Server data from the Official MCP Registry
NYC Local Law 144 AEDT bias audit — selection rate, impact ratio (4/5ths), public summary
About
NYC Local Law 144 AEDT bias audit — selection rate, impact ratio (4/5ths), public summary
Security Report
This MCP server implements NYC Local Law 144 bias audit calculations with reasonable core logic. However, it contains a critical data persistence vulnerability: the `_sigil` function logs audit operation details and previous digests to an unencrypted local file without access controls, creating a record of all audited categories and group counts. Additionally, the sigil mechanism itself uses inadequate cryptographic practices (16-char SHA256 prefix, no HMAC, no integrity verification). File permissions are unspecified, and the log file location is world-writable by default. While the audit calculations themselves are sound, these security gaps are inappropriate for legally-required compliance records that may contain sensitive employment data patterns. Supply chain analysis found 6 known vulnerabilities in dependencies (0 critical, 5 high severity). Package verification found 1 issue.
4 files analyzed · 12 issues found
Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.
Permissions Required
This plugin requests these system permissions. Most are normal for its category.
How to Install
Add this to your MCP configuration file:
{
"mcpServers": {
"io-github-csoai-org-ll144-bias-audit-mcp": {
"args": [
"ll144-bias-audit-mcp"
],
"command": "uvx"
}
}
}Documentation
View on GitHubFrom the project's GitHub README.
ll144-bias-audit-mcp
NYC Local Law 144 requires an independent annual bias audit of any Automated Employment Decision Tool (AEDT), with a published summary, before use. This computes the required metrics and signs the result. CSOAI Layer-0.
Tools
run_bias_audit(category, groups)— selection rate + impact ratio per group; flags impact ratio < 0.80 (4/5ths rule)generate_ll144_summary(audits, tool_name, audit_date)— the publishable summary + overall compliancecheck_compliance(...)— the procedural requirements (independent audit, published summary, candidate notice, ≤12 months)
Recurring, legally-required (DCWP-enforced). Apache-2.0.
Reviews
No reviews yet
Be the first to review this server!
More Developer Tools MCP Servers
Paperclip
Freeby Paperclipai · Developer Tools
Trending hip-hop artist momentum scores across four cultural dimensions.
Git
Freeby Modelcontextprotocol · Developer Tools
Read, search, and manipulate Git repositories programmatically
Toleno
Freeby Toleno · Developer Tools
Toleno Network MCP Server — Manage your Toleno mining account with Claude AI using natural language.
mcp-creator-python
Freeby mcp-marketplace · Developer Tools
Create, build, and publish Python MCP servers to PyPI — conversationally.
MCP Marketplace
Freeby mcp-marketplace · Developer Tools
Search and install MCP servers from inside your AI client.
MarkItDown
Freeby Microsoft · Content & Media
Convert files (PDF, Word, Excel, images, audio) to Markdown for LLM consumption