Skip to content

Merron

by merron.app · remote · no sign-in to list tools · v0.1.0 · published by app.merron

Inspect selected project excerpts and screen user-confirmed facts for bounded EU AI Act readiness.

Changes · 2
CompareRegistry entry

4 tools: 2 change things and 2 only read.

Scanned Oct 21, 2026

1 check matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http ai-act-check https://merron.app/mcp

Findings

Matches of fixed checks, with the text they matched.

1 warn
  • Warnmerron_screen_ai_act

    The server marks "merron_screen_ai_act" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The description's first verb is "run": a word for a change.

    What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

4 tools

Changes things 2Claude Code: ask
  • merron_prepare_workspaceSave this AI system to Merron so the user can build an evidence pack from it: the name, a description, the answers the user confirmed and the file/line findings from merron_scan_pr…No findings

    Why it is in this group

    • The description's first verb is "save": a word for a change.
    Description, as the server wrote it
    Save this AI system to Merron so the user can build an evidence pack from it: the name, a description, the answers the user confirmed and the file/line findings from merron_scan_project. Returns a private single-use link, valid 7 days; the user signs in, the system opens prefilled and Merron guides them through connecting the code, confirming the answers and creating the pack. Ask the user first and tell them what will be saved. Never include code excerpts, secrets or personal data; findings carry only paths, line numbers and codes. Give the user the link exactly as returned.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • merron_screen_ai_actRun Merron's versioned, bounded AI Act rules on facts the user has explicitly confirmed.1 finding

    Why it is in this group

    • The description's first verb is "run": a word for a change.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "merron_screen_ai_act" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The description's first verb is "run": a word for a change.

      What this check looks for
    Description, as the server wrote it
    Run Merron's versioned, bounded AI Act rules on facts the user has explicitly confirmed. Returns a conditional screening result, unresolved routes, missing questions and official references. Never infer confirmation or legal compliance from source code or absence of signals. Unknown answers remain unknown. This computation does not check documents, use an AI model, save a report, access accounts or certify compliance.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
Only reads 2Claude Code: allow
  • merron_get_questionsGet relevant business questions and explanations for a selected AI system.No findings

    Why it is in this group

    • The name "merron_get_questions" says "get": a word for reading.
    Description, as the server wrote it
    Get relevant business questions and explanations for a selected AI system. Pass only known user answers; omit unknown values or use null. Does not classify or assume unanswered questions mean No. No sign-in or private workspace access.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • merron_scan_projectFind possible AI integrations, model calls, disclosure wording and sensitive-use wording in user-selected project excerpts.No findings

    Why it is in this group

    • The description's first verb is "find": a word for reading.
    Description, as the server wrote it
    Find possible AI integrations, model calls, disclosure wording and sensitive-use wording in user-selected project excerpts. Returns file/line references and follow-up questions, not a legal classification. First explain that the excerpts will be sent to Merron and obtain the user's agreement. Never send secrets, personal customer records, whole repositories or files the user has not authorised. Does not fetch URLs, execute code, persist inputs or access private cases.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 0.1.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http ai-act-check https://merron.app/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__ai-act-check__merron_scan_project",
      "mcp__ai-act-check__merron_get_questions"
    ],
    "ask": [
      "mcp__ai-act-check__merron_screen_ai_act",
      "mcp__ai-act-check__merron_prepare_workspace"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as ai-act-check. Review it before you use it.