EU AI Act Compliance MCP
EU AI Act risk classification, 42-point audit, documentation generation, penalties and deadlines by MEOK AI Labs
EU AI Act + Multi-Regulation Compliance MCP Server
Buy Starter — £29/mo
Signed attestations + unlimited audits + email support. 👉 Subscribe at meok.ai — instant HMAC signing key + Stripe-managed billing.
Free tier remains MIT-licensed and zero-config. Upgrade only when you need signed compliance artefacts for audit.
Six EU regulations, one MCP. Verbatim text + active compliance scanning + cryptographic attestations.
Covers EU AI Act · DORA · NIS2 · Cyber Resilience Act · CSRD · GDPR — 400+ articles indexed for FTS5 search, every quote auditor-defensible, every citation linked back to the canonical EUR-Lex URL.
🆕 v1.4 — Verbatim EU regulation text from publications.europa.eu Cellar SPARQL, in SQLite FTS5. Daily sync.
Search regulation text · Quote full articles · Classify AI risk levels · Run 42-point audits · Generate Annex IV docs · Assess penalties · Track deadlines · Sign attestations
Installation · Tools · Docs · Report Bug
Quick Install
| Client | Install |
|---|---|
| Claude Desktop | |
| Cursor | |
| VS Code | |
| Windsurf | |
| Docker | docker run -p 8000:8000 eu-ai-act-compliance-mcp |
| pip | pip install eu-ai-act-compliance-mcp |
Connect via MCPize
Use this MCP server instantly with no local installation:
npx -y mcpize connect @meok-ai-labs/eu-ai-act-compliance --client claude
Or connect at: https://mcpize.com/mcp/eu-ai-act-compliance
Quick Start
pip install eu-ai-act-compliance-mcp
# or
npm install -g @meok-ai/eu-ai-act-compliance-mcp
Why This Exists
The EU AI Act (Reg 2024/1689) is now in force. Following the March 2026 Digital Omnibus vote, the timeline shifted:
- Article 50 transparency obligations: 2 November 2026 (was August 2026)
- Annex III high-risk systems: 2 December 2027 (was August 2026)
- Annex I high-risk systems: 2 August 2028 (was August 2027)
Penalties remain unchanged: up to €35M or 7% of global turnover.
Most teams are using PDF binders and Word checklists to track Article 6 risk classifications, Article 26(9) FRIA artifacts, and Article 50 disclosures. When a regulator asks "how do we know this artifact wasn't fabricated last week?", the answer today is "trust us".
This MCP turns Article 6 / 26(9) / 50 obligations into a single AI-agent-callable tool, signs each artifact with HMAC-SHA256, and gives you a verifiable URL the auditor can curl independently.
Real Usage Example
A German Mittelstand HR-tech firm needed to dry-run their Article 6 classification + Article 26(9) FRIA for a CV-screening AI. Their compliance lead installed this MCP into Claude Code:
pip install eu-ai-act-compliance-mcp
Then prompted Claude:
"Classify our CV-scoring product against EU AI Act Article 6. Treat it as Annex III (employment). Generate the risk-tier rationale and the high-risk obligations checklist. Then produce the Article 26(9) FRIA. Sign with the attestation API."
Result: 49-page audit pack with cryptographically verifiable HMAC-signed sections in ~14 hours of review time.
Traditional consulting estimate: 230 hours / £42-62K.
Saved: ~£40K and 4-5 weeks.
Tools
🆕 v1.4 — EUR-Lex Search (free tier)
| Tool | Description |
|---|---|
search_regulation | Full-text FTS5 search across verbatim EU regulation text (EU AI Act, DORA, NIS2, CRA, CSRD, GDPR). Returns 64-token snippets with relevance scores and a canonical EUR-Lex URL for every hit. |
get_article_text | Return the full verbatim text of a single article (e.g. GDPR Article 33) plus its canonical EUR-Lex URL. Drop straight into audit evidence packs. |
list_regulations_in_db | List all regulations in the local DB with article counts + last-sync date. |
Core compliance tools
| Tool | Description |
|---|---|
quick_scan | One-sentence AI system description → instant risk classification (no API key) |
deadline_check | All EU AI Act enforcement deadlines with days remaining (zero params) |
classify_ai_risk | Detailed Article 5/6/50 risk classification |
check_compliance | 42-point compliance audit against Annex I-IX |
generate_annex_iv_docs | Article 11 technical documentation generator |
assess_penalties | Penalty exposure calculator (up to €35M or 7% global turnover) |
multi_jurisdiction_map | Cross-border compliance mapping |
predict_risk_neural | Neural-net risk prediction (Pro tier) |
neural_insights | Compliance pattern insights from training data (Pro tier) |
Example: search the EU AI Act for "biometric"
result = search_regulation(query="biometric", regulation="eu-ai-act", limit=3)
Returns matched snippets from Article 3 (definitions), Article 5 (prohibitions), Article 26 (deployer duties), with relevance scores and >>>highlight<<< markers.
Why FTS5?
- Verbatim text — no LLM summarization, every quote is auditor-defensible
- Token-safe — 64-token snippets fit in any context window
- Daily sync — GitHub Actions polls EUR-Lex Atom feed at 06:00 UTC
- Stdlib only — no Postgres, no external deps
x402 Payment Deployment
Deploy this server with x402 micropayments so AI agents can pay per-call in USDC on Base L2 — no API keys, no subscriptions, no accounts. The x402_server.ts wrapper gates high-value tools behind USDC payments while keeping discovery tools free.
Quick Start
# 1. Install the x402 wrapper dependencies
npm install x402-mcp zod
# 2. Start the underlying Python MCP server
pip install -r requirements.txt
python server.py & # runs on :8000
# 3. Start the x402 payment wrapper
USDC_WALLET_ADDRESS=0xYourBaseWalletAddress npx tsx x402_server.ts
Environment Variables
| Variable | Required | Description |
|---|---|---|
USDC_WALLET_ADDRESS | Yes | Your Base L2 USDC receiving address (0x...) |
EU_AI_ACT_MCP_URL | No | URL of the Python MCP server (default: http://localhost:8000) |
Pricing Tiers (x402 per-call)
| Tool | Price | Description |
|---|---|---|
quick_scan | Free | One-sentence → instant risk classification |
deadline_check | Free | All enforcement deadlines with days remaining |
search_regulation | Free | FTS5 search across 410 EU regulation articles |
list_regulations_in_db | Free | List regulations in the database |
assess_penalties | Free | Penalty calculator (Article 99) |
get_timeline | Free | Implementation timeline |
multi_jurisdiction_map | Free | Cross-border compliance mapping |
classify_ai_risk | $0.01 | Detailed Article 5/6/Annex III risk classification |
check_compliance | $0.05 | 42-point Articles 9-15 compliance audit |
generate_documentation | $0.25 | Annex IV technical documentation template |
audit_report | $0.50 | Full compliance audit report (all-in-one) |
How Agents Connect and Pay
Agents using x402-compatible MCP clients (e.g. Claude, Cursor, custom agents with x402 wallets) connect to this server over HTTP. When an agent calls a paid tool:
- The server responds with HTTP
402 Payment Requiredand an x402 payment challenge - The agent's wallet signs a USDC transfer on Base L2 for the tool's price
- The server verifies the payment and executes the tool
- USDC arrives in your
USDC_WALLET_ADDRESS— no intermediary
Free tools (quick_scan, deadline_check, etc.) respond immediately without any payment challenge.
Docker Deployment
FROM node:22-slim AS wrapper
WORKDIR /app
COPY package.json package-lock.json ./
RUN npm ci
COPY x402_server.ts .
ENV USDC_WALLET_ADDRESS=0xYourBaseWalletAddress
ENV EU_AI_ACT_MCP_URL=http://python-server:8000
CMD ["npx", "tsx", "x402_server.ts"]
Architecture
┌─────────────────────┐ ┌──────────────────────┐ ┌─────────────────────┐
│ AI Agent / LLM │────▶│ x402_server.ts │────▶│ server.py (Python) │
│ (x402 wallet) │◀────│ (payment gate) │◀────│ EU AI Act tools │
│ │ 402 │ │ │ │
│ Pays USDC on call │ │ Verifies payment │ │ Runs compliance │
│ │ │ Proxies to Python │ │ analysis │
└─────────────────────┘ └──────────────────────┘ └─────────────────────┘
│
▼
USDC → your wallet
Pricing
| Tier | Price | What you get |
|---|---|---|
| Free | £0/forever | 10 calls/day — quick_scan, deadline_check, risk classification (summary) |
| Starter | £29/mo | 100 calls/day — full detailed analysis + Annex IV docs + audit reports |
| Professional | £79/mo | 1,000 calls/day — multi-jurisdiction mapping + neural predictions + attestations |
| Enterprise | Custom | Unlimited — on-premise + custom models + SLA + SSO |
If this tool helps your compliance workflow, please star this repo — it helps other compliance teams find it and keeps it maintained.
→ Subscribe to Pro · Enterprise · Book assessment
Attestation API
Every Pro/Enterprise audit produces a cryptographically signed certificate:
POST https://meok-attestation-api.vercel.app/sign
→ { cert_id, verify_url, hmac_sha256, valid_until }
Verify any certificate: https://meok-attestation-api.vercel.app/verify/{cert_id}
Or install the zero-dep verifier: pip install meok-attestation-verify
Star History
Need Full EU AI Act Compliance?
This MCP gives you the tools — councilof.ai gives you the full platform.
| Tier | Price | What You Get |
|---|---|---|
| Starter | £29/mo | Automated risk classification + deadline tracking |
| Pro | £79/mo | Full audit packs + HMAC-signed attestations |
| Enterprise | £1,499/mo | Dedicated compliance support + Notified Body prep |
| Gap Analysis | £5,000 | 48-hour expert assessment with signed report |
→ Get started at councilof.ai — 100x cheaper than traditional compliance consulting.
Support & Enterprise
- GitHub Discussions
- Report Issues
- Enterprise support: [email protected]
- Website: meok.ai
- All MCP servers: meok.ai/labs/mcp/servers
- Attestation API: meok-attestation-api.vercel.app
- Compliance platform: councilof.ai
License
MIT © MEOK AI Labs
相關伺服器
SEOMCP
AI-native SEO service via MCP — gives Claude native access to keyword research, rank tracking, site audits, backlink analysis, and autonomous SEO agent workflows.
Tripletex MCP Server
MCP server for Tripletex — Norwegian ERP and accounting platform. Invoices, customers, employees, projects, and ledger entries.
Scenario Word
A server for the scenario-word MCP, built with the mcp-framework.
Watermark Attestation MCP
EU AI Act Article 50 watermarking compliance — C2PA metadata, AI-generated content labeling, provenance attestation for Nov 2026 deadline
Funding Rate MCP
Hyperliquid perpetual funding rate scanner. Scans 229 markets for extreme hourly rates — a known, published-in-advance edge for collecting funding payments.
Time Server
An MCP server that exposes datetime information to agentic systems and chat REPLs.
Uniswap MCP Server
MCP server for Uniswap — swap routing, pool data, and liquidity queries across all supported chains.
retailerapi
Unified product data across major US retailers (Walmart, Amazon, eBay, Target, Best Buy, Lowe's, Home Depot): lookups, price history, sellers, reviews.
Wordle MCP - Go
Fetches daily Wordle solutions using the official Wordle API.
Zo
Zo is your personal vibe server in the cloud with 50+ tools and integrations. Add texting, email, calendar, research and more to your harness easily.