Nist Rmf Ai Mcp

io.github.CSOAI-ORGPublished by GitHub account CSOAI-ORGv1.0.16Updated Nov 5, 2026

Nist Rmf Ai MCP Server by MEOK AI Labs

Overview

AI-generated overview

Local MCP server that helps an assistant work through NIST AI Risk Management Framework functions, risk registers and trustworthy-AI assessments.

What you can do
  • Assess AI risk profiles against NIST AI RMF functions (MAP, MEASURE, MANAGE, GOVERN)
  • Map AI impact and generate risk controls
  • Maintain a risk register and trustworthy-AI assessment material
  • Reference EU AI Act articles such as risk management, transparency, bias testing and FRIA support
When to use it
Useful when you want an assistant to help structure AI risk assessments, draft risk registers or align an AI system with NIST AI RMF and EU AI Act expectations. Not needed for general coding or data tasks.
Requirements
Runs locally over stdio as a Python package (pip install nist_rmf_ai_mcp, or uvx nist-rmf-ai-mcp). No authentication, environment variables or headers are declared. Desktop client only; not web-executable.
Before you install
The README is heavily promotional: it advertises paid tiers, Stripe purchase links, a free tier of 10 calls per day per MCP and a governance pack install command. Treat pricing and compliance claims as vendor marketing, not verified facts, and do not follow purchase links from the README. No credentials are requested by the manifest.

Installation

In SourceWeft

  1. Open Nist Rmf Ai Mcp in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.

Other MCP clients

Follow the launch instructions in the repository.

README

[MCP Scorecard: 86/100]

mcp-name: io.github.CSOAI-ORG/nist-rmf-ai-mcp

Nist Rmf Ai MCP

[MEOK AI Labs] [GSPC] [License] [PyPI]

NIST AI Risk Management Framework MCP — MAP, MEASURE, MANAGE, GOVERN functions, risk register, tr...

NIST AI Risk Management Framework MCP — MAP, MEASURE, MANAGE, GOVERN functions, risk register, trustworthy AI assessment.


🚀 Quick Start

bash
# Install via pippip install nist_rmf_ai_mcp
# Or install via Smitherynpx -y @smithery/cli@latest install nist-rmf-ai-mcp --client claude

✨ Features

  • MCP protocol compliant
  • Easy installation
  • Well-documented API
  • Production-ready
  • Active maintenance

📖 Documentation

🛡️ Compliance

This MCP server is built with EU AI Act compliance built-in:

  • ✅ Article 9 — Risk Management System
  • ✅ Article 13 — Transparency & Instructions for Use
  • ✅ Article 15 — Bias Detection & Testing
  • ✅ Article 26 — FRIA Support (where applicable)
  • ✅ Article 50 — AI Content Watermarking (where applicable)

Need help getting compliant? Book a free 15-min diagnostic →

🏢 Enterprise

Need custom development, SLA guarantees, or white-label deployment?

  • Pro: $99/mo — Full MCP suite + EU AI Act tracking
  • Enterprise: $499/mo — Custom dev + SLA + Dedicated support

View Pricing → | Contact Sales →

🤝 Part of the MEOK Ecosystem

This server is part of the MEOK AI Labs ecosystem — 300+ MCP servers for sovereign AI governance.

DomainPurpose
councilof.aiEU AI Act compliance marketplace
safetyof.aiAI safety & monitoring
meok.aiSovereign AI platform
cobolbridge.aiLegacy modernization

📜 License

MIT © CSOAI-ORG


Built with 💜 by MEOK AI Labs · UK Companies House 16939677

MIT © [MEOK AI Labs](https://meok.ai)

Pairs with MEOK Governance Suite

Build something that touches users? You need compliance. MEOK ships 38 governance MCPs that drop in alongside this tool — EU AI Act, DORA, NIS2, CRA, GDPR, ISO 42001, FDA SaMD, MDR, Basel, MiFID II, MiCA, COPPA, and more.

bash
# One-shot install of the governance packnpx meok-setup --pack governance

Free tier: 10 calls/day per MCP. Pro tier (£79/mo): unlimited + cryptographically signed compliance attestations your auditor verifies independently.

→ Full catalogue: councilof.ai/catalogue → MEOK AI Labs: meok.ai

💸 Try MEOK in 30 seconds — instant buy ladder

TierPriceWhat you getStripe
Smoke test£1Signed sample MCP-Hardening report + Article 50 PDFhttps://buy.stripe.com/5kQ6oJ0xS3ce8sl7ew8k91j
Quick Kit£9EU AI Act Article 50 implementation guide (C2PA + EU-Icon)https://buy.stripe.com/5kQ6oJ0xS3ce8sl7ew8k91j
Founder Call£2930-min 1-on-1 with the founderhttps://buy.stripe.com/5kQ6oJ0xS3ce8sl7ew8k91j

Refundable. UK Stripe — VAT-clean. Builds on the 81-MCP MEOK fleet. Verify any signed report at https://meok.ai/verify.

Configuration

Add to your claude_desktop_config.json (Claude Desktop) or your MCP client config:

json
{  "mcpServers": {    "nist-rmf-ai-mcp": {      "command": "uvx",      "args": ["nist-rmf-ai-mcp"]    }  }}

Or: pip install nist-rmf-ai-mcp then run the nist-rmf-ai-mcp command (stdio transport).

Examples

Once configured, ask your assistant, for example:

  • "Use assess_risk_profile to …"
  • "Use map_ai_impact to …"
  • "Use generate_risk_controls to …"

See also

MEOK compliance MCP fleet: meok-eu-aia-art-9-rms-mcp, risk-assessment-ai-mcp

Source: README.md at commit 08658e4

Tools

0
SourceWeft has not started this package in its sandbox yet, so its tools are not known.

Version history

1
  1. v1.0.16LatestSep 16, 2026

Score

50% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 days25 pts

    Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.

  • Auth declared10 pts

    Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.

  • Tools listed15 pts

    Answer tools/list without a credential, or ship a package that starts in a sandbox without one.

  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts