis │
└─────────────────────┘ └──────────────────────┘ └─────────────────────┘
│
▼
USDC → your wallet
Pricing
| Tier | Price | What you get |
|---|---|---|
| Free | £0/forever | 10 calls/day — quick_scan, deadline_check, risk classification (summary) |
| Starter | £29/mo | 100 calls/day — full detailed analysis + Annex IV docs + audit reports |
| Professional | £79/mo | 1,000 calls/day — multi-jurisdiction mapping + neural predictions + attestations |
| Enterprise | Custom | Unlimited — on-premise + custom models + SLA + SSO |
If this tool helps your compliance workflow, please star this repo — it helps other compliance teams find it and keeps it maintained.
→ Subscribe to Pro · Enterprise · Book assessment
Attestation API
Every Pro/Enterprise audit produces a cryptographically signed certificate:
POST https://meok-attestation-api.vercel.app/sign
→ { cert_id, verify_url, hmac_sha256, valid_until }
Verify any certificate: https://meok-attestation-api.vercel.app/verify/{cert_id}
Or install the zero-dep verifier: pip install meok-attestation-verify
Star History
Need Full EU AI Act Compliance?
This MCP gives you the tools — councilof.ai gives you the full platform.
| Tier | Price | What You Get |
|---|---|---|
| Starter | £29/mo | Automated risk classification + deadline tracking |
| Pro | £79/mo | Full audit packs + HMAC-signed attestations |
| Enterprise | £1,499/mo | Dedicated compliance support + Notified Body prep |
| Gap Analysis | £5,000 | 48-hour expert assessment with signed report |
→ Get started at councilof.ai — 100x cheaper than traditional compliance consulting.
Support & Enterprise
- GitHub Discussions
- Report Issues
- Enterprise support: [email protected]
- Website: meok.ai
- All MCP servers: meok.ai/labs/mcp/servers
- Attestation API: meok-attestation-api.vercel.app
- Compliance platform: councilof.ai
License
MIT © MEOK AI Labs
関連サーバー
FreightUtils MCP Server
11 freight logistics tools for AI agents — ADR dangerous goods lookup (2,939 UN entries, UNECE ADR 2025), HS code search (6,940 codes, WCO HS 2022), airline codes (6,352 with AWB prefixes), LDM/CBM/chargeable weight calculators, pallet fitting, container capacity, INCOTERMS 2020, unit converter, and ADR 1.1.3.6 exemption calculator. Free REST APIs + remote MCP endpoint.
Chessmata
3D graphical chess game for humans and agents
MCP Trakt
Access real-time entertainment data and personal viewing history from the Trakt.tv API.
MCP Simple Timeserver
Provides current local time, UTC time, and timezone information.
Phone Carrier Detector
Detects Chinese mobile phone carriers, including China Mobile, China Unicom, China Telecom, and virtual operators.
Meshh FX
Power your agents with deep Japan macro fx knowledge.
Demand Discovery AI™
Validate startup ideas without leaving your IDE — the demand-signal MCP for "should I build this?"
CraftedTrust
Independent trust verification for MCP servers. 7-factor trust scoring, 3,400+ packages indexed, embeddable badges, free API. Agents can query trust scores natively via MCP protocol.
Procountor MCP Server
MCP server for Procountor — Finland's leading financial management platform. Invoices, business partners, ledger entries, and more.
Runframe
Incident management MCP server. Acknowledge, escalate, page, and resolve incidents, check on-call, manage services, postmortems, and teams from any MCP client.