EuroComply — EU Regulatory Compliance

by eurocomply.app · remote · no sign-in to list tools · v0.3.0 · published by app.eurocomply

EU regulatory compliance data: 17 regulations, deadlines, enforcement actions. EU-hosted.

Changes · 7

Compare Registry entry

12 tools: 7 change things and 5 only read.

Scanned Oct 21, 2026

Deletes or cancels0Claude Code: deny
Can't be undone0Claude Code: ask
Changes things7Claude Code: ask: see these tools
Only reads5Claude Code: allow: see these tools

3 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http compliance https://eurocomply.app/api/mcp

Findings

Matches of fixed checks, with the text they matched.

3 warn

Warngenerate_executive_trust_dossier
The server marks "generate_executive_trust_dossier" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
Matched text
annotations: {"readOnlyHint":true,"idempotentHint":true}; The name "generate_executive_trust_dossier" says "generate": a word for a change.
What this check looks for
Warnaudit_repo_pull_request
The server marks "audit_repo_pull_request" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
Matched text
annotations: {"readOnlyHint":true,"idempotentHint":true}; The name "audit_repo_pull_request" says "request": a word for a change.
What this check looks for
Warnget_pack_checkout_link
The server marks "get_pack_checkout_link" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
Matched text
annotations: {"readOnlyHint":true,"idempotentHint":true}; The name "get_pack_checkout_link" says "get": a word for reading.
What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

12 tools

Changes things 7Creates or changes something that can be changed back.Claude Code: ask

answer_procurement_questionAnswer an enterprise procurement, security questionnaire, or RFP question regarding EU AI Act, GDPR, or data sovereignty.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Answer an enterprise procurement, security questionnaire, or RFP question regarding EU AI Act, GDPR, or data sovereignty. Returns an authoritative, legally and technically grounded response ready to paste into OneTrust, Whistic, or client emails.
Annotations the server declares
- title: Answer Vendor Procurement Question
- readOnlyHint: true
- idempotentHint: true
audit_local_ai_stackAudit an AI application architecture for EU AI Act risk classification, GDPR Chapter V international transfer exposure, and data sovereignty compliance.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Audit an AI application architecture for EU AI Act risk classification, GDPR Chapter V international transfer exposure, and data sovereignty compliance. Checks provider, inference region, zero-retention flags, and use case against statutory Annex III and Art. 50 criteria.
Annotations the server declares
- title: Audit AI Stack & Sovereignty
- readOnlyHint: true
- idempotentHint: true
audit_repo_pull_requestAudit a code diff, package.json dependencies, or source code snippet for EU AI Act obligations, non-EEA cloud data transfers, and prompt retention exposure.1 finding
Why it is in this group
- The name "audit_repo_pull_request" says "request": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Warn
  The server marks "audit_repo_pull_request" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
  Matched text
  annotations: {"readOnlyHint":true,"idempotentHint":true}; The name "audit_repo_pull_request" says "request": a word for a change.
  What this check looks for
Description, as the server wrote it
Audit a code diff, package.json dependencies, or source code snippet for EU AI Act obligations, non-EEA cloud data transfers, and prompt retention exposure. Generates a review-ready GitHub PR comment or CI/CD compliance report.
Annotations the server declares
- title: Audit Code & PR for EU Compliance
- readOnlyHint: true
- idempotentHint: true
autofill_security_questionnaireAuto-fill a batch of enterprise security, GDPR, and EU AI Act vendor questionnaire / RFP questions (e.g.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Auto-fill a batch of enterprise security, GDPR, and EU AI Act vendor questionnaire / RFP questions (e.g. OneTrust, SIG, Whistic, CAIQ, custom Excel). Returns structured answers with EUR-Lex statutory citations, technical proofs, and copy-pasteable memos. When no Polar license key is provided, returns free answers for the first 2 questions and a direct checkout link for the remainder.
Annotations the server declares
- title: Auto-Fill Vendor Security Questionnaire
- readOnlyHint: true
- idempotentHint: true
generate_executive_trust_dossierGenerate an Executive Trust & Compliance Dossier (ETD) for B2B enterprise procurement and vendor onboarding.1 finding
Why it is in this group
- The name "generate_executive_trust_dossier" says "generate": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Warn
  The server marks "generate_executive_trust_dossier" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
  Matched text
  annotations: {"readOnlyHint":true,"idempotentHint":true}; The name "generate_executive_trust_dossier" says "generate": a word for a change.
  What this check looks for
Description, as the server wrote it
Generate an Executive Trust & Compliance Dossier (ETD) for B2B enterprise procurement and vendor onboarding. Includes Executive Passport, vector data flow diagram, tripartite evidence grid, and procurement approval memo. When no license key is provided, returns an executive preview and instant checkout link.
Annotations the server declares
- title: Generate Executive Trust Dossier
- readOnlyHint: true
- idempotentHint: true
get_pack_checkout_linkGenerate an instant 1-click checkout link for any EuroComply compliance pack, emergency deal bundle, or dataset.1 finding
Why it is in this group
- The name "get_pack_checkout_link" says "get": a word for reading.
- The description's first verb is "generate": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Warn
  The server marks "get_pack_checkout_link" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
  Matched text
  annotations: {"readOnlyHint":true,"idempotentHint":true}; The name "get_pack_checkout_link" says "get": a word for reading.
  What this check looks for
Description, as the server wrote it
Generate an instant 1-click checkout link for any EuroComply compliance pack, emergency deal bundle, or dataset. Pre-fills customer email for zero-friction purchase. Returns direct payment URL (Polar MoR with EU VAT/reverse-charge support), price summary, and 3-step activation instructions to use the license key in MCP.
Annotations the server declares
- title: Get Pack Checkout Link
- readOnlyHint: true
- idempotentHint: true
verify_pack_licenseVerify a Polar license key or order transaction ID.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Verify a Polar license key or order transaction ID. Checks activation status and shows which premium MCP capabilities (e.g. Executive Trust Dossier, RFP Questionnaire Copilot) are active.
Annotations the server declares
- title: Verify Pack License Key
- readOnlyHint: true
- idempotentHint: true

Only reads 5Looks things up and changes nothing.Claude Code: allow

get_enforcement_actionsReturn recent EU enforcement actions ingested from official DPA publications (CNIL, Garante, ICO, AEPD, APD, Dutch AP, BfDI, EDPB, ESMA, EBA, EIOPA, CJEU, BSI, ANSSI).No findings
Why it is in this group
- The name "get_enforcement_actions" says "get": a word for reading.
Description, as the server wrote it
Return recent EU enforcement actions ingested from official DPA publications (CNIL, Garante, ICO, AEPD, APD, Dutch AP, BfDI, EDPB, ESMA, EBA, EIOPA, CJEU, BSI, ANSSI). Filter by country, regulation, or urgency. Each result includes source authority, regulation, title, summary, urgency (high/medium/low), publication date, and official source URL. Data is sourced directly from supervisory authority RSS feeds and updated continuously.
Annotations the server declares
- title: EU Enforcement Actions
- readOnlyHint: true
- idempotentHint: true
list_compliance_packsList all EuroComply commercial packs, emergency deal bundles, and statutory workbooks available for instant purchase via Polar.No findings
Why it is in this group
- The name "list_compliance_packs" says "list": a word for reading.
Description, as the server wrote it
List all EuroComply commercial packs, emergency deal bundles, and statutory workbooks available for instant purchase via Polar. Returns price in EUR, key deliverables, and instant 1-click checkout URLs. Commercial packs unlock premium evidence generation directly in MCP (e.g. full Executive Trust Dossier, unlimited vendor security questionnaire answers).
Annotations the server declares
- title: List Compliance Packs & Bundles
- readOnlyHint: true
- idempotentHint: true
list_regulationsList all EU regulations tracked by EuroComply with their short name, regulation number, CELEX, status, in-force date, application date, and a one-paragraph summary.No findings
Why it is in this group
- The name "list_regulations" says "list": a word for reading.
Description, as the server wrote it
List all EU regulations tracked by EuroComply with their short name, regulation number, CELEX, status, in-force date, application date, and a one-paragraph summary. Useful when the user wants an overview or to discover what regulations exist.
Annotations the server declares
- title: List EU Regulations
- readOnlyHint: true
- idempotentHint: true
regulation_lookupLook up a single EU regulation tracked by EuroComply.No findings
Why it is in this group
- The name "regulation_lookup" says "lookup": a word for reading.
Description, as the server wrote it
Look up a single EU regulation tracked by EuroComply. Returns the canonical structured entry: full name, regulation number, CELEX, summary, scope, status, in-force/application dates, all key dates with Article references, max fine with tier breakdown, supervising authorities, applies-to, sector applicability, primary articles map, EUR-Lex URL, and EuroComply hub URL. Accepts the short name (e.g. 'GDPR'), full name, or slug.
Annotations the server declares
- title: EU Regulation Lookup
- readOnlyHint: true
- idempotentHint: true
upcoming_deadlinesReturn upcoming regulatory deadlines across all tracked EU regulations within the next N days (default 365).No findings
Why it is in this group
- The description's first verb is "return": a word for reading.
Description, as the server wrote it
Return upcoming regulatory deadlines across all tracked EU regulations within the next N days (default 365). Each result includes regulation shortName, date, event description, and Article reference. Sorted ascending by date.
Annotations the server declares
- title: Upcoming Regulatory Deadlines
- readOnlyHint: true
- idempotentHint: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 0.3.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http compliance https://eurocomply.app/api/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json

{
  "permissions": {
    "allow": [
      "mcp__compliance__regulation_lookup",
      "mcp__compliance__list_regulations",
      "mcp__compliance__upcoming_deadlines",
      "mcp__compliance__get_enforcement_actions",
      "mcp__compliance__list_compliance_packs"
    ],
    "ask": [
      "mcp__compliance__audit_local_ai_stack",
      "mcp__compliance__generate_executive_trust_dossier",
      "mcp__compliance__answer_procurement_question",
      "mcp__compliance__autofill_security_questionnaire",
      "mcp__compliance__audit_repo_pull_request",
      "mcp__compliance__get_pack_checkout_link",
      "mcp__compliance__verify_pack_license"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as compliance. Review it before you use it.

Keep track

Get told when this server's tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/app.eurocomply/compliance/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Anlyon alternative

7 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →

Compare with other servers for the same product.

Source: MCP Registry. Synced Oct 21, 2026, 17:44 UTC.

For agents: Markdown · JSON · report this listing