Back to Browse

Eu Compliance MCP Server

SecurityModerate5.2MCP RegistryLocal
Free

Server data from the Official MCP Registry

Offline MCP server: EU digital/data/cyber compliance full text (14 regs), verbatim + citations.

About

Offline MCP server: EU digital/data/cyber compliance full text (14 regs), verbatim + citations.

Security Report

5.2
Moderate5.2Moderate Risk

Well-structured MCP server for EU compliance documentation with strong security foundations. Code is properly authenticated (read-only database access), input validation is implemented for argument types, and permissions align with the server's purpose. Minor concerns around broad exception handling and corpus integrity verification do not significantly impact the security posture. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue.

5 files analyzed · 9 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

File System Read

Reads files on your machine. Normal for tools that analyze or process local data.

File System Write

Writes or modifies files on your machine. Check that this is expected for the tool.

HTTP Network Access

Connects to external APIs or services over the internet.

env_vars

Check that this permission is expected for this type of plugin.

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-matematicsolutions-mcp-eu-compliance": {
      "args": [
        "-y",
        "@matematicsolutions/mcp-eu-compliance"
      ],
      "command": "npx"
    }
  }
}

Documentation

View on GitHub

From the project's GitHub README.

mcp-eu-compliance

MCP server exposing an offline corpus of EU law (EUR-Lex, full text) in local SQLite FTS5, with compliance tools. Snippets returned verbatim from the database (zero-LLM) - each with a CELEX id and EUR-Lex URL. Anti-hallucination by mechanism, not by trust in the model.

Scope (14 regulations, digital/data/cyber): GDPR, AI Act, DORA, NIS2, eIDAS 2.0, CRA, DSA, DMA, Data Act, DGA, LED, ePrivacy, Cybersecurity Act, CER.

Complementary to mcp-eu-sparql: that one discovers acts live (SPARQL Cellar), this one provides verbatim text + offline compliance analysis (no network at runtime).

Installation

npm install            # Node 22.5+ (node:sqlite built-in)
npm run fetch-corpus   # downloads regulations.db (~36 MB) from Ansvar (Apache-2.0)
npm run build
npm start

Configuration in the MCP client (e.g. mcp-servers.json):

{
  "name": "eu-compliance",
  "command": "node",
  "args": ["/path/to/mcp-eu-compliance/dist/index.js"]
}

Tools

ToolDescription
eu_search(query, regulations?, limit?)Full-text (FTS5) across articles, verbatim snippets.
eu_article(regulation, article_number)Full article text + title + chapter + CELEX.
eu_compare(query, regulations?)The same topic across several regulations at once (e.g. incident reporting DORA vs NIS2 vs CRA).
eu_check_applicability(sector, subsector?)Which of the 14 regulations apply to a sector, with confidence level and basis article.
eu_evidence(regulation, article?)Evidence artifacts (audit) - which document/log/certificate proves compliance.

Each tool returns structuredContent.citations (regulation, CELEX, EUR-Lex URL, snapshot).

Examples

  • "Compare incident reporting timelines across DORA, NIS2, and CRA" -> eu_compare
  • "What does GDPR Article 33 require?" -> eu_article
  • "Which EU regulations apply to a bank?" -> eu_check_applicability(sector=financial, subsector=bank)
  • "What audit evidence does DORA Article 17 require?" -> eu_evidence

Disclaimers

  • Snapshot, not the authentic source. The authentic version = Official Journal of the EU. The connector returns a point-in-time snapshot; verify currency in EUR-Lex (CELEX). Freshness -> mcp-eu-sparql (live).
  • Applicability rules are expert guidance, not a binding legal assessment. Sector-specific realities may require your own analysis.
  • Reference material, not legal advice.

License and attribution

Citation: MateMatic Solutions (2026), mcp-eu-compliance, https://github.com/matematicsolutions/mcp-eu-compliance, MIT.

Reviews

No reviews yet

Be the first to review this server!