Acf Mcp

io.github.acfstandard由 GitHub 帳號 acfstandard 發布v2.0.1更新於 Nov 3, 2026

Official ACF® MCP server: Agentic Commerce Framework® governance copilot for AI assistants.

概覽

AI 產生的概覽

ACF® 官方 MCP 伺服器,為助理提供以 Agentic Commerce Framework 方法論卡片、原則與法規對應為基礎的 AI 代理治理副駕駛。

可以做什麼
  • 檢索 ACF® 語料庫,查詢方法論卡片、術語定義與經核實的法規條文
  • 在歐盟 AI 法案、GDPR、DORA、NIS2、ISO/IEC 42001 與 ACF® 卡片之間建立雙向對應
  • 執行初步評估:代理分類、自主等級評估、治理缺口辨識、既有授權審查
  • 為 DDAO 指派控制措施,並為高風險系統列出完整的 AI 法案義務清單
  • 依 APA、MLA、Chicago、ISO 690 或 BibTeX 格式產生引用
適用情境
適合起草或稽核 AI 代理治理時使用:上線前的代理資格判定、決定授予多少自主權、撰寫董事會備忘錄、監理申報或稽核,且需引用 ACF® 及歐盟 AI 法案、GDPR、DORA、NIS2、ISO 42001 時。
執行需求
以本機 stdio 程序執行,透過 npm 套件 acf-mcp 安裝,需要使用者電腦上具備 Node.js 與 npm。未宣告任何驗證、環境變數或標頭。僅支援桌面用戶端,無法在瀏覽器中執行。
安裝前請注意
各評估工具回傳的是附有不確定性標註的初步判斷,並非合規認證或法律意見;採用前應核對原始法規文本。工具為唯讀查詢與評估,未宣告寫入、憑證或付款行為。

安裝

在 SourceWeft 中

  1. 開啟 儀表板中的 Acf Mcp,將其新增到工作區。
  2. 為需要使用其工具的對話啟用該服務。

Desktop only,透過 STDIO。 STDIO 服務會啟動本機處理程序,因此需要 SourceWeft 桌面主機。

其他 MCP 客戶端

參照 儲存庫 中的啟動說明。

README

該儲存庫沒有 README。

工具

13

acf.fiche.lookup

When facing a specific governance question (defining an agent's mandate, designing a kill switch, building a decision register…), retrieve the canonical ACF® methodological card that applies: with its example, its mapping to principles and its related cards.

輸入參數code必填localeinclude_frontmatter

acf.regulation.article

When a regulator, an auditor or a board references a specific article (AI Act Art. 9, GDPR Art. 35, DORA Art. 28, NIS2 Art. 21, ISO 42001 §6…), get the verified text and its operational translation into the ACF® framework: which principles it activates and which fiches operationalise it.

輸入參數localearticle必填regulation必填

acf.glossary.define

When governance vocabulary becomes ambiguous (what is a DDAO? what does Decision Sovereignty exactly mean? what separates co-decision from supervised autonomy?), get the canonical ACF® definition and its connection to the rest of the doctrine.

輸入參數term必填locale

acf.cite

When writing a thesis, a regulatory filing, a board memo or an academic paper that needs to reference ACF®, produce a properly formatted citation in the requested style (APA, MLA, Chicago, ISO 690, BibTeX).

輸入參數uri必填stylelocale

acf.classify-agent

When a system owner needs a first-pass governance qualification of an AI agent before go-live: what autonomy level it likely operates at, what risk class it likely carries, what regulations apply, what controls to put in place, who should sign off: get one structured preliminary assessment covering all five questions in a single call. Input kept deliberately simple (10 qualified fields); output is structured for human review, not for autonomous regulatory decision-making.

輸入參數name必填localesectorgpai_used必填description必填jurisdictionusage_audience必填ai_act_triggersdecisions_taken必填external_actions必填financial_exposure必填personal_data_level必填另有 2 個

acf.advisor

When a user describes a real AI use case and needs a structured ACF® governance assessment in return: which principles fire, which autonomy level fits, which regulatory obligations apply, which fiches to mobilise in what order, what are the first operational actions, what are the operational risks. This is the conversion tool: from documentation library to governance advisor.

輸入參數localesectorjurisdictioncase_description必填deployment_scale

acf.assess-autonomy

When deciding how much autonomy to grant an agent: should it propose, decide or execute? what triggers human review? what is the kill switch design?: get a first-pass assessment grounded in the 4 ACF® autonomy levels with explicit go/no-go criteria, gating thresholds, and uncertainty signalling for human review.

輸入參數localereversibility必填intended_actions必填agent_description必填audit_requirements必填human_in_loop_cost

acf.identify-governance-gaps

When auditing your current AI governance setup: what does ACF® suggest you should have that you don't?: get a first-pass gap analysis across the 4 ACF® principles, prioritised by criticality, with remediation actions, quick wins, and explicit uncertainty signalling on which gaps were inferred vs declared.

輸入參數localesectorcurrent_inventory必填current_processes必填

acf.map-ai-act-obligations

When a system has been preliminarily qualified as high-risk and you need the exhaustive list of AI Act obligations that apply: Art. 9 risk management, Art. 10 data, Art. 11 docs, Art. 12 logs, Art. 13 transparency, Art. 14 human oversight, Art. 15 robustness, GPAI Art. 51-55: get the full obligation set structured by lifecycle phase (pre-go-live / continuous / on-incident) with deadlines (incl. Digital Omnibus deferrals) and ACF® operational translation.

輸入參數annex必填localeuse_case必填gpai_usedprovider_or_deployer必填

acf.assign-ddao-controls

When a DDAO needs concrete controls assigned to an autonomous agent: what kill switches, what escalation thresholds, what audit trails, what documentation, who owns each control: get the ACF® control set scoped to the agent's autonomy level and risk class, with double vocabulary (plain-English recommended_controls + ACF-canonical ddao_controls) for external clarity.

輸入參數localerisk_level必填autonomy_level必填agent_description必填budget_constraint

acf.evaluate-agent-mandate

When an existing agent mandate already exists (drafted or proposed for DDAO sign-off) and you need a first-pass audit before go-live or regulatory inspection: does it cover the decision perimeter, the escalation thresholds, the kill switch, the audit trail, the documentation duty?: get a structured preliminary verdict with strengths, gaps, required additions, and explicit gaps_to_validate for the human reviewer.

輸入參數localemandate_text必填agent_purpose必填deployment_context

acf.map-to-standards

When a DDAO, an auditor or a compliance officer needs to know which articles of the major external standards (EU AI Act, GDPR, DORA, NIS2, ISO/IEC 42001) each ACF® methodological card connects to: and which ACF® cards a given external article relies on: get the reverse-index built from the same canonical mapping consumed by acf.regulation.article. Useful for cross-mapping audits, regulator filings, and ACF×AI Act conformity arguments. Pass a single fiche_id (e.g. ACF-07) for a focused view, or call without it for the complete inventory of the toolkit cards that the mapping references.

輸入參數localefiche_idregulations

版本歷史

1
  1. v2.0.1最新Nov 1, 2026

評分

已滿足適用檢查項的 65%

該評分衡量此收錄條目的完整程度,依據註冊中心條目、端點與公開來源計算得出。它不是對伺服器本身的評價,也不表示伺服器安全或目前可用:可連通性是帶日期的檢查結果,評分也不包含安裝量或使用者評價。

  • 近 30 天內可連通25 分
  • 已宣告認證方式10 分

    請在註冊中心條目中宣告憑證請求標頭,或保持端點能夠回應探測,以便判定其認證方式。

  • 已列出工具必需15 分
  • 描述必需15 分
  • 圖示10 分
  • 文件15 分

    請宣告包含 README 的 GitHub 儲存庫,或在 OAuth 受保護資源後設資料中提供 resource_documentation。

  • 授權條款10 分

    請在儲存庫或註冊中心條目中宣告授權條款。