Cra Compliance Mcp

io.github.CSOAI-ORGPublished by GitHub account CSOAI-ORGv1.3.15Updated Nov 5, 2026

EU Cyber Resilience Act (Regulation 2024/2847) compliance for AI agents. Product classification...

VerifiedSTDIODesktop onlyDeveloper ToolsSecurity & Monitoring

Overview

AI-generated overview

Local MCP server that helps an assistant work through EU Cyber Resilience Act (Regulation 2024/2847) compliance tasks for products with digital elements.

What you can do
  • Classify products against the Cyber Resilience Act and check Annex I obligations
  • Produce SBOM skeletons and guidance on CE marking and vulnerability disclosure
  • Return compliance results that a paid tier can turn into signed attestations
When to use it
Useful when preparing or documenting CRA compliance for a product with digital elements and you want an assistant to classify it, walk through Annex I requirements, or draft an SBOM outline.
Requirements
Runs locally over stdio as a Python package (pip install cra-compliance-mcp, or uvx cra-compliance-mcp). No authentication or environment variables are declared in the manifest; the README mentions optional MEOK_PAYG_KEY and MEOK_X402_RECEIVER settings for paid usage.
Before you install
The README advertises a free tier of 50 calls/day, a £0.05-per-call pay-per-call mode that deducts from a prepaid balance when MEOK_PAYG_KEY is set, and paid Pro/Enterprise plans; stablecoin payment is mentioned via MEOK_X402_RECEIVER. Treat outputs as guidance, not legal certification.

Installation

In SourceWeft

  1. Open Cra Compliance Mcp in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.

Other MCP clients

Follow the launch instructions in the repository.

README

🔏 Free tier: 50 calls/day. Need audit-ready proof?

Pro (£199/mo) turns every result into an HMAC-signed attestation with a public verify URL your auditor validates without an account — EU AI Act Art 11/12 ready. → Start: https://proofof.ai · pip install meok-attestation-verify to verify any cert.

[MCP Scorecard: 90/100]

Cra Compliance MCP

[MEOK AI Labs] [PAYG enabled] [GSPC] [License] [PyPI]

EU Cyber Resilience Act (Reg 2024/2847) compliance MCP for products with digital elements

EU Cyber Resilience Act (Reg 2024/2847) compliance MCP for products with digital elements. CE marking, vulnerability disclosure, SBOM. MIT

🚀 Quick Start

bash
# Install via pippip install cra_compliance_mcp
# Or install via Smitherynpx -y @smithery/cli@latest install cra-compliance-mcp --client claude

⚡ Pay-per-call (PAYG) — no subscription

This MCP supports universal pay-per-call billing across the MEOK compliance fleet:

bash
# One-time setupexport MEOK_PAYG_KEY="your_topup_token"
# Every tool call now deducts £0.05 from your balance.# When balance hits zero, the tool returns a top-up URL.# Works across all 7 MEOK compliance MCPs with the same token.
  • No subscription — top up once, deduct per call.
  • £0.05/call default (configurable via MEOK_PAYG_RATE_GBP).
  • USDC on Base L2 accepted — set MEOK_X402_RECEIVER and pay via stablecoin.
  • Backward-compatible — when MEOK_PAYG_KEY is unset, behaviour is unchanged.

Get a token: councilof.ai/payg (£10 / £50 / £200 top-up tiers).

✨ Features

  • MCP protocol compliant
  • Easy installation
  • Well-documented API
  • Production-ready
  • Active maintenance

📖 Documentation

🛡️ Compliance

This MCP server is built with EU AI Act compliance built-in:

  • ✅ Article 9 — Risk Management System
  • ✅ Article 13 — Transparency & Instructions for Use
  • ✅ Article 15 — Bias Detection & Testing
  • ✅ Article 26 — FRIA Support (where applicable)
  • ✅ Article 50 — AI Content Watermarking (where applicable)

Need help getting compliant? Book a free 15-min diagnostic →

🏢 Enterprise

Need custom development, SLA guarantees, or white-label deployment?

  • Pro: £79/mo — Full MCP suite + EU AI Act tracking
  • Enterprise: £499/mo — Custom dev + SLA + Dedicated support

View Pricing → | Contact Sales →

🤝 Part of the MEOK Ecosystem

This server is part of the MEOK AI Labs ecosystem — 26 PyPI packages · ~16,300 monthly installs.

DomainPurpose
councilof.aiEU AI Act compliance marketplace
safetyof.aiAI safety & monitoring
meok.aiSovereign AI platform
cobolbridge.aiLegacy modernization

📜 License

MIT © CSOAI-ORG

Built with 💜 by MEOK AI Labs · UK Companies House 16939677

Configuration

Add to your claude_desktop_config.json (Claude Desktop) or your MCP client config:

json
{  "mcpServers": {    "cra-compliance-mcp": {      "command": "uvx",      "args": ["cra-compliance-mcp"]    }  }}

Or: pip install cra-compliance-mcp then run the cra-compliance-mcp command (stdio transport).

Examples

Once configured, ask your assistant, for example:

  • "Use classify_product to …"
  • "Use audit_annex_i to …"
  • "Use sbom_skeleton to …"

Source: README.md at commit 26fa680

Tools

0
SourceWeft has not started this package in its sandbox yet, so its tools are not known.

Version history

1
  1. v1.3.15LatestSep 16, 2026

Score

50% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 days25 pts

    Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.

  • Auth declared10 pts

    Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.

  • Tools listed15 pts

    Answer tools/list without a credential, or ship a package that starts in a sandbox without one.

  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts