
Rival Regulatory Toolkit
io.github.rival-intelligencePublished by GitHub account rival-intelligencev0.1.5Updated Oct 24, 2026
Read-only regulatory source retrieval, citation tracing, authority metadata, and recent filings.
Overview
Lets an assistant search a regulatory corpus, retrieve source text, trace citations, list authorities, and view recent filings through Rival's read-only API.
- What you can do
- The server exposes five read-only tools: search_regulatory_corpus, retrieve_source_text, trace_citation, list_authorities, and get_recent_filings. It connects an agent to Rival's source-grounded regulatory retrieval API, returning source documents, citations, authority metadata, and recent filings. A fixture mode runs against a bundled sample corpus so the integration can be evaluated without API access.
- When to use it
- Use it when an assistant needs to look up regulatory sources, follow citation chains, or check authority metadata and recent filings. It suits compliance, legal, energy, and infrastructure teams that want source-grounded retrieval inside an agent workflow. It is not for submitting filings or changing compliance records.
- Requirements
- Runs locally over stdio, typically via npx from the npm package @tryrival/regulatory-toolkit, or from the provided Docker image. Production access needs the RIVAL_API_KEY secret; RIVAL_API_BASE_URL defaults to the managed API endpoint. RIVAL_FIXTURE_MODE=true allows evaluation without a key. Network access is required unless fixture mode is used.
Installation
In SourceWeft
- Open Rival Regulatory Toolkit in the dashboard and add it to a workspace.
- Enable the server for the chats that should use its tools.
Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.
Other MCP clients
Follow the launch instructions in the repository.
README
Rival Regulatory Toolkit
Open-source SDK, CLI, MCP server, and schemas for connecting AI agents to Rival's source-grounded regulatory retrieval API.
- Public site: https://tryrival.ai
- Agent access: https://tryrival.ai/for-agents
- Managed API default:
https://api.tryrival.ai
This repository is the developer and agent connectivity layer for Rival. It is intentionally read-only in its first release: agents can search, retrieve source text, trace citations, list authorities, and inspect recent filings. Workspace actions, document review, evidence requests, filings, and task creation remain behind managed Rival access and human review gates.
What Is Included
- OpenAPI contract for Rival's read-only regulatory retrieval API.
- JSON Schemas for source documents, search results, citations, authorities, and recent filings.
- TypeScript client for server-side applications and internal tools.
- CLI for shell usage and automation.
- MCP server for agent clients that support Model Context Protocol.
- Fixture mode so teams can evaluate the integration without a Rival API key.
- Dockerfile for running the MCP server in controlled team environments.
Install
For local development from source:
Environment
For local evaluation without API access:
TypeScript Client
CLI
Fixture mode:
MCP Server
Run directly:
MCP client example:
Available MCP tools:
search_regulatory_corpusretrieve_source_texttrace_citationlist_authoritiesget_recent_filings
Docker
Docker belongs in this repository because many compliance, legal, consulting, energy, and infrastructure teams will run agent tools inside controlled environments. The image runs the MCP server and reads credentials from environment variables.
Fixture mode:
See docs/self-hosting.md for deployment notes.
API Contract
The API contract starts with five read-only endpoints:
GET /api/v1/searchGET /api/v1/sources/{source_id}GET /api/v1/citations/traceGET /api/v1/authoritiesGET /api/v1/filings/recent
The contract lives in openapi/rival-regulatory-api.yaml.
Safety Boundary
This toolkit does not submit filings, alter compliance records, close corrective actions, delete evidence, or take workspace actions. It is a source retrieval and citation layer for agents and developer systems. Regulated work still requires qualified human review.
This toolkit is not legal, engineering, environmental, safety, or compliance advice. Teams are responsible for validating applicability, obligations, filings, and operational decisions with qualified professionals.
Development
License
Apache-2.0
Source: README.md at commit f36bd3a
Tools
0Version history
1- v0.1.5LatestSep 16, 2026
Score
50% of the applicable checks met
How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.
- Reached in the last 30 days25 pts
Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.
- Auth declared10 pts
Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.
- Tools listed15 pts
Answer tools/list without a credential, or ship a package that starts in a sandbox without one.
- DescriptionRequired15 pts
- Logo10 pts
- Documentation15 pts
- License10 pts
