Coppa Ferpa Mcp

io.github.CSOAI-ORG由 GitHub 帳號 CSOAI-ORG 發布v1.0.8更新於 Nov 5, 2026

Children's privacy compliance: COPPA (US), FERPA (US edu), EU AI Act children's provisions, UK A...

已驗證STDIO僅桌面知識與記憶安全與監控

概覽

AI 產生的概覽

兒童隱私合規(COPPA、FERPA、歐盟 AI 法案、英國設計準則)的早期雛形,評估工具僅回傳佔位回應,另可選用本機法規檢索。

可以做什麼
  • 執行五個具名評估工具,分別涵蓋 13 歲以下處理、FERPA 教育紀錄、英國兒童設計準則、歐盟 AI 法案未成年人條款與兒童資料流對應,目前皆回傳佔位狀態且法規引用為空。
  • 檢索另行建置的本機 SQLite FTS5 法規資料庫,並讀取其中介資料;資料庫不存在時會明確回報錯誤。
適用情境
僅適合檢視或試用此雛形的結構與工具命名,或查詢你自行準備的法規資料庫。不適合用於實際的合規評估、稽核或涉及兒童資料的處理決策。
執行需求
本機需 Python 3.10 或更新版本,從 PyPI 安裝 coppa-ferpa-mcp 並以 stdio 執行。法規資料庫未隨套件提供,可用選用的環境變數指向另行建置的資料庫。未宣告任何身分驗證。
安裝前請注意
README 明確指出這是早期雛形而非正式環境的合規評估工具,也不構成法律意見;工具名稱不代表對應評估已實作。請勿向其提供兒童個人資料、學生紀錄或正式環境憑證。原始碼會從特定安裝位置載入共用驗證程式碼,可能保留本機使用紀錄與 API 金鑰紀錄,且存在可向外部驗證端點送出 api_key 的 HTTP 計量輔助函式,因此不應假定其離線運作。舊版回應可能含有推廣文字與簽章連結。

安裝

在 SourceWeft 中

  1. 開啟 儀表板中的 Coppa Ferpa Mcp,將其新增到工作區。
  2. 為需要使用其工具的對話啟用該服務。

Desktop only,透過 STDIO。 STDIO 服務會啟動本機處理程序,因此需要 SourceWeft 桌面主機。

其他 MCP 客戶端

參照 儲存庫 中的啟動說明。

README

Children's privacy MCP — implementation status

Maintained in the Council of AI / CSOAI Ltd ecosystem. The package and repository identifier remain coppa-ferpa-mcp; existing MIT copyright notices are preserved.

This repository contains an early scaffold, not a production compliance assessor. Five named assessment tools currently return status: "stub" with empty regulation_refs. Installing or calling them does not establish legal compliance, certification, a completed audit, or suitability for processing children's data. Measurement and verification are not certification. This is not legal advice.

What the source implements

ToolCurrent source behaviour
check_under_13_processingReturns a scaffold response, not a parental-consent determination.
ferpa_auditReturns a scaffold response, not an education-records audit.
aadc_uk_checkReturns a scaffold response, not an assessment against the UK design code.
eu_ai_act_minorsReturns a scaffold response, not a legal assessment.
kids_data_flow_mapReturns a scaffold response, not an observed data-flow map or validated risk score.
search_regulationSearches a separately configured local SQLite FTS5 database; reports an error when it is unavailable.
list_regulations_in_dbReads metadata from that same optional local database; reports its absence explicitly.

See server.py for the implementation. Tool names describe intended areas of work; they are not evidence that those assessments are implemented. A snippet retrieved from a database is not proof of completeness, legal currency, or applicability to a particular organisation.

Package interface

pyproject.toml declares Python 3.10 or newer and the command-line entry point coppa-ferpa-mcp = "server:main". The source uses MCP over stdio. The existing package installation interface is:

bash
python -m pip install coppa-ferpa-mcp

Example client configuration:

json
{  "mcpServers": {    "coppa-ferpa-mcp": {      "command": "coppa-ferpa-mcp"    }  }}

Review the installed package version, dependencies and local configuration first. This documentation correction does not establish a successful current package installation, runtime acceptance, or a new package release.

Data, network and storage boundaries

Do not provide children's personal data, student records, production credentials or other sensitive inputs to this scaffold.

The optional regulation database is not bundled by the declared wheel file list, which includes server.py. MEOK_EURLEX_DB can identify a separately provisioned database. This README does not promise a database, a live sync, any article count, or that its contents are current.

The source attempts to load shared authentication code from an installation-specific location. Its available behaviour can depend on that environment and may maintain local usage and API-key records. No universal free quota is promised here.

server.py also defines an HTTP metering helper for https://proofof.ai/verify: if invoked, it submits an api_key and a tool field (the latter is empty in the inspected helper). The five scaffold tool bodies do not invoke that helper directly. Do not infer that all deployments are offline or network-isolated from use of stdio.

Legacy runtime responses can still contain promotional text and signing links. Those strings are not evidence that the promised service is active, that a signature establishes compliance, or that a displayed price is authoritative. This documentation-only correction does not alter tool execution, authentication, rate limiting, billing, signing or published package bytes.

Current commercial information

Earlier README revisions contained conflicting subscription prices and unverified promises of unlimited audits, instant signing, service levels and refunds. Those promotional claims and direct checkout links have been removed from this README. No replacement subscription, new price, or automated signing offer is made here.

For separately scoped measurement or evidence work, use the current service and contact information at Council of AI. Agree the exact scope, deliverable, limitations and commercial terms before any paid work. There is no purchase required by this README to inspect the repository's MIT-licensed code.

Documentation checks

Run the source-only documentation checks without installing or importing the server:

bash
python3 tests/test_readme_contract.py

These check the description against the source and reject reintroduced pricing or blanket compliance claims. They do not test legal correctness, server execution, network behaviour or independent customer use.

Licence

MIT, copyright 2026 MEOK AI Labs, as recorded in the unchanged licence. The package identifier, licence, historical commits and tool implementation are unchanged. Council of AI is operated by CSOAI Ltd.

來源:README.md,提交 640c3f0

工具

0
SourceWeft 尚未在沙箱中啟動過該軟體包,因此其工具未知。

版本歷史

1
  1. v1.0.8最新Sep 16, 2026

評分

已滿足適用檢查項的 50%

該評分衡量此收錄條目的完整程度,依據註冊中心條目、端點與公開來源計算得出。它不是對伺服器本身的評價,也不表示伺服器安全或目前可用:可連通性是帶日期的檢查結果,評分也不包含安裝量或使用者評價。

  • 近 30 天內可連通25 分

    請保持端點能夠回應 MCP 握手;SourceWeft 每 30 天探測一次。

  • 已宣告認證方式10 分

    請在註冊中心條目中宣告憑證請求標頭,或保持端點能夠回應探測,以便判定其認證方式。

  • 已列出工具15 分

    請讓伺服器在無憑證時回應 tools/list,或發布可在沙箱中無憑證啟動的軟體包。

  • 描述必需15 分
  • 圖示10 分
  • 文件15 分
  • 授權條款10 分