com.regulane由 regulane.com 发布官方发布者v1.0.0更新于 Oct 26, 2026
Check code against secure-coding rules mapped to ISO 27001 and the DPDP Act. Free, no account.
Regulane 让编程助手按 34 条安全编码规则检查代码，规则对应 ISO 27001 与 DPDP 法案，并返回按严重程度分级的评分卡。
Web executable，通过 Streamable HTTP。 远程服务在工作区中配置后即可从网页运行时运行。
把这段提示词粘贴到 Claude Code、Codex、Cursor 等智能体，或 SourceWeft 对话中。智能体会读取该服务器的安装指南，先向你展示发布者、端点和登录方式，经你同意后再把它添加到你的客户端。密钥不会写进任何命令。
阅读 https://sourceweft.com/mcp/com.regulane%2Fcompliance/install.md，并按其中说明把这个 MCP 服务器接入我的客户端。修改任何配置之前，先告诉我它的发布者、端点和登录方式，等我确认。不要把 API 密钥写进命令或我会提交的文件；问我密钥应从哪里获取。把它添加到你客户端的 mcpServers 配置中。
{
"mcpServers": {
"regulane-compliance-check": {
"type": "http",
"url": "https://regulane.com/api/mcp"
}
}
}A free compliance check inside the coding agent you already use. Your agent checks your code against Regulane's 34 secure-coding rules, each mapped to ISO/IEC 27001:2022 Annex A controls and, for personal data, the DPDP Act 2023, and you get back a scorecard: findings by severity, the controls they affect, and the fix for each.
Regulane never receives your code. Your agent reads it on your machine and reports only file paths, line numbers and one-sentence findings. No account is needed, and a free check is not stored.
More: regulane.com/coding-agents
Ask your agent:
Check this repository with Regulane.
The agent calls get_compliance_rules, reviews the code in scope, then calls report_compliance_check and shows you the scorecard. It can then make the fixes and check again. In Claude Code the skill is also available as /regulane:compliance-check.
This repository is a plugin for Claude, Codex and Cursor, and an extension for Gemini CLI. Each loads the same MCP server, https://regulane.com/api/mcp, and the same skill.
Or add only the MCP server, with no plugin:
Setup for VS Code, Cursor, Windsurf and other agents: regulane.com/coding-agents#setup.
There is no code to install: only Markdown and JSON pointing at the hosted server.
What your agent sends to regulane.com: the repository name or address (any credentials in it are removed), branch, commit, which agent ran the check, one line describing the scope, the rule ids checked, and for each finding a file path, line number and one sentence. Anything that looks like a secret, an email address, or a card, Aadhaar or PAN number is replaced on arrival. A free check is turned into a scorecard, sent back, and not stored.
Teams can keep every check as audit evidence by connecting a Regulane workspace with an agent token; those checks are kept in the workspace. See the privacy notice, section 4c.
A clean scorecard means your agent checked the code it was given against these rules and found nothing. It is not a certification, an audit opinion or a penetration test, and Regulane does not run or scan your code itself.
[email protected] · regulane.com/contact
MIT
来源：README.md，提交 2a16f76
Get Regulane secure-coding rules
Returns the workspace's secure-coding rules: what to look for, how to fix it, and the ISO 27001 Annex A controls and DPDP Act sections each rule evidences. Call this before reviewing a change, then report with report_compliance_check.
areasGet a Regulane compliance scorecard
Turns the check you ran against the rules from get_compliance_rules into a scorecard: findings by severity, the ISO 27001 controls and DPDP Act sections affected, and the fix for each. Report a clean check too. Regulane does not store it. Send no source code, secrets or personal data.
agentscope必填branchcommitfindings必填repository必填rules_checked必填已满足适用检查项的 100%
该评分衡量此收录条目的完整程度，依据注册中心条目、端点与公开来源计算得出。它不是对服务器本身的评价，也不表示服务器安全或当前可用：可连通性是带日期的检查结果，评分也不包含安装量或用户评价。
claude mcp add --transport http regulane https://regulane.com/api/mcpcodex mcp add regulane --url https://regulane.com/api/mcpgemini mcp add --transport http regulane https://regulane.com/api/mcp