Coppa Ferpa Mcp

io.github.CSOAI-ORGPublished by GitHub account CSOAI-ORGv1.0.8Updated Nov 5, 2026

Children's privacy compliance: COPPA (US), FERPA (US edu), EU AI Act children's provisions, UK A...

Overview

AI-generated overview

Early scaffold for children's privacy compliance (COPPA, FERPA, EU AI Act, UK code) whose assessment tools return stub responses plus optional local…

What you can do
  • Run five named assessment tools covering under-13 processing, FERPA records, the UK children's design code, EU AI Act minors and kids' data-flow mapping — each currently returns a stub status with empty regulation references.
  • Search a separately provisioned local SQLite FTS5 regulation database and list its metadata, with an explicit error when the database is absent.
When to use it
Only for inspecting or experimenting with the scaffold's structure and tool names, or for querying a regulation database you provision yourself. It is not suitable for real compliance assessments, audits or decisions about processing children's data.
Requirements
Local Python 3.10 or newer, installed from PyPI as coppa-ferpa-mcp and run over stdio. The regulation database is not bundled; an optional environment variable can point to a separately provisioned database. No authentication is declared.
Before you install
The README states this is an early scaffold, not a production compliance assessor, and is not legal advice; tool names do not mean the assessments are implemented. Do not feed it children's personal data, student records or production credentials. The source loads shared authentication code from an installation-specific location and may keep local usage and API-key records, and an HTTP metering helper can submit an api_key to an external verification endpoint, so do not assume it is offline…

Installation

In SourceWeft

  1. Open Coppa Ferpa Mcp in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.

Other MCP clients

Follow the launch instructions in the repository.

README

Children's privacy MCP — implementation status

Maintained in the Council of AI / CSOAI Ltd ecosystem. The package and repository identifier remain coppa-ferpa-mcp; existing MIT copyright notices are preserved.

This repository contains an early scaffold, not a production compliance assessor. Five named assessment tools currently return status: "stub" with empty regulation_refs. Installing or calling them does not establish legal compliance, certification, a completed audit, or suitability for processing children's data. Measurement and verification are not certification. This is not legal advice.

What the source implements

ToolCurrent source behaviour
check_under_13_processingReturns a scaffold response, not a parental-consent determination.
ferpa_auditReturns a scaffold response, not an education-records audit.
aadc_uk_checkReturns a scaffold response, not an assessment against the UK design code.
eu_ai_act_minorsReturns a scaffold response, not a legal assessment.
kids_data_flow_mapReturns a scaffold response, not an observed data-flow map or validated risk score.
search_regulationSearches a separately configured local SQLite FTS5 database; reports an error when it is unavailable.
list_regulations_in_dbReads metadata from that same optional local database; reports its absence explicitly.

See server.py for the implementation. Tool names describe intended areas of work; they are not evidence that those assessments are implemented. A snippet retrieved from a database is not proof of completeness, legal currency, or applicability to a particular organisation.

Package interface

pyproject.toml declares Python 3.10 or newer and the command-line entry point coppa-ferpa-mcp = "server:main". The source uses MCP over stdio. The existing package installation interface is:

bash
python -m pip install coppa-ferpa-mcp

Example client configuration:

json
{  "mcpServers": {    "coppa-ferpa-mcp": {      "command": "coppa-ferpa-mcp"    }  }}

Review the installed package version, dependencies and local configuration first. This documentation correction does not establish a successful current package installation, runtime acceptance, or a new package release.

Data, network and storage boundaries

Do not provide children's personal data, student records, production credentials or other sensitive inputs to this scaffold.

The optional regulation database is not bundled by the declared wheel file list, which includes server.py. MEOK_EURLEX_DB can identify a separately provisioned database. This README does not promise a database, a live sync, any article count, or that its contents are current.

The source attempts to load shared authentication code from an installation-specific location. Its available behaviour can depend on that environment and may maintain local usage and API-key records. No universal free quota is promised here.

server.py also defines an HTTP metering helper for https://proofof.ai/verify: if invoked, it submits an api_key and a tool field (the latter is empty in the inspected helper). The five scaffold tool bodies do not invoke that helper directly. Do not infer that all deployments are offline or network-isolated from use of stdio.

Legacy runtime responses can still contain promotional text and signing links. Those strings are not evidence that the promised service is active, that a signature establishes compliance, or that a displayed price is authoritative. This documentation-only correction does not alter tool execution, authentication, rate limiting, billing, signing or published package bytes.

Current commercial information

Earlier README revisions contained conflicting subscription prices and unverified promises of unlimited audits, instant signing, service levels and refunds. Those promotional claims and direct checkout links have been removed from this README. No replacement subscription, new price, or automated signing offer is made here.

For separately scoped measurement or evidence work, use the current service and contact information at Council of AI. Agree the exact scope, deliverable, limitations and commercial terms before any paid work. There is no purchase required by this README to inspect the repository's MIT-licensed code.

Documentation checks

Run the source-only documentation checks without installing or importing the server:

bash
python3 tests/test_readme_contract.py

These check the description against the source and reject reintroduced pricing or blanket compliance claims. They do not test legal correctness, server execution, network behaviour or independent customer use.

Licence

MIT, copyright 2026 MEOK AI Labs, as recorded in the unchanged licence. The package identifier, licence, historical commits and tool implementation are unchanged. Council of AI is operated by CSOAI Ltd.

Source: README.md at commit 640c3f0

Tools

0
SourceWeft has not started this package in its sandbox yet, so its tools are not known.

Version history

1
  1. v1.0.8LatestSep 16, 2026

Score

50% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 days25 pts

    Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.

  • Auth declared10 pts

    Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.

  • Tools listed15 pts

    Answer tools/list without a credential, or ship a package that starts in a sandbox without one.

  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts