ISMS Directory

com.ismsdirectoryPublished by ismsdirectory.comOfficial publisherv1.4.0Updated Oct 24, 2026

Read-only search of a curated directory of ISO 27001, SOC 2 and compliance services.

VerifiedStreamable HTTPWeb executableSecurity & MonitoringBusiness & Commerce

Overview

AI-generated overview

Read-only search of the ISMS Directory catalog of ISO 27001, SOC 2, GDPR, DORA and NIS 2 compliance service providers.

What you can do
Search the catalog of compliance service providers by framework tags, combining several frameworks with AND and sorting results by relevance or other criteria, with guidance to list categories first when a tag is unclear. Retrieve the full public profile of one listed service, including description, frameworks, regions, industries, client sizes, languages, website and directory page. Check whether a company is listed, returning the listing, close matches, or the free submission link when it is not. List every tag in a catalog dimension with the number of listed services carrying it, for use as exact filter values.
When to use it
Useful when you need to find consultants, auditors, platforms or training providers for a compliance framework, look up a specific provider's public profile, or confirm whether a company appears in the directory.
Requirements
Runs as a remote endpoint or as a local npm package over stdio. No authentication, environment variables or headers are declared.
Before you install
Read-only directory lookups; no writing, sending or deleting of data is described. Results reflect a third-party curated catalog, so verify provider details before relying on them.

Installation

In SourceWeft

  1. Open ISMS Directory in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.

Use with an agent

Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.

Read https://sourceweft.com/mcp/com.ismsdirectory%2Fisms-directory/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.

Read the install guide the agent follows

Other MCP clients

Add this to your client's mcpServers config.

{
  "mcpServers": {
    "isms-directory": {
      "type": "http",
      "url": "https://ismsdirectory.com/api/mcp"
    }
  }
}

Tools

4

search_services

Search compliance services

Search the ISMS Directory catalog of ISO 27001, SOC 2, GDPR, DORA, NIS 2 and other compliance service providers (consultants, auditors, platforms, training). Filters are exact tags; several frameworks are combined with AND. Use list_categories first if you are unsure of a tag. Results are sorted by name, not ranked. Same data as GET https://ismsdirectory.com/api/search.

Parametersqlimitregionsframeworksservice_types

get_service_details

Get service details

Full public profile of one listed service (description, frameworks, regions, industries, client sizes, languages, website, directory page). Matches the name case-insensitively, then by partial name.

Parametersnamerequired

check_if_listed

Check if a company is listed

Check whether a company is listed in the ISMS Directory. Returns the listing when found, close matches otherwise, and the free submission URL when it is not listed.

Parameterscompany_namerequired

list_categories

List catalog tags

List every tag used in one catalog dimension with the number of listed services carrying it. Use the returned tags as exact filter values for search_services.

Parametersdimensionrequired

Version history

1
  1. v1.4.0LatestOct 16, 2026

Score

75% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 daysRequired25 pts
  • Auth declaredRequired10 pts
  • Tools listedRequired15 pts
  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts

    Declare a GitHub repository with a README, or serve resource_documentation in the OAuth protected-resource metadata.

  • License10 pts

    Declare a license in the repository or the registry entry.