Back to Browse

Legalithm Cli MCP Server

Developer ToolsModerate5.2MCP RegistryLocal
Free

Server data from the Official MCP Registry

EU AI Act compliance in your editor: classify risk, cite obligations, draft Article 50 text.

About

EU AI Act compliance in your editor: classify risk, cite obligations, draft Article 50 text.

Security Report

5.2
Moderate5.2Moderate Risk

Legalithm is a well-designed compliance tool with strong security practices. The MCP server operates offline without authentication requirements (appropriate for its local use case), implements proper input validation and error handling, and contains no evidence of malicious patterns or credential leaks. Minor code quality observations around broad exception handling do not significantly impact the security posture. Permissions (filesystem read/write, environment variable inspection) align well with the tool's compliance-checking purpose. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 2 high severity). Package verification found 1 issue (1 critical, 0 high severity).

8 files analyzed · 7 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

File System Read

Reads files on your machine. Normal for tools that analyze or process local data.

File System Write

Writes or modifies files on your machine. Check that this is expected for the tool.

env_vars

Check that this permission is expected for this type of plugin.

HTTP Network Access

Connects to external APIs or services over the internet.

process_spawn

Check that this permission is expected for this type of plugin.

Unverified package source

We couldn't verify that the installable package matches the reviewed source code. Proceed with caution.

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-pedrammadani-legalithm-mcp-server": {
      "args": [
        "-y",
        "legalithm"
      ],
      "command": "npx"
    }
  }
}

Documentation

View on GitHub

From the project's GitHub README.

Legalithm — EU AI Act compliance in your coding loop

npm version Add to Cursor

Shipping an AI feature to EU users? The Act applies — Article 50 transparency from Aug 2026, high-risk obligations from Dec 2027. Catch it where you code, in seconds. Free, open-source, offline.

Quickstart

npx legalithm setup   # wires Claude Code + Cursor (hooks, editor rule, MCP config)
npx legalithm init    # writes a dated, cited compliance/legalithm.json
npx legalithm check   # re-verify; non-zero exit on drift (for CI)

Three surfaces

  1. Editor — an offline MCP server (legalithm-mcp-server) exposing 4 tools (classify, explain_obligation, generate_disclosure, check_record). No API key, no network.
  2. Repolegalithm init writes a dated, cited compliance/legalithm.json that records your AI system's risk tier and the obligations behind it.
  3. CIlegalithm check and the GitHub Action fail the build when the committed record drifts — because your app changed or the law changed under you.

MCP config

Add the offline server to Claude Code or Cursor:

{
  "mcpServers": {
    "legalithm": {
      "command": "npx",
      "args": ["-y", "legalithm-mcp-server"]
    }
  }
}

GitHub Action

# .github/workflows/ai-act.yml
name: AI Act
on: [pull_request]
jobs:
  ai-act:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: legalithm/legalithm/packages/action@v1
        with:
          api-key: ${{ secrets.LEGALITHM_API_KEY }}

Honest framing

A cited starting point that tells you when to get a human — not legal advice. When unsure, it flags the result for review instead of guessing. Every output is checked against Regulation (EU) 2024/1689; it is not a certification.

Links

License

MIT

Reviews

No reviews yet

Be the first to review this server!