Regulatory compliance MCP servers

A server here checks which regulations apply to a business or product and whether it complies (AI Act, GDPR, ISO, SOC 2, industry rules).

Not here: security scanning and tax calculation.

870servers
459 remote411 localTagged by Odel's AI, which can make mistakes
By GitHub stars, at most two per publisher
  1. Number 1: PRIMAMCP@planit-tech/primamcpVerified, citable German & EU law for any LLM. Daily updates from official sources, hosted in DE.7% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.11 GitHub stars.
  2. Number 2: EU AI Act@ark-forge/mcp-eu-ai-actEU AI Act + GDPR compliance scanner. One call, no arguments, 10 seconds. 22 AI frameworks detected.14% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.11 GitHub stars.
  3. Number 3: Lawbster@planit-tech/lawbsterVerified, citable German & EU law for any LLM. Daily updates from official sources, hosted in DE.9% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.11 GitHub stars.

Best fit

528 made for this, ranked by starsRemoteLocal
  1. DSAIL @jaxon/dsailTurn a written policy into rules a program can check, and get the same answer every time.5% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.9 GitHub stars.
  2. Nucleus @eidetic-works/nucleusSovereign Agent OS — Persistent Memory, Governance & Compliance for AI Agents.10% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.5 GitHub stars.
  3. OpenClaw MCP Ecosystem @yedanyagamiai-cmd/openclaw-mcp-servers9 remote MCP servers on Cloudflare Workers for AI agents. Free tier + Pro API keys.13% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.4 GitHub stars.
  4. Korext: AI Code Governance @korext/governanceGovernance copilot for AI-assisted coding. 72 packs, 532 rules, proof bundles.6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.4 GitHub stars.
  5. Ansvar: EU Regulations @ansvar/eu-regulationsEU regulations (GDPR, DORA, NIS2, AI Act, etc.) via Ansvar Gateway. Cited, OAuth + paid.6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.3 GitHub stars.
  6. US compliance and books health @medianfi/complianceUS company filing obligations, plus a 25-check bookkeeping diagnostic. Sourced, dated, no signup.4% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.3 GitHub stars.
  7. Ansvar: Dutch Law @ansvar/dutch-lawDutch law via Ansvar Gateway. Cited, OAuth + paid tier.5% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.3 GitHub stars.
  8. NOMOS Cross-Border Broker @agentnomos/nomos-crossborder-brokerCross-border preflight, x402 quote and evidence receipts for A2A/MCP agent workflows.7% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.3 GitHub stars.
  9. ThinkNEO Control Plane @thinkneo/control-planeEnterprise AI Control Plane: governance, guardrails, spend tracking, compliance & smart routing.6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.3 GitHub stars.
  10. WhitePact @guruprasath-annadurai/whitepactAI governance MCP server: trust scoring, guardrails, bias/hallucination detection, compliance.10% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.2 GitHub stars.
  11. FaultKey · CausalLayer @smq9sn5jck-cloud/causallayer-mcpDeterministic AI-liability attribution: signed, Bitcoin-anchored vendor/deployer/user fault split.8% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.2 GitHub stars.
  12. VerifiMind PEAS - RefleXion Trinity @creator35lwb-web/verifimind-genesisX-Z-CS AI validation with auditable reasoning. 8 active tools; 5 in maintenance. v0.5.6414% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.2 GitHub stars.
  13. Agent Module @agent-module/mcpDeterministic compliance and vertical knowledge bases for autonomous agents. Free 24hr trial.9% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.2 GitHub stars.
  14. Sovereignty Scan @kajaril/sovereignty-scan-mcpEU AI Act sovereignty scanning. Provider residency, registration status, audit trail support.8% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.1 GitHub stars.
  15. AI 客服国标合规知识库 (GB/T 47746—2026) @savantcat/answers中国 AI 客服国标 GB/T 47746—2026 合规知识库:条款级问答 + 全部 61 项达标自查清单(48 应 + 4 宜 + 9 可,含 5 项一票否决),答案标注条款依据。5% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.1 GitHub stars.
  16. BandSaaS @jyswee/bandsaasLicense your music to AI on your terms, and run your whole artist business. 46 tools, keyless.6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.1 GitHub stars.
  17. Accessibility AI @groundlogic-ai-source/accessibility-aiScan URLs for WCAG 2.1 violations, generate AI fixes, and produce VPAT 2.5 compliance reports.7% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.1 GitHub stars.
  18. AgentAegis @astafford8488/agentaegisPay-per-call cybersecurity for AI agents: vuln scans, threat intel, compliance, code security.9% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.1 GitHub stars.
  19. Gapup @getgapup/gapup-mcp271 agent-payable tools: competitive intel, finance, KYC, compliance, ESG. x402 per-call.5% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.1 GitHub stars.
  20. TracePass @tracepass/tracepassManage products, EU Digital Product Passports, operator parties, and GS1 EPCIS supply-chain events.4% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.1 GitHub stars.
  21. Agent Financial Advisor @mytomclinic/agent-financial-advisorCompliance, risk, tax and audit checks for AI trading agents: pre-trade, sizing, wash sales, Reg BI.Not assessed yet.A remote server; no sign-in.

Also touches on Regulatory compliance

166 where it is one part of a bigger job