Rival Regulatory Toolkit

io.github.rival-intelligence由 GitHub 帳號 rival-intelligence 發布v0.1.5更新於 Oct 24, 2026

Read-only regulatory source retrieval, citation tracing, authority metadata, and recent filings.

已驗證STDIO僅桌面知識與記憶商業與電商

概覽

AI 產生的概覽

讓助理透過 Rival 的唯讀 API 檢索法規語料、取得原文、追蹤引用、列出權威來源並查看近期申報文件。

可以做什麼
此伺服器提供五個唯讀工具:search_regulatory_corpus、retrieve_source_text、trace_citation、list_authorities 與 get_recent_filings。它將助理連接到 Rival 以來源為基礎的法規檢索 API,回傳來源文件、引用、權威中繼資料與近期申報文件。Fixture 模式可針對內附的範例語料運行,無需 API 存取即可評估整合。
適用情境
當助理需要查詢法規來源、追蹤引用鏈,或查看權威中繼資料與近期申報文件時適用。適合希望在助理工作流程中進行以來源為基礎檢索的合規、法律、能源與基礎設施團隊。它不用於提交申報文件或變更合規紀錄。
執行需求
透過 stdio 在本機執行,通常以 npx 從 npm 套件 @tryrival/regulatory-toolkit 啟動,或使用提供的 Docker 映像。正式環境存取需要 RIVAL_API_KEY 密鑰;RIVAL_API_BASE_URL 預設指向託管 API 端點。設定 RIVAL_FIXTURE_MODE=true 可在無密鑰情況下評估。除 fixture 模式外需要網路存取。
安裝前請注意
RIVAL_API_KEY 密鑰透過環境變數傳入並可存取託管 API,請勿放入共用設定。此工具包為唯讀,不會提交申報文件、變更合規紀錄或執行工作區操作。其輸出不構成法律、工程、環境、安全或合規建議,受監管工作仍需合格人員審閱。

安裝

在 SourceWeft 中

  1. 開啟 儀表板中的 Rival Regulatory Toolkit,將其新增到工作區。
  2. 為需要使用其工具的對話啟用該服務。

Desktop only,透過 STDIO。 STDIO 服務會啟動本機處理程序,因此需要 SourceWeft 桌面主機。

其他 MCP 客戶端

參照 儲存庫 中的啟動說明。

README

Rival Regulatory Toolkit

Open-source SDK, CLI, MCP server, and schemas for connecting AI agents to Rival's source-grounded regulatory retrieval API.

This repository is the developer and agent connectivity layer for Rival. It is intentionally read-only in its first release: agents can search, retrieve source text, trace citations, list authorities, and inspect recent filings. Workspace actions, document review, evidence requests, filings, and task creation remain behind managed Rival access and human review gates.

What Is Included

  • OpenAPI contract for Rival's read-only regulatory retrieval API.
  • JSON Schemas for source documents, search results, citations, authorities, and recent filings.
  • TypeScript client for server-side applications and internal tools.
  • CLI for shell usage and automation.
  • MCP server for agent clients that support Model Context Protocol.
  • Fixture mode so teams can evaluate the integration without a Rival API key.
  • Dockerfile for running the MCP server in controlled team environments.

Install

sh
npm install @rival-intelligence/regulatory-toolkit

For local development from source:

sh
npm installnpm run build

Environment

sh
export RIVAL_API_KEY="rv_live_..."export RIVAL_API_BASE_URL="https://api.tryrival.ai"

For local evaluation without API access:

sh
export RIVAL_FIXTURE_MODE=true

TypeScript Client

ts
import { RivalRegulatoryClient } from '@rival-intelligence/regulatory-toolkit';
const rival = new RivalRegulatoryClient({  apiKey: process.env.RIVAL_API_KEY,});
const results = await rival.searchRegulatoryCorpus({  query: '49 CFR 195.573',  limit: 5,});
console.log(results.results[0]?.source.citation);

CLI

sh
rival-regulatory search "49 CFR 195.573"rival-regulatory source "cfr-49-195-573"rival-regulatory trace "49 CFR 195.573"rival-regulatory authorities

Fixture mode:

sh
rival-regulatory search "pipeline corrosion" --fixture

MCP Server

Run directly:

sh
npx @rival-intelligence/regulatory-toolkit mcp

MCP client example:

json
{  "mcpServers": {    "rival-regulatory": {      "command": "npx",  "args": ["-y", "@rival-intelligence/regulatory-toolkit", "mcp"],      "env": {        "RIVAL_API_KEY": "rv_live_...",        "RIVAL_API_BASE_URL": "https://api.tryrival.ai"      }    }  }}

Available MCP tools:

  • search_regulatory_corpus
  • retrieve_source_text
  • trace_citation
  • list_authorities
  • get_recent_filings

Docker

Docker belongs in this repository because many compliance, legal, consulting, energy, and infrastructure teams will run agent tools inside controlled environments. The image runs the MCP server and reads credentials from environment variables.

sh
docker build -t rival-regulatory-toolkit .docker run --rm -i \  -e RIVAL_API_KEY="$RIVAL_API_KEY" \  -e RIVAL_API_BASE_URL="https://api.tryrival.ai" \  rival-regulatory-toolkit

Fixture mode:

sh
docker run --rm -i -e RIVAL_FIXTURE_MODE=true rival-regulatory-toolkit

See docs/self-hosting.md for deployment notes.

API Contract

The API contract starts with five read-only endpoints:

  • GET /api/v1/search
  • GET /api/v1/sources/{source_id}
  • GET /api/v1/citations/trace
  • GET /api/v1/authorities
  • GET /api/v1/filings/recent

The contract lives in openapi/rival-regulatory-api.yaml.

Safety Boundary

This toolkit does not submit filings, alter compliance records, close corrective actions, delete evidence, or take workspace actions. It is a source retrieval and citation layer for agents and developer systems. Regulated work still requires qualified human review.

This toolkit is not legal, engineering, environmental, safety, or compliance advice. Teams are responsible for validating applicability, obligations, filings, and operational decisions with qualified professionals.

Development

sh
npm installnpm run buildnpm test

License

Apache-2.0

來源:README.md,提交 f36bd3a

工具

0
SourceWeft 尚未在沙箱中啟動過該軟體包,因此其工具未知。

版本歷史

1
  1. v0.1.5最新Sep 16, 2026

評分

已滿足適用檢查項的 50%

該評分衡量此收錄條目的完整程度,依據註冊中心條目、端點與公開來源計算得出。它不是對伺服器本身的評價,也不表示伺服器安全或目前可用:可連通性是帶日期的檢查結果,評分也不包含安裝量或使用者評價。

  • 近 30 天內可連通25 分

    請保持端點能夠回應 MCP 握手;SourceWeft 每 30 天探測一次。

  • 已宣告認證方式10 分

    請在註冊中心條目中宣告憑證請求標頭,或保持端點能夠回應探測,以便判定其認證方式。

  • 已列出工具15 分

    請讓伺服器在無憑證時回應 tools/list,或發布可在沙箱中無憑證啟動的軟體包。

  • 描述必需15 分
  • 圖示10 分
  • 文件15 分
  • 授權條款10 分