Regulatory compliance MCP servers

A server here checks which regulations apply to a business or product and whether it complies (AI Act, GDPR, ISO, SOC 2, industry rules).

Not here: security scanning and tax calculation.

870servers
459 remote411 localTagged by Odel's AI, which can make mistakes

Best fit

528 made for this, ranked by starsRemoteLocal
  1. Openlane MCP Server @gregdog/mcp-server-theopenlaneMCP server for Openlane GRC: controls, evidence, policies, risks, workflows, and approvals.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.3 GitHub stars.
  2. Ara — audits d'accessibilité RGAA @davidpivert/ara-rgaa-mcpPiloter des audits RGAA 4.1 sur Ara, référentiel embarqué. Non officiel.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.3 GitHub stars.
  3. Inkog @inkog-io/inkogSecurity co-pilot for AI agents. Scan for vulnerabilities, audit MCP servers, verify governance.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.3 GitHub stars.
  4. Air Blackbox @airblackbox/air-blackbox-mcpEU AI Act compliance scanner for Python AI agents. 14 tools across 6 articles.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.3 GitHub stars.
  5. Iso 27001 Ai @csoai-org/iso-27001-ai-mcpIso 27001 Ai MCP Server by MEOK AI Labs8% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.3 GitHub stars.
  6. IFC Ruhsat @berkantacun/ifc-ruhsatYapı ruhsatı IFC modelini Türkiye dijital proje yönetmeliğine (RG 33331) göre denetler; EK-9 formu3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.2 GitHub stars.
  7. VeriSwarm @veriswarm/veriswarm-mcpVeriSwarm MCP Server — Trust infrastructure for AI agents via Model Context Protocol7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.2 GitHub stars.
  8. Compliance Trestle @oscal-compass/compliance-trestle-mcpAn MCP server that provides tools to author OSCAL security compliance documentation3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.2 GitHub stars.
  9. Einvoicing De @cmendezs/mcp-einvoicing-deGerman e-invoicing MCP server: ZUGFeRD 2.x, XRechnung 3.x, EN 16931, KoSIT validation, Peppol.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.2 GitHub stars.
  10. Facturacion Electronica Es @cmendezs/mcp-facturacion-electronica-esSpanish e-invoicing MCP server: VERI*FACTU, Facturae/FACe, SII, Crea y Crece B2B.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.2 GitHub stars.
  11. RegIntel @ad0750/regintel-mcpMCP server for the RegIntel API: regulatory data across 41 jurisdictions, 212 regulations.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.2 GitHub stars.
  12. GDPR Shift-Left Compliance @kevinrabun/gdprshiftleftmcpGDPR compliance MCP server - article lookup, DPIA, ROPA, DSR, IaC analysis, Bicep templates.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.2 GitHub stars.
  13. Contract Review Ai @csoai-org/contract-review-ai-mcpContract Review Ai MCP Server by MEOK AI Labs9% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.2 GitHub stars.
  14. SCF @scfcontrolsplatform/mcp-server-scfMCP server for the SCF Controls Platform — 187 tools for controls, evidence, risk, and TPRM.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.2 GitHub stars.
  15. MedXpert 全球法规连接器 (reg-connector) @zhaoxinghua09-cell/medxpert-reg-connectorRead-only MCP server for global medical-device regulation (NMPA/FDA/MDR/PMDA), 27 hubs, 4 tools.Not assessed yet.Runs on your machine, installed from a package registry.1 GitHub stars.
  16. Compliance Checker @4hmetuyar/compliance-checkerKVKK/GDPR/CCPA compliance checks for codebases7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
  17. Db Gateway @4hmetuyar/db-gatewayKVKK/GDPR-compliant LLM-to-database gateway: PII masking, RBAC, rate limiting, audit log7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
  18. Age Gate Lint @jmshinhwa/age-gate-lint8 rules for Ofcom's highly effective age assurance duty, in force since 25 July 2025, where the pena7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
  19. Accessibility Statement Lint @jmshinhwa/accessibility-statement-lintChecks the accessibility statement you already published against the EU model statement and its two4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
  20. Legalithm @pedrammadani/legalithm-mcp-serverEU AI Act risk classification, obligations and Article 50 disclosures. Offline, no API key.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
  21. Structured Address Fix @sebastienrousseau/structured-address-fix-mcpMCP server for ISO 20022 postal-address remediation ahead of the Nov 2026 CBPR+ cliff.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.1 GitHub stars.
  22. Agent Receipts @dhanushs1912-svg/agent-receipts-mcpEU AI Act-ready audit trail: signed, tamper-evident receipts proving what your AI agents did.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
  23. Kakunin @kakunin-ai/kakuninX.509 identity, risk scoring, and audit logging for AI agents. MiCA + EU AI Act compliant.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
  24. klaws — Korean compliance risk scanner @rostradamus/klawsScan code for Korean compliance risks — PIPA/개인정보보호법, Network Act, Credit Info. Not legal advice.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.1 GitHub stars.