Rival Regulatory Toolkit

io.github.rival-intelligencePublished by GitHub account rival-intelligencev0.1.5Updated Oct 24, 2026

Read-only regulatory source retrieval, citation tracing, authority metadata, and recent filings.

VerifiedSTDIODesktop onlyKnowledge & MemoryBusiness & Commerce

Overview

AI-generated overview

Lets an assistant search a regulatory corpus, retrieve source text, trace citations, list authorities, and view recent filings through Rival's read-only API.

What you can do
The server exposes five read-only tools: search_regulatory_corpus, retrieve_source_text, trace_citation, list_authorities, and get_recent_filings. It connects an agent to Rival's source-grounded regulatory retrieval API, returning source documents, citations, authority metadata, and recent filings. A fixture mode runs against a bundled sample corpus so the integration can be evaluated without API access.
When to use it
Use it when an assistant needs to look up regulatory sources, follow citation chains, or check authority metadata and recent filings. It suits compliance, legal, energy, and infrastructure teams that want source-grounded retrieval inside an agent workflow. It is not for submitting filings or changing compliance records.
Requirements
Runs locally over stdio, typically via npx from the npm package @tryrival/regulatory-toolkit, or from the provided Docker image. Production access needs the RIVAL_API_KEY secret; RIVAL_API_BASE_URL defaults to the managed API endpoint. RIVAL_FIXTURE_MODE=true allows evaluation without a key. Network access is required unless fixture mode is used.
Before you install
The RIVAL_API_KEY secret is passed by environment variable and grants access to the managed API; keep it out of shared configs. The toolkit is read-only and does not submit filings, alter compliance records, or take workspace actions. Output is not legal, engineering, environmental, safety, or compliance advice, and regulated work still needs qualified human review.

Installation

In SourceWeft

  1. Open Rival Regulatory Toolkit in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.

Other MCP clients

Follow the launch instructions in the repository.

README

Rival Regulatory Toolkit

Open-source SDK, CLI, MCP server, and schemas for connecting AI agents to Rival's source-grounded regulatory retrieval API.

This repository is the developer and agent connectivity layer for Rival. It is intentionally read-only in its first release: agents can search, retrieve source text, trace citations, list authorities, and inspect recent filings. Workspace actions, document review, evidence requests, filings, and task creation remain behind managed Rival access and human review gates.

What Is Included

  • OpenAPI contract for Rival's read-only regulatory retrieval API.
  • JSON Schemas for source documents, search results, citations, authorities, and recent filings.
  • TypeScript client for server-side applications and internal tools.
  • CLI for shell usage and automation.
  • MCP server for agent clients that support Model Context Protocol.
  • Fixture mode so teams can evaluate the integration without a Rival API key.
  • Dockerfile for running the MCP server in controlled team environments.

Install

sh
npm install @rival-intelligence/regulatory-toolkit

For local development from source:

sh
npm installnpm run build

Environment

sh
export RIVAL_API_KEY="rv_live_..."export RIVAL_API_BASE_URL="https://api.tryrival.ai"

For local evaluation without API access:

sh
export RIVAL_FIXTURE_MODE=true

TypeScript Client

ts
import { RivalRegulatoryClient } from '@rival-intelligence/regulatory-toolkit';
const rival = new RivalRegulatoryClient({  apiKey: process.env.RIVAL_API_KEY,});
const results = await rival.searchRegulatoryCorpus({  query: '49 CFR 195.573',  limit: 5,});
console.log(results.results[0]?.source.citation);

CLI

sh
rival-regulatory search "49 CFR 195.573"rival-regulatory source "cfr-49-195-573"rival-regulatory trace "49 CFR 195.573"rival-regulatory authorities

Fixture mode:

sh
rival-regulatory search "pipeline corrosion" --fixture

MCP Server

Run directly:

sh
npx @rival-intelligence/regulatory-toolkit mcp

MCP client example:

json
{  "mcpServers": {    "rival-regulatory": {      "command": "npx",  "args": ["-y", "@rival-intelligence/regulatory-toolkit", "mcp"],      "env": {        "RIVAL_API_KEY": "rv_live_...",        "RIVAL_API_BASE_URL": "https://api.tryrival.ai"      }    }  }}

Available MCP tools:

  • search_regulatory_corpus
  • retrieve_source_text
  • trace_citation
  • list_authorities
  • get_recent_filings

Docker

Docker belongs in this repository because many compliance, legal, consulting, energy, and infrastructure teams will run agent tools inside controlled environments. The image runs the MCP server and reads credentials from environment variables.

sh
docker build -t rival-regulatory-toolkit .docker run --rm -i \  -e RIVAL_API_KEY="$RIVAL_API_KEY" \  -e RIVAL_API_BASE_URL="https://api.tryrival.ai" \  rival-regulatory-toolkit

Fixture mode:

sh
docker run --rm -i -e RIVAL_FIXTURE_MODE=true rival-regulatory-toolkit

See docs/self-hosting.md for deployment notes.

API Contract

The API contract starts with five read-only endpoints:

  • GET /api/v1/search
  • GET /api/v1/sources/{source_id}
  • GET /api/v1/citations/trace
  • GET /api/v1/authorities
  • GET /api/v1/filings/recent

The contract lives in openapi/rival-regulatory-api.yaml.

Safety Boundary

This toolkit does not submit filings, alter compliance records, close corrective actions, delete evidence, or take workspace actions. It is a source retrieval and citation layer for agents and developer systems. Regulated work still requires qualified human review.

This toolkit is not legal, engineering, environmental, safety, or compliance advice. Teams are responsible for validating applicability, obligations, filings, and operational decisions with qualified professionals.

Development

sh
npm installnpm run buildnpm test

License

Apache-2.0

Source: README.md at commit f36bd3a

Tools

0
SourceWeft has not started this package in its sandbox yet, so its tools are not known.

Version history

1
  1. v0.1.5LatestSep 16, 2026

Score

50% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 days25 pts

    Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.

  • Auth declared10 pts

    Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.

  • Tools listed15 pts

    Answer tools/list without a credential, or ship a package that starts in a sandbox without one.

  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts