Risk Assessment Ai MCP Server by MEOK AI Labs
This MCP server implements a risk assessment tool with reasonable core functionality but has significant security concerns. The primary issues are: (1) unauthenticated access to all tools despite claims of authentication (the auth check claims to enforce limits but always returns allowed=True in fail-open mode), (2) hardcoded external URLs for metering/verification that could be abused for data exfiltration or become attack vectors if compromised, (3) rate-limiting that is trivially bypassed (client-side only in _rl function), and (4) misleading documentation claiming data privacy while actually allowing unauthenticated use. The server also makes external network calls to proofof.ai for metering without clear user consent. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue.
7 files analyzed · 14 issues found
Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.
This plugin requests these system permissions. Most are normal for its category.
Add this to your MCP configuration file:
{
"mcpServers": {
"io-github-csoai-org-risk-assessment-ai-mcp": {
"args": [
"-y",
"risk-assessment-ai-mcp"
],
"command": "npx"
}
}
}From the project's GitHub README.
mcp-name: io.github.CSOAI-ORG/risk-assessment-ai-mcp
AI risk assessment MCP — NIST AI RMF-aligned risk register with scoring, treatments, controls, an...
AI risk assessment MCP — NIST AI RMF-aligned risk register with scoring, treatments, controls, and signed evidence trail.
# Install via pip
pip install risk_assessment_ai_mcp
# Or install via Smithery
npx -y @smithery/cli@latest install risk-assessment-ai-mcp --client claude
This MCP server is built with EU AI Act compliance built-in:
Need help getting compliant? Book a free 15-min diagnostic →
Need custom development, SLA guarantees, or white-label deployment?
View Pricing → | Contact Sales →
This server is part of the MEOK AI Labs ecosystem — 300+ MCP servers for sovereign AI governance.
| Domain | Purpose |
|---|---|
| councilof.ai | EU AI Act compliance marketplace |
| safetyof.ai | AI safety & monitoring |
| meok.ai | Sovereign AI platform |
| cobolbridge.ai | Legacy modernization |
MIT © CSOAI-ORG
Build something that touches users? You need compliance. MEOK ships 38 governance MCPs that drop in alongside this tool — EU AI Act, DORA, NIS2, CRA, GDPR, ISO 42001, FDA SaMD, MDR, Basel, MiFID II, MiCA, COPPA, and more.
# One-shot install of the governance pack
npx meok-setup --pack governance
Free tier: 10 calls/day per MCP. Pro tier (£79/mo): unlimited + cryptographically signed compliance attestations your auditor verifies independently.
→ Full catalogue: councilof.ai/catalogue → MEOK AI Labs: meok.ai
| Tier | Price | What you get | Stripe |
|---|---|---|---|
| Smoke test | £1 | Signed sample MCP-Hardening report + Article 50 PDF | https://buy.stripe.com/5kQ6oJ0xS3ce8sl7ew8k91j |
| Quick Kit | £9 | EU AI Act Article 50 implementation guide (C2PA + EU-Icon) | https://buy.stripe.com/5kQ6oJ0xS3ce8sl7ew8k91j |
| Founder Call | £29 | 30-min 1-on-1 with the founder | https://buy.stripe.com/5kQ6oJ0xS3ce8sl7ew8k91j |
Refundable. UK Stripe — VAT-clean. Builds on the 81-MCP MEOK fleet. Verify any signed report at https://meok.ai/verify.
Add to your claude_desktop_config.json (Claude Desktop) or your MCP client config:
{
"mcpServers": {
"risk-assessment-ai-mcp": {
"command": "uvx",
"args": ["risk-assessment-ai-mcp"]
}
}
}
Or: pip install risk-assessment-ai-mcp then run the risk-assessment-ai-mcp command (stdio transport).
Once configured, ask your assistant, for example:
assess_risk to …"create_risk_register to …"add_risk to …"Be the first to review this server!
by Modelcontextprotocol · Developer Tools
Web content fetching and conversion for efficient LLM usage
by Modelcontextprotocol · Developer Tools
Read, search, and manipulate Git repositories programmatically
by Toleno · Developer Tools
Toleno Network MCP Server — Manage your Toleno mining account with Claude AI using natural language.