# Compliance Registry

> First A2A registry where AI agents discover & transact with compliance firms - audits, permits.

- name: net.complianceregistry/mcp-server
- version: 1.0.0
- connection class: unknown (unknown)
- trust: 56/100 flags: unreachable
- quality: 73/100 (needs work)
- owner: not claimed
- descriptor: https://api.protogrid.dev/v1/servers/net.complianceregistry%2Fmcp-server
- tools: https://api.protogrid.dev/v1/servers/net.complianceregistry%2Fmcp-server/tools

**Not classified yet.** The remote endpoints have not been probed successfully, or the listing has nothing to connect to.

## Connection (mcpServers)

```json
{
  "mcpServers": {
    "complianceregistry": {
      "type": "http",
      "url": "https://complianceregistry.net/mcp/"
    }
  }
}
```


## Trust

- hygiene: 100
- liveness: 0
- freshness: 65
- provenance: 75
- drivers: +repository +dns-namespace -unreachable(7 failures) ~updated-176d-ago
- Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed.

## Quality 73/100 (needs work)

### protocol: 75 (weight 25)

- warn `protocol.modern`: newest supported version is 2025-11-25; 2026-07-28 not supported, older versions are deprecated until 2027-07-28
- n/a `protocol.stateless`: only applies to 2026-07-28 servers
- pass `protocol.transport`: streamable HTTP
- n/a `protocol.list_ttl`: only applies to 2026-07-28 servers

### authorization: n/a (weight 15)

- n/a `auth.prm`, `auth.as_metadata`, `auth.cimd`: no remote uses OAuth
- n/a `auth.secret_in_url`: no templated URL

### tool hygiene: 71 (weight 30)

- pass `tools.descriptions`: every tool has a description
- pass `tools.description_length`: descriptions are concise
- pass `tools.schemas`: every tool has an object input schema
- fail `tools.annotations`: no tool declares readOnlyHint or destructiveHint, so clients cannot tell safe calls from risky ones
- fail `tools.directory_hints`: no tool declares all four of readOnlyHint, destructiveHint, idempotentHint and openWorldHint; missing: find_compliance_firm (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); request_quote (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); get_wcag_audit (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); …
- pass `tools.token_cost`: about 1,130 tokens to load every tool
- pass `tools.api_dump`: tools are not a one-to-one API dump

### stability: 75 (weight 15)

- warn `stability.changes`: 54 tool changes in 30 days
- pass `stability.rug_pull`: no tool changed its meaning under the same name

### dependencies: n/a (weight 15)

- n/a `deps.known_vulns`, `deps.mcp_sdk_version`, `deps.resolvable`: no npm or PyPI package

- tools: 6, about 1,130 tokens to load them all
- tool set hash: 8333a2bc22cba2b4d327a529b9e8e9db
- tools last changed: 2026-09-30T10:35:32.945Z
- badge: [![protogrid quality](https://protogrid.dev/badge/net.complianceregistry/mcp-server.svg)](https://protogrid.dev/servers/net.complianceregistry/mcp-server)
- Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed.

### Tool changes

- 2026-09-30 `request_quote` added
  - Request a quote from a Compliance Registry firm. firm_slug: directory slug for the target firm prospect_email: caller's email for the firm's reply scope_summary: one-paragraph description of the work budget_band: 'under_5k' | '5k_25k' | '25k_100k' | '100k_plus' | 'open' — or any free-text dollar figure
- 2026-09-30 `claim_listing` added
  - Record a firm's intent to claim its directory listing. Pre-OAuth, TESSA logs the claim and a representative reaches out via email within one business day to verify the claimant and switch the listing's verification status to 'claimed'. Full self-service OAuth-2.1 claim flow lands in a follow-up plan.
- 2026-09-30 `request_introduction` added
  - Request a warm introduction to a Compliance Registry firm. target_firm_slug is required (this tool routes leads to listed firms, not to TESSA directly). TESSA logs the lead and forwards a warm intro email to the firm with TESSA Cc'd. No calendar booking.
- 2026-09-30 `get_firm_profile` added
  - Full dossier for a single firm in the Compliance Registry: description, headquarters, founded year, employee band, services, locations, sub-vertical, taxonomy, and directory meta (publisher, claim URL, takedown URL).
- 2026-09-30 `get_wcag_audit` added
  - Structured offering for TESSA's WCAG 2.2 AA Accessibility Audit: scope, deliverables, timeline, pricing bands (hourly + engagement range), paired service-type slugs, and TESSA's profile URL in the Compliance Registry. Use when a buyer agent wants accessibility audit details in structured form.
- 2026-09-30 `find_compliance_firm` added
  - Search the Compliance Registry for vetted compliance and regulatory firms. sub_vertical: 'environmental_compliance' | 'accessibility' (or free-text keyword) region: city or state name (case-insensitive contains) capability: keyword to match against firm descriptions and service names (e.g., 'phase i esa', 'wcag', 'permits', 'inspections') limit: max results
- 2026-09-29 `claim_listing` removed
  - Record a firm's intent to claim its directory listing. Pre-OAuth, TESSA logs the claim and a representative reaches out via email within one business day to verify the claimant and switch the listing's verification status to 'claimed'. Full self-service OAuth-2.1 claim flow lands in a follow-up plan.
- 2026-09-29 `request_introduction` removed
  - Request a warm introduction to a Compliance Registry firm. target_firm_slug is required (this tool routes leads to listed firms, not to TESSA directly). TESSA logs the lead and forwards a warm intro email to the firm with TESSA Cc'd. No calendar booking.
- 2026-09-29 `find_compliance_firm` removed
  - Search the Compliance Registry for vetted compliance and regulatory firms. sub_vertical: 'environmental_compliance' | 'accessibility' (or free-text keyword) region: city or state name (case-insensitive contains) capability: keyword to match against firm descriptions and service names (e.g., 'phase i esa', 'wcag', 'permits', 'inspections') limit: max results
- 2026-09-29 `request_quote` removed
  - Request a quote from a Compliance Registry firm. firm_slug: directory slug for the target firm prospect_email: caller's email for the firm's reply scope_summary: one-paragraph description of the work budget_band: 'under_5k' | '5k_25k' | '25k_100k' | '100k_plus' | 'open' — or any free-text dollar figure

Full history: https://api.protogrid.dev/v1/servers/net.complianceregistry%2Fmcp-server/changes

## Remotes

- https://complianceregistry.net/mcp/ (streamable-http, auth none, reachable false, uptime30d 0.82608694)

## Packages

_none_

## Tools (6)

- `claim_listing`: Record a firm's intent to claim its directory listing.

        Pre-OAuth, TESSA logs the claim and a representative reaches out
        via email within one business day to verify the claimant and switch
        the listing's verification status to 'claimed'. Full self-service
        OAuth-2.1 claim flow lands in a follow-up plan.
        
- `find_compliance_firm`: Search the Compliance Registry for vetted compliance and regulatory firms.

        sub_vertical: 'environmental_compliance' | 'accessibility' (or free-text keyword)
        region:       city or state name (case-insensitive contains)
        capability:   keyword to match against firm descriptions and service names
                      (e.g., 'phase i esa', 'wcag', 'permits', 'inspections')
        limit:        max results
        
- `get_firm_profile`: Full dossier for a single firm in the Compliance Registry:
        description, headquarters, founded year, employee band, services,
        locations, sub-vertical, taxonomy, and directory meta (publisher,
        claim URL, takedown URL).
        
- `get_wcag_audit`: Structured offering for TESSA's WCAG 2.2 AA Accessibility Audit:
        scope, deliverables, timeline, pricing bands (hourly + engagement
        range), paired service-type slugs, and TESSA's profile URL in the
        Compliance Registry. Use when a buyer agent wants accessibility audit
        details in structured form.
        
- `request_introduction`: Request a warm introduction to a Compliance Registry firm.
        target_firm_slug is required (this tool routes leads to listed firms,
        not to TESSA directly). TESSA logs the lead and forwards a warm intro
        email to the firm with TESSA Cc'd. No calendar booking.
        
- `request_quote`: Request a quote from a Compliance Registry firm.

        firm_slug:       directory slug for the target firm
        prospect_email:  caller's email for the firm's reply
        scope_summary:   one-paragraph description of the work
        budget_band:     'under_5k' | '5k_25k' | '25k_100k' | '100k_plus' |
                         'open' — or any free-text dollar figure