Regulatory compliance MCP servers

A server here checks which regulations apply to a business or product and whether it complies (AI Act, GDPR, ISO, SOC 2, industry rules).

Not here: security scanning and tax calculation.

870servers
459 remote411 localTagged by Odel's AI, which can make mistakes
By GitHub stars, at most two per publisher
  1. Number 1: Attestix@vibetensor/attestixAI agent identity, W3C credentials, EU AI Act compliance. 47 MCP tools.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.874 GitHub stars.
  2. Number 2: Shellward@jnmetacode/shellwardAI agent security: 7 MCP tools for injection detection, PII scanning, command safety, DLP.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.140 GitHub stars.
  3. Number 3: Agentos@imran-siddique/agentosBuild and manage policy-compliant AI agents with safety enforcement and compliance checking6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.74 GitHub stars.

Best fit

528 made for this, ranked by starsRemoteLocal
  1. Cloudwright @xmpuspus/cloudwrightCloud architecture and migration planning with costs, controls, evidence, and deployable IaC.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.32 GitHub stars.
  2. ISO27001 @sushegaad/iso27001-mcpISO 27001 compliance workspace for Claude. Risks, policies, SoA, evidence, and audit workflows.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.32 GitHub stars.
  3. EU regulations @ansvar-systems/eu-regulations-mcpQuery 47 EU regulations (GDPR, NIS2, DORA, AI Act) - 2,438 articles, 3,712 recitals, ISO 270015% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.25 GitHub stars.
  4. AKF @hmakt99/akfTrust metadata for AI agents — check files before building on them, stamp verified work.8% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.19 GitHub stars.
  5. FedRAMP Docs @ethanolivertroy/fedramp-docs-mcpQuery FedRAMP 20x KSIs, NIST controls, and compliance docs via 20 MCP tools.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.17 GitHub stars.
  6. Aegis — AI Agent Governance @acacian/aegisPolicy-based governance for AI agent tool calls. YAML policy, approval gates, audit logging.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.17 GitHub stars.
  7. Vaara MCP Server @vaaraio/vaara-serverAccountable autonomy MCP server: gating, tamper-evident audit for every action5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.15 GitHub stars.
  8. Vaara @vaaraio/vaaraAccountable autonomy proxy: gating, tamper-evident audit, time anchor for every action6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.15 GitHub stars.
  9. Model Ledger @block/model-ledgerModel inventory and governance: trace deployed models and their dependencies as an append-only log3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.15 GitHub stars.
  10. Vanta @mindstone/mcp-server-vantaVanta compliance MCP server: vulnerabilities, tests, controls, evidence, people, vendors, docs4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.12 GitHub stars.
  11. Korean Rnd Regs @smilemin07/korean-rnd-regs-mcpSearch South Korea's national R&D regulations in natural language with cited provisions.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.11 GitHub stars.
  12. GroundLens @groundlens-dev/groundlensVerify AI answers and executions and seal signed, offline-verifiable evidence records.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.7 GitHub stars.
  13. FedRAMP 20x Requirements @kevinrabun/fedramp20xmcpAn MCP server that provides access to FedRAMP 20x security requirements and controls.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.6 GitHub stars.
  14. Presidio Hardened Ikigov Assess @presidio-v/presidio-hardened-ikigov-assessIKI-Gov AI governance assessment: score AI use cases, check quality gates G0-G5, map to EU AI Act.Not assessed yet.Runs on your machine, installed from PyPI.5 GitHub stars.
  15. Kepil @oleg-vdv/kepilPassport, mandate, fail-closed action gate and tamper-evident journal for AI agents.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.5 GitHub stars.
  16. PCI DSS v4.0.1 Compliance Checker @shyshlakov/pci-dss-mcpPCI DSS v4.0.1 compliance scanner for Go payment services, delivered as an MCP server5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.5 GitHub stars.
  17. Regula @kuzivaai/regulaOffline AI governance code indicators (EU AI Act, Korea, Colorado). Indication, not legal advice.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.4 GitHub stars.
  18. ComplyEdge TrustLint — offline EU AI Act compliance checks @complyedge/complyedgeOffline TrustLint checks: EU AI Act Article 5, Article 50, GPAI, plus GDPR and HIPAA.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.4 GitHub stars.
  19. VMware Harden @vmware-skills/vmware-hardenVMware compliance scanning (CIS, vSphere SCG, GB/T 22239, PCI-DSS) with drift detection.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.4 GitHub stars.
  20. ai-audit-trail @sundsoffice-tech/ai-audit-trailTamper-evident audit trails for AI agents — Ed25519-signed, hash-chained, EU AI Act ready.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.4 GitHub stars.
  21. Guardian @rudraneel93/mcp-guardianSecurity, cost, and health governance proxy for MCP infrastructure6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.4 GitHub stars.

Also touches on Regulatory compliance

79 where it is one part of a bigger job