protogrid

Search / io.github.ark-forge/mcp-eu-ai-act

mcp-eu-ai-act

R0· no sign-in

EU AI Act + GDPR compliance scanner. One call, no arguments, 10 seconds. 22 AI frameworks detected.

v2.0.31 · active · repository · descriptor JSON · versions

An agent can connect right now, no human step.Remote endpoint, no authentication, reachable on the last probe.
Quality79good
Trust87of 100
Uptime, 30 days97%
Latency p50587 ms

Connect

8 clients · secrets stay placeholders
{
  "mcpServers": {
    "mcp-eu-ai-act": {
      "type": "http",
      "url": "https://mcp.arkforge.tech/mcp"
    }
  }
}
claude mcp add --transport http mcp-eu-ai-act https://mcp.arkforge.tech/mcp
[mcp_servers.mcp-eu-ai-act]
url = "https://mcp.arkforge.tech/mcp"
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "mcp-eu-ai-act": {
      "type": "remote",
      "url": "https://mcp.arkforge.tech/mcp",
      "enabled": true
    }
  }
}
{
  "mcpServers": {
    "mcp-eu-ai-act": {
      "type": "http",
      "url": "https://mcp.arkforge.tech/mcp"
    }
  },
  "deeplink": "cursor://anysphere.cursor-deeplink/mcp/install?name=mcp-eu-ai-act&config=eyJ0eXBlIjoiaHR0cCIsInVybCI6Imh0dHBzOi8vbWNwLmFya2ZvcmdlLnRlY2gvbWNwIn0%3D"
}
{
  "servers": {
    "mcp-eu-ai-act": {
      "type": "http",
      "url": "https://mcp.arkforge.tech/mcp"
    }
  }
}
{
  "mcpServers": {
    "mcp-eu-ai-act": {
      "httpUrl": "https://mcp.arkforge.tech/mcp"
    }
  }
}
extensions:
  "mcp-eu-ai-act":
    enabled: true
    name: "mcp-eu-ai-act"
    type: streamable_http
    uri: "https://mcp.arkforge.tech/mcp"
    timeout: 300

Quality 79 / 100good

protocol75 · weight 25
  • warn
    protocol.modernnewest supported version is 2025-11-25; 2026-07-28 not supported, older versions are deprecated until 2027-07-28
  • n/a
    protocol.statelessonly applies to 2026-07-28 servers
  • pass
    protocol.transportstreamable HTTP
  • n/a
    protocol.list_ttlonly applies to 2026-07-28 servers
authorizationn/a · weight 15
  • n/a
    auth.prm, auth.as_metadata, auth.cimdno remote uses OAuth
  • n/a
    auth.secret_in_urlno templated URL
tool hygiene71 · weight 30
  • pass
    tools.descriptionsevery tool has a description
  • pass
    tools.description_lengthdescriptions are concise
  • pass
    tools.schemasevery tool has an object input schema
  • fail
    tools.annotationsno tool declares readOnlyHint or destructiveHint, so clients cannot tell safe calls from risky ones
  • fail
    tools.directory_hintsno tool declares all four of readOnlyHint, destructiveHint, idempotentHint and openWorldHint; missing: suggest_risk_category (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); generate_compliance_templates (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); gdpr_generate_templates (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); …
  • pass
    tools.token_costabout 3,047 tokens to load every tool
  • pass
    tools.api_dumptools are not a one-to-one API dump
stability100 · weight 15
  • pass
    stability.changesno tool changes in 30 days
  • pass
    stability.rug_pullno tool changed its meaning under the same name
dependenciesn/a · weight 15
  • n/a
    deps.known_vulns, deps.mcp_sdk_version, deps.resolvableno npm or PyPI package

16 tools, about 3,047 tokens to load them all · tool set 6c726405071b · checked 2026-10-20 13:17 UTC

Tool changes

No tool definition changes recorded. A server's first observation is its baseline; later probes record what changes.

Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.

Trust 87 / 100

provenance80
liveness99
freshness65
hygiene100

+repository +namespace-matches-repo +reachable +uptime-97% ~updated-179d-ago

Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. How it is computed.

Endpoints

remoteauthreachableuptime 30dp50protocollast ok
https://mcp.arkforge.tech/mcp streamable-httpnoneyes97%587 ms2025-11-252026-10-20

Tools (16)

certify_compliance_reportMake your compliance report tamper-proof for Art. 12 audit trail — pass the report JSON, get back a proof_id and a public verification URL you can hand to auditors. Certified plan required. Run generate_report() first to produce the report.
check_complianceCheck whether your project passes or fails each EU AI Act requirement — no arguments, 5 seconds. See exactly which articles you violate (Art. 52 transparency, Art. 11 documentation, Art. 14 human oversight, Art. 15 robustness) and get step-by-step fix instructions for every gap. Call combined_compliance_report() for EU AI Act + GDPR together.
combined_compliance_reportRun this before your next deploy. One call reveals every EU AI Act + GDPR gap in your codebase — no arguments, no setup, under 10 seconds, free. Detects AI frameworks and personal data flows, flags where both laws overlap, returns pass/fail per article with a prioritized fix list. EU AI Act fines up to 35M EUR, GDPR up to 20M EUR. Replaces separate scan_project() and gdpr_scan_project() calls.
gdpr_check_complianceCheck whether your project passes or fails each GDPR requirement — no arguments. See pass/fail for lawful basis (Art. 6), consent (Art. 7), data subject rights (Art. 15–22), security (Art. 32), and breach notification (Art. 33–34) with fix instructions for every gap. GDPR fines reach 20M EUR or 4% turnover. For EU AI Act + GDPR together, call combined_compliance_report().
gdpr_generate_reportGenerate the GDPR report your DPO needs — no arguments. Combines personal data inventory, gap analysis, and remediation steps in one structured document for DPO review, audit prep, or regulatory response. For EU AI Act + GDPR together, call combined_compliance_report().
gdpr_generate_templatesGet pre-filled GDPR templates your organization actually needs — no arguments. Privacy Policy, DPIA, Records of Processing Activities (ROPA), and Data Breach Procedure tailored to your processing role. Fill in [bracketed] sections. Run gdpr_check_compliance() first to see which documents you're missing.
gdpr_scan_projectFind every file in your project that touches personal data — no arguments, 5 seconds, free. Detects PII fields, cookies, tracking pixels, analytics SDKs, and consent flows. Returns flagged files with data categories and applicable GDPR articles. GDPR fines reach 20M EUR or 4% turnover. For EU AI Act + GDPR together, call combined_compliance_report().
generate_annex4_packageBuild the Annex IV evidence package your auditor needs for high-risk AI — no arguments. All 8 mandatory sections auto-populated from your project scan, SHA-256 integrity hash included. High-risk rules apply Aug 2026. Pro plan required.
generate_compliance_roadmapGet a prioritized, week-by-week plan to close every compliance gap before Aug 2027 — no arguments. Auto-scans your project, ranks fixes by impact, sequences quick wins first, tells you whether your deadline is achievable. Pro plan required — run check_compliance() for a free gap summary.
generate_compliance_templatesStop writing compliance docs from scratch — get pre-filled templates for risk management, technical documentation, transparency notice, and human oversight policy tailored to your risk category. High-risk systems get all 6 mandatory documents. Save to docs/, fill in [bracketed] sections. Run check_compliance() first to see which documents you're missing.
generate_reportGenerate the compliance report your legal team is asking for — no arguments. One call auto-detects AI frameworks, runs gap analysis, and produces a structured remediation plan ready for legal review or DPIA attachment. No API key needed.
get_pricingSee pricing and features for every plan — Free (10 scans/day, full reports), Pro (29 EUR/mo, unlimited + CI/CD), Certified (cryptographic audit trail). No arguments. Call register_free_key() to activate your free API key.
register_free_keyActivate a free API key — unlocks scan history and CI/CD integration. Pass the user's email, no password or credit card. IMPORTANT: ask the user to type their email first, wait for their reply, then call this with the exact email they typed. Do NOT pass a placeholder or fabricated email.
scan_projectFind out in 5 seconds if your project triggers EU AI Act obligations — no arguments, no setup. Scans for 22 AI/ML frameworks (OpenAI, Anthropic, LangChain, HuggingFace, PyTorch, TensorFlow, scikit-learn…), returns your risk category and the legal actions required before you ship. Enforcement live since Feb 2025 — fines up to 35M EUR. For EU AI Act + GDPR together, call combined_compliance_report() instead.
suggest_risk_categoryDescribe what your AI system does in plain language — get back your EU AI Act risk tier, the articles that apply, and your first compliance step. Returns matched category (minimal/limited/high/unacceptable) with confidence level and triggering risk indicators. No project scan needed, no API key.
validate_api_keyCheck your API key status — returns plan tier (free/pro/certified), email, and usage stats (total scans, last scan date).

Schemas: list_tools.

Similar MCP servers

More from io.github.ark-forge

Official server.json
{
  "name": "io.github.ark-forge/mcp-eu-ai-act",
  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
  "remotes": [
    {
      "url": "https://mcp.arkforge.tech/mcp",
      "type": "streamable-http"
    }
  ],
  "version": "2.0.31",
  "repository": {
    "url": "https://github.com/ark-forge/mcp-eu-ai-act",
    "source": "github"
  },
  "description": "EU AI Act + GDPR compliance scanner. One call, no arguments, 10 seconds. 22 AI frameworks detected."
}