RuleMesh MCP
Engineered Compliance Infrastructure for engineers and AI agents.
RuleMesh delivers engineered rules for GDPR: what each obligation requires, how to execute it with framework-specific controls, and what evidence proves it was done. It runs as a hosted remote MCP server at https://api.rulemesh.com/mcp (Streamable HTTP, OAuth login), consumable from any MCP client.
This repo is the canonical home for the server's listing (server.json, published to the MCP Registry as com.rulemesh/compliance) and client setup docs.
Connect
You authenticate once in the browser (email/password or Google); no API key to manage. A RuleMesh account is required — the FREE tier covers GDPR and all mapped frameworks.
OpenAI Codex
Add to ~/.codex/config.toml:
[features]
rmcp_client = true # enables the remote MCP client (use experimental_use_rmcp_client = true on older Codex)
[mcp_servers.rulemesh]
url = "https://api.rulemesh.com/mcp"
startup_timeout_sec = 30
tool_timeout_sec = 120
Then codex mcp login rulemesh (opens the browser for OAuth), and /mcp in the TUI to confirm the tools loaded.
Claude Code
claude mcp add --transport http rulemesh https://api.rulemesh.com/mcp
Run /mcp and follow the browser login. A packaged plugin is also available at RuleMesh/rulemesh-claude-plugin.
Claude Desktop / Cursor / VS Code / other clients
Add a remote (Streamable HTTP) MCP server pointing at https://api.rulemesh.com/mcp. For example, Claude Desktop (claude_desktop_config.json) or Cursor (.cursor/mcp.json):
{
"mcpServers": {
"rulemesh": {
"type": "streamable-http",
"url": "https://api.rulemesh.com/mcp"
}
}
}
What you get
The server groups its tools around one loop — plan, pull, implement, prove — over 14 tools, 4 prompts, and a regulation resource. GDPR is packaged end to end today; more regulations are in the pipeline.
- Discovery:
list_regulations,list_frameworks,lookup_definition,get_compliance_plan - Implement:
pull_rules,scan_compliance - Prove:
submit_signals,submit_signals_batch - Track:
get_progress,get_ticket_status,get_scan_sessions,start_scan,end_scan,resume_session
Authentication
OAuth 2.1 with PKCE and Dynamic Client Registration. Clients register themselves and open a browser login; tokens refresh automatically.
About RuleMesh
RuleMesh is Engineered Compliance Infrastructure — the engineered rule graph that sits between regulation as written and software as built, consumable by engineers, AI agents, and auditors. It defines what each obligation requires, how to execute it with framework-specific controls, and what evidence proves it was done. GDPR is packaged end to end today; more regulations are in the pipeline. → rulemesh.com
Links
- Product: https://rulemesh.com
- Docs: https://rulemesh.com/docs/mcp
- Privacy: https://rulemesh.com/privacy · Terms: https://rulemesh.com/terms
- Support: support@rulemesh.com