Back to Browse

Eu Compliance MCP Server

SecurityModerate5.6MCP RegistryLocal
Free

Server data from the Official MCP Registry

Offline MCP server: EU digital/data/cyber compliance full text (14 regs), verbatim + citations.

About

Offline MCP server: EU digital/data/cyber compliance full text (14 regs), verbatim + citations.

Security Report

5.6
Moderate5.6Moderate Risk

This is an offline EU compliance MCP server that serves verbatim regulation text from a local SQLite FTS5 corpus with parameterized queries, read-only DB access, and a sha256-verified corpus bootstrap. No exfiltration, shell execution, or hardcoded secrets were found; the only network call is a one-time corpus download from the author's GitHub release, and permissions (network_http for bootstrap, file_read for the local DB and cache) match the stated purpose. Minor notes: the corpus download happens without user confirmation, and the FTS query builder and bodies are passed through without further sanitization beyond quoting. Supply chain analysis found 4 known vulnerabilities in dependencies (0 critical, 4 high severity). Package verification found 1 issue.

5 files analyzed · 9 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

HTTP Network Access

Connects to external APIs or services over the internet.

File System Read

Reads files on your machine. Normal for tools that analyze or process local data.

File System Write

Writes or modifies files on your machine. Check that this is expected for the tool.

database

Check that this permission is expected for this type of plugin.

env_vars

Check that this permission is expected for this type of plugin.

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-matematicsolutions-mcp-eu-compliance": {
      "args": [
        "-y",
        "@matematicsolutions/mcp-eu-compliance"
      ],
      "command": "npx"
    }
  }
}

Documentation

View on GitHub

From the project's GitHub README.

mcp-eu-compliance

MCP server exposing an offline corpus of EU law (EUR-Lex, full text) in local SQLite FTS5, with compliance tools. Snippets returned verbatim from the database (zero-LLM) - each with a CELEX id and EUR-Lex URL. Anti-hallucination by mechanism, not by trust in the model.

Scope (14 regulations, digital/data/cyber): GDPR, AI Act, DORA, NIS2, eIDAS 2.0, CRA, DSA, DMA, Data Act, DGA, LED, ePrivacy, Cybersecurity Act, CER.

Complementary to mcp-eu-sparql: that one discovers acts live (SPARQL Cellar), this one provides verbatim text + offline compliance analysis (no network at runtime).

Installation

npm install            # Node 22.5+ (node:sqlite built-in)
npm run fetch-corpus   # downloads regulations.db (~36 MB) from Ansvar (Apache-2.0)
npm run build
npm start

Configuration in the MCP client (e.g. mcp-servers.json):

{
  "name": "eu-compliance",
  "command": "node",
  "args": ["/path/to/mcp-eu-compliance/dist/index.js"]
}

Tools

ToolDescription
eu_search(query, regulations?, limit?)Full-text (FTS5) across articles, verbatim snippets.
eu_article(regulation, article_number)Full article text + title + chapter + CELEX.
eu_compare(query, regulations?)The same topic across several regulations at once (e.g. incident reporting DORA vs NIS2 vs CRA).
eu_check_applicability(sector, subsector?)Which of the 14 regulations apply to a sector, with confidence level and basis article.
eu_evidence(regulation, article?)Evidence artifacts (audit) - which document/log/certificate proves compliance.

Each tool returns structuredContent.citations (regulation, CELEX, EUR-Lex URL, snapshot).

Examples

  • "Compare incident reporting timelines across DORA, NIS2, and CRA" -> eu_compare
  • "What does GDPR Article 33 require?" -> eu_article
  • "Which EU regulations apply to a bank?" -> eu_check_applicability(sector=financial, subsector=bank)
  • "What audit evidence does DORA Article 17 require?" -> eu_evidence

Disclaimers

  • Snapshot, not the authentic source. The authentic version = Official Journal of the EU. The connector returns a point-in-time snapshot; verify currency in EUR-Lex (CELEX). Freshness -> mcp-eu-sparql (live).
  • Applicability rules are expert guidance, not a binding legal assessment. Sector-specific realities may require your own analysis.
  • Reference material, not legal advice.

License and attribution

Citation: MateMatic Solutions (2026), mcp-eu-compliance, https://github.com/matematicsolutions/mcp-eu-compliance, MIT.

Reviews

No reviews yet

Be the first to review this server!