Regulatory compliance MCP servers

A server here checks which regulations apply to a business or product and whether it complies (AI Act, GDPR, ISO, SOC 2, industry rules).

Not here: security scanning and tax calculation.

870servers
459 remote411 localTagged by Odel's AI, which can make mistakes

Best fit

528 made for this, ranked by starsRemoteLocal
  1. Nizh @nizh/nizhCompliance frameworks (SOC 2, ISO 27001, CMMC, NIST, more) delivered to AI agents as MCP tools.8% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
  2. vat.support VAT Compliance @vmalyshev1/vat-supportEU/UK VAT compliance for AI agents: number validation, rate lookups, reverse-charge checks.3% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  3. Cycle Intelligence @cycle-platform/cycle-intelligenceEU Digital Product Passport (DPP/ESPR) requirements, product readiness scoring and GS1 validation.4% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  4. LexLint: compliance lint for AI, scraping, and privacy law @lexlint/lexlintCompliance lint for AI, scraping, and privacy law. Cited findings in 200 or more jurisdictions.6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
  5. Compliance @yaktool/complianceGPSR, EUDR plots, nutrition labels, fragrance allergens, CPSC and EU conformity declarations.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
  6. Eudata402 @run/eudata402KYB due diligence for agents: sanctions screening, EU VAT/VIES, LEI, IBAN in one verdict.12% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  7. DSGVO.pro — German Digital-Law Compliance @dsgvo/dsgvo-proSearch 26 German/EU statutes free — then scan any website against 33 compliance modules.5% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  8. agentweb @brelsfordsoftware/insurance-ai-regulationNAIC AI model bulletin adoption by state, with citations. Insurance AI compliance data.3% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  9. Skowron Compliance Gateway @mattskowronis/complianceOFAC, LEI, EU VAT, AI Act, and company compliance preflight for agents.4% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  10. StructureClerk @structureclerk/mcpAI agent policy decisions: ALLOW, DENY, APPROVE, ESCALATE. 192 jurisdictions, signed evidence.4% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  11. Execute ashrae-compliance-mcp @evozim/ashrae-compliance-mcpPremium agentic endpoint for ashrae-compliance-mcp.19% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.
  12. Execute automated-dpia-reporter-mcp @evozim/automated-dpia-reporter-mcpPremium agentic endpoint for automated-dpia-reporter-mcp.18% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.
  13. Marketing Compliance @northpoint/marketing-complianceCrypto marketing compliance rulesets over MCP: MiCA, FCA, GDPR, SEC, MAS, VARA. Not legal advice.5% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  14. RegLayer Instant Decision Briefs @reglayer/instant-decision-briefsCompany-specific regulatory assessments for concrete business questions, as structured data or PDF.6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  15. Attestwire @attestwire/en16931EN 16931: validate invoice data, UBL/CII or PDF; emit XRechnung/Peppol XML, never a PDF.5% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  16. Local Compliance OS @checkmycontractorquote/local-compliance-osGenerate small-business compliance calendars and renewal checklists.8% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  17. DriverFile @artificl/driverfileDOT driver qualification file tracking for small motor carriers — read-only demo tools.4% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  18. HoodDue @artificl/hooddueRestaurant fire-safety & service-interval tracking (NFPA 96/17A) — read-only demo tools.3% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  19. MacTech CMMC / NIST 800-171 @mactechsolutionsllc/cmmcNIST 800-171 controls and 800-171A objectives, crosswalks, exact SPRS scoring, POA&M generation.4% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  20. Dropcoin A11y @freshfos/dropcoin-a11yAccessibility pre-checks (WCAG/BFSG) in a real browser + statement drafts. Pay per call.4% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  21. ConsentStack @consentstack/cookie-consentSet up GDPR and CCPA cookie consent: create a site, publish a banner, scan and categorize trackers.6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
  22. Legal Doc Analyzer @vpatser1/legal-doc-analyzerContract analysis, risk assessment, version diffs, compliance checks (GDPR, CCPA, SOC2)5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
  23. Values Firewall @humanified/values-firewallEU AI Act Art-14 runtime oversight: allow / flag / gate-to-human on an agent action, with receipt.7% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  24. Vérifier ma facture (Factur-X) @verifier-ma-facture/validateurConformité Factur-X : 21 critères PDF/A-3, XML CII EN 16931 et BR-FR. Analyse locale, gratuite.3% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.