Mcp Eu Compliance

io.github.matematicsolutionsPublished by GitHub account matematicsolutionsv0.4.1Updated Oct 24, 2026

Offline MCP server: EU digital/data/cyber compliance full text (14 regs), verbatim + citations.

VerifiedSTDIODesktop onlyKnowledge & MemorySecurity & Monitoring

Overview

AI-generated overview

Offline MCP server that lets an assistant search and quote full-text EU digital, data and cyber regulations with CELEX citations.

What you can do
  • Search articles across 14 EU regulations with verbatim snippets and citations
  • Read a full article with its title, chapter and CELEX identifier
  • Compare how one topic is treated across several regulations
  • Check which regulations may apply to a given sector, with confidence and basis article
  • Retrieve audit evidence artifacts that can demonstrate compliance
When to use it
Useful when you need grounded, quotable text from GDPR, AI Act, DORA, NIS2, CRA and similar EU acts while drafting compliance notes, comparing obligations, or checking sector applicability, without live network lookups.
Requirements
Runs locally over stdio via npx or a Node.js process; Node 22.5 or newer is needed for the built-in SQLite module. The corpus database (about 36 MB) must be downloaded once during setup. No accounts, API keys or environment variables are declared.
Before you install
The corpus is a point-in-time snapshot, not the authentic Official Journal text, so currency should be verified in EUR-Lex. Applicability results are expert guidance rather than a binding legal assessment, and the output is reference material, not legal advice.

Installation

In SourceWeft

  1. Open Mcp Eu Compliance in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.

Other MCP clients

Follow the launch instructions in the repository.

README

mcp-eu-compliance

MCP server exposing an offline corpus of EU law (EUR-Lex, full text) in local SQLite FTS5, with compliance tools. Snippets returned verbatim from the database (zero-LLM) - each with a CELEX id and EUR-Lex URL. Anti-hallucination by mechanism, not by trust in the model.

Scope (14 regulations, digital/data/cyber): GDPR, AI Act, DORA, NIS2, eIDAS 2.0, CRA, DSA, DMA, Data Act, DGA, LED, ePrivacy, Cybersecurity Act, CER.

Complementary to mcp-eu-sparql: that one discovers acts live (SPARQL Cellar), this one provides verbatim text + offline compliance analysis (no network at runtime).

Installation

bash
npm install            # Node 22.5+ (node:sqlite built-in)npm run fetch-corpus   # downloads regulations.db (~36 MB) from Ansvar (Apache-2.0)npm run buildnpm start

Configuration in the MCP client (e.g. mcp-servers.json):

json
{  "name": "eu-compliance",  "command": "node",  "args": ["/path/to/mcp-eu-compliance/dist/index.js"]}

Tools

ToolDescription
eu_search(query, regulations?, limit?)Full-text (FTS5) across articles, verbatim snippets.
eu_article(regulation, article_number)Full article text + title + chapter + CELEX.
eu_compare(query, regulations?)The same topic across several regulations at once (e.g. incident reporting DORA vs NIS2 vs CRA).
eu_check_applicability(sector, subsector?)Which of the 14 regulations apply to a sector, with confidence level and basis article.
eu_evidence(regulation, article?)Evidence artifacts (audit) - which document/log/certificate proves compliance.

Each tool returns structuredContent.citations (regulation, CELEX, EUR-Lex URL, snapshot).

Examples

  • "Compare incident reporting timelines across DORA, NIS2, and CRA" -> eu_compare
  • "What does GDPR Article 33 require?" -> eu_article
  • "Which EU regulations apply to a bank?" -> eu_check_applicability(sector=financial, subsector=bank)
  • "What audit evidence does DORA Article 17 require?" -> eu_evidence

Disclaimers

  • Snapshot, not the authentic source. The authentic version = Official Journal of the EU. The connector returns a point-in-time snapshot; verify currency in EUR-Lex (CELEX). Freshness -> mcp-eu-sparql (live).
  • Applicability rules are expert guidance, not a binding legal assessment. Sector-specific realities may require your own analysis.
  • Reference material, not legal advice.

License and attribution

Citation: MateMatic Solutions (2026), mcp-eu-compliance, https://github.com/matematicsolutions/mcp-eu-compliance, MIT.

Source: README.md at commit d442da9

Tools

0
SourceWeft has not started this package in its sandbox yet, so its tools are not known.

Version history

2
  1. v0.4.1LatestOct 13, 2026
  2. v0.4.0Sep 16, 2026

Score

50% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 days25 pts

    Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.

  • Auth declared10 pts

    Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.

  • Tools listed15 pts

    Answer tools/list without a credential, or ship a package that starts in a sandbox without one.

  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts