Pci Dss Mcp

io.github.CSOAI-ORGPublished by GitHub account CSOAI-ORGv1.0.11Updated Oct 30, 2026

Pci Dss MCP Server by MEOK AI Labs

VerifiedSTDIODesktop onlySecurity & MonitoringBusiness & Commerce

Overview

AI-generated overview

Local MCP server for PCI DSS 4.0 payment card compliance: requirement assessment, cardholder data flow, network segmentation and SAQ generation.

What you can do
  • Assess PCI DSS 4.0 compliance against the 12 requirements
  • Check cardholder data flows and network segmentation
  • Generate self-assessment questionnaire (SAQ) material
  • Expose these as MCP tools such as assess_pci_compliance, check_cardholder_data and network_segmentation_check
When to use it
Useful when an assistant should help prepare or review PCI DSS 4.0 compliance work — requirement gap checks, cardholder data flow and segmentation reviews, or drafting SAQ content — rather than doing the assessment by hand.
Requirements
Runs locally over stdio as a Python package (pci-dss-mcp), installed with pip or launched via uvx; a desktop MCP client such as Claude Desktop is needed. No authentication, environment variables or headers are declared.
Before you install
The README is heavily promotional: it advertises paid tiers, Stripe purchase links, a free tier of 10 calls per day and a separate governance pack, so expect upsell and possible usage limits. Compliance output is advisory and should be verified by a qualified assessor; avoid feeding real cardholder data into prompts.

Installation

In SourceWeft

  1. Open Pci Dss Mcp in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.

Other MCP clients

Follow the launch instructions in the repository.

README

[MCP Scorecard: 90/100]

Pci Dss MCP

[MEOK AI Labs] [GSPC] [License] [PyPI]

PCI DSS 4

PCI DSS 4.0 payment card compliance MCP server — 12 requirements assessment, cardholder data flow, network segmentation, SAQ generation

🚀 Quick Start

bash
# Install via pippip install pci_dss_mcp
# Or install via Smitherynpx -y @smithery/cli@latest install pci-dss-mcp --client claude

✨ Features

  • MCP protocol compliant
  • Easy installation
  • Well-documented API
  • Production-ready
  • Active maintenance

📖 Documentation

🛡️ Compliance

This MCP server is built with EU AI Act compliance built-in:

  • ✅ Article 9 — Risk Management System
  • ✅ Article 13 — Transparency & Instructions for Use
  • ✅ Article 15 — Bias Detection & Testing
  • ✅ Article 26 — FRIA Support (where applicable)
  • ✅ Article 50 — AI Content Watermarking (where applicable)

Need help getting compliant? Book a free 15-min diagnostic →

🏢 Enterprise

Need custom development, SLA guarantees, or white-label deployment?

  • Pro: $99/mo — Full MCP suite + EU AI Act tracking
  • Enterprise: $499/mo — Custom dev + SLA + Dedicated support

View Pricing → | Contact Sales →

🤝 Part of the MEOK Ecosystem

This server is part of the MEOK AI Labs ecosystem — 300+ MCP servers for sovereign AI governance.

DomainPurpose
councilof.aiEU AI Act compliance marketplace
safetyof.aiAI safety & monitoring
meok.aiSovereign AI platform
cobolbridge.aiLegacy modernization

📜 License

MIT © CSOAI-ORG

Built with 💜 by MEOK AI Labs · UK Companies House 16939677

MIT © [MEOK AI Labs](https://meok.ai)

Pairs with MEOK Governance Suite

Build something that touches users? You need compliance. MEOK ships 38 governance MCPs that drop in alongside this tool — EU AI Act, DORA, NIS2, CRA, GDPR, ISO 42001, FDA SaMD, MDR, Basel, MiFID II, MiCA, COPPA, and more.

bash
# One-shot install of the governance packnpx meok-setup --pack governance

Free tier: 10 calls/day per MCP. Pro tier (£79/mo): unlimited + cryptographically signed compliance attestations your auditor verifies independently.

→ Full catalogue: councilof.ai/catalogue → MEOK AI Labs: meok.ai

💸 Try MEOK in 30 seconds — instant buy ladder

TierPriceWhat you getStripe
Smoke test£1Signed sample MCP-Hardening report + Article 50 PDFhttps://buy.stripe.com/aFa7sNcgAdQS0ZT1Uc8k91t
Quick Kit£9EU AI Act Article 50 implementation guide (C2PA + EU-Icon)https://buy.stripe.com/aFa7sNcgAdQS0ZT1Uc8k91t
Founder Call£2930-min 1-on-1 with the founderhttps://buy.stripe.com/aFa7sNcgAdQS0ZT1Uc8k91t

Refundable. UK Stripe — VAT-clean. Builds on the 81-MCP MEOK fleet. Verify any signed report at https://meok.ai/verify.

Configuration

Add to your claude_desktop_config.json (Claude Desktop) or your MCP client config:

json
{  "mcpServers": {    "pci-dss-mcp": {      "command": "uvx",      "args": ["pci-dss-mcp"]    }  }}

Or: pip install pci-dss-mcp then run the pci-dss-mcp command (stdio transport).

Examples

Once configured, ask your assistant, for example:

  • "Use assess_pci_compliance to …"
  • "Use check_cardholder_data to …"
  • "Use network_segmentation_check to …"

Source: README.md at commit 41f9e69

Tools

0
SourceWeft has not started this package in its sandbox yet, so its tools are not known.

Version history

1
  1. v1.0.11LatestSep 16, 2026

Score

50% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 days25 pts

    Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.

  • Auth declared10 pts

    Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.

  • Tools listed15 pts

    Answer tools/list without a credential, or ship a package that starts in a sandbox without one.

  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts