Compliance Shield

io.github.mdfifty50-boopPublished by GitHub account mdfifty50-boopv0.1.3Updated Oct 27, 2026

ZATCA, UAE CT, EU AI Act regulatory compliance for AI agents

VerifiedSTDIODesktop onlyDeveloper ToolsSecurity & Monitoring

Overview

AI-generated overview

Local MCP server that helps an assistant assess EU AI Act risk, keep audit trails of AI decisions, and generate compliance evidence packages.

What you can do
  • Classify an AI system as unacceptable, high, limited or minimal risk under the EU AI Act framework
  • Start and maintain audit trails, logging each AI decision with input, output, reasoning, human oversight, model and confidence
  • Run gap analysis against compliance requirements with article references and recommendations
  • Generate auditor-ready evidence packages and show enforcement deadlines and penalties
  • Read the enforcement timeline and list active audit trails as resources
When to use it
Useful when you are documenting an AI system for EU AI Act readiness and want the assistant to classify risk, record decisions as you go, and assemble evidence for an auditor. Also handy for checking upcoming enforcement dates and penalty exposure.
Requirements
Runs locally over stdio via npx compliance-shield-mcp, so Node.js and network access for the package download are needed. No accounts, API keys, environment variables or headers are declared. Data is held in in-memory maps, so trails do not persist across restarts.
Before you install
Audit trails and decision logs are stored in memory only, so nothing survives a restart and there is no backup. The output is a self-assessment aid, not legal advice or a certified compliance opinion; verify classifications and evidence against the regulation before submitting them to a regulator.

Installation

In SourceWeft

  1. Open Compliance Shield in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.

Other MCP clients

Follow the launch instructions in the repository.

README

compliance-shield-mcp

EU AI Act compliance audit trails and evidence generation for AI agent systems.

EU AI Act enforcement begins August 2, 2026. Fines up to 35M EUR or 7% of global annual turnover.

What it does

Runtime compliance layer that plugs into any MCP-compatible AI system to provide:

  • Risk Classification — Classify AI systems as Unacceptable, High, Limited, or Minimal risk per the EU AI Act framework
  • Audit Trails — Create and maintain decision logs with full traceability (input, output, reasoning, human oversight, model, confidence)
  • Gap Analysis — Identify missing compliance requirements with specific article references and actionable recommendations
  • Evidence Packages — Generate auditor-ready documentation suitable for regulatory submission
  • Enforcement Timeline — Track upcoming deadlines with days remaining and penalty structure

Install

bash
npx compliance-shield-mcp

Claude Desktop

json
{  "mcpServers": {    "compliance-shield": {      "command": "npx",      "args": ["compliance-shield-mcp"]    }  }}

Tools

ToolDescription
assess_risk_levelClassify an AI system under EU AI Act risk framework
create_audit_trailStart a compliance audit trail for an AI system
log_decisionLog an AI decision with full traceability metadata
check_compliance_gapsIdentify missing compliance requirements
generate_evidence_packageGenerate auditor-ready evidence documentation
get_enforcement_timelineShow upcoming enforcement deadlines and penalties

Resources

URIDescription
compliance://timelineEU AI Act enforcement timeline
compliance://trailsList all active audit trails

Quick Start

1. assess_risk_level → Know your risk classification2. create_audit_trail → Start logging3. log_decision (repeatedly) → Record every AI decision4. check_compliance_gaps → Find what's missing5. generate_evidence_package → Hand to your auditor

EU AI Act Key Dates

DateMilestone
Feb 2, 2025Prohibited AI practices banned
Aug 2, 2025Governance bodies operational
Aug 2, 2026High-risk AI obligations enforced
Aug 2, 2027Full enforcement for all AI systems

Architecture

  • Pure Node.js, ES modules
  • @modelcontextprotocol/sdk + zod only
  • In-memory Maps (no external dependencies)
  • stdio transport

License

MIT

Source: README.md at commit 75a2936

Tools

0
SourceWeft has not started this package in its sandbox yet, so its tools are not known.

Version history

1
  1. v0.1.3LatestSep 16, 2026

Score

40% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 days25 pts

    Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.

  • Auth declared10 pts

    Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.

  • Tools listed15 pts

    Answer tools/list without a credential, or ship a package that starts in a sandbox without one.

  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts

    Declare a license in the repository or the registry entry.