trailofbits/spec-to-code-compliance

Specification-to-code compliance checker for blockchain audits

WCAG-Compliance/wcagc-mcp

Deterministic axe-core accessibility scanning (WCAG 2.1 AA, EN 301 549, PDF/UA) through a [wcagc](https://wcagc.com) account: scan any public URL or PDF, crawl a whole registered site, replay saved multi-step journeys, and read violation trends. Returns structured findings — rule, severity counts and the success criteria involved — so the assistant reasons over real results rather than guessing fr

uchit/mcp-regulated-ai-compliance

Regulated-industry AI compliance knowledge as MCP. 6 tools (lookup_control · classify_use_case · crosswalk · walk_playbook · get_anti_pattern · list_regulations), 53 resources, 5 prompts. Covers EU AI Act, APRA CPS 230/234, NIST AI RMF, ISO 42001, AU AI Safety Standard (DISR Aug 2024), OWASP LLM Top 10, SLSA, SSDF, OAIC APPs, GDPR, DORA + 17 more frameworks. 56 controls × 28 regulations × 261 tool

phuryn/privacy-policy

Draft privacy policies with GDPR compliance considerations

mnemox-ai/tradememory-protocol

Structured 3-layer memory system (trades → patterns → strategy) for AI trading agents. Supports MT5, Binance, and Alpaca.

openaccountants/openaccountants

Open-source AI accounting skills, checked by licensed accountants jurisdiction by jurisdiction. 3 tools: list skills by country/category, get full skill content, and get individual sections. Skills teach AI agents tax computations (income tax, VAT, payroll) across 134 countries plus US states and Canadian provinces. Hosted at `https://www.openaccountants.com/api/mcp`.

openaccountants/openaccountants

371 tax classification skills across 134 countries

arthurpanhku/Arthor-Agent

arthurpanhku/DocSentinel

MCP server for AI agent for cybersecurity: automate assessment of documents, questionnaires & reports. Multi-format parsing, RAG knowledge base,Risks, compliance gaps, remediations.

MiniMax-AI/ios-application-dev

iOS development with UIKit, SnapKit, and SwiftUI covering navigation, Dark Mode, and HIG compliance

gebalamariusz/cloud-audit

Open-source AWS security scanner with attack chain detection, breach cost estimation, and copy-paste remediation (CLI + Terraform). 47 checks, 16 attack chain rules. First free standalone AWS security MCP server.

PSPDFKit/nutrient-document-engine-mcp-server

Self-hosted MCP server for Nutrient Document Engine. On-premises document processing with natural language control — designed for HIPAA, SOC 2, and GDPR compliance.

kastelldev/kastell

Server security auditing and hardening toolkit. 413 security checks across 29 categories (SSH, Firewall, Docker, TLS, HTTP Headers), CIS/PCI-DSS/HIPAA compliance mapping, 19-step production hardening, fleet management, and forensic evidence collection. Supports Hetzner, DigitalOcean, Vultr, and Linode. 13 MCP tools.

arian-gogani/nobulex

Proof-of-behavior enforcement for AI agents. Define behavioral covenant rules (permit/forbid/require), enforce at runtime before execution, get SHA-256 hash-chained tamper-evident audit logs, and verify compliance independently. Cross-agent verification handshake — no proof, no transaction. MIT licensed, 4,244 tests.

cammac-creator/ibanforge-mcp

Pre-payout counterparty screening for AI agents: IBAN validation + OFAC/EU/UN sanctions screening + Swiss BC-Nummer clearing + SEPA/VoP reachability + risk score. MCP-native (stdio via `npx -y ibanforge-mcp` or Streamable HTTP at `api.ibanforge.com/mcp`). Free tier 200 req/month, pay-per-call USDC (x402) beyond.

xmpuspus/cloudwright

Natural-language cloud architecture intelligence for AWS, GCP, Azure, and Databricks. 19 tools for architecture design, cost estimation, compliance validation (HIPAA, SOC 2, FedRAMP, GDPR, PCI-DSS, Well-Architected), security scanning, Terraform/CloudFormation export, and blast-radius analysis.

msaad00/agent-bom

AI supply chain security scanner with 18 MCP tools. Auto-discovers 20 MCP clients, scans dependencies for CVEs (OSV/NVD/EPSS/CISA KEV), maps blast radius from vulnerabilities to exposed credentials and tools, runs CIS benchmarks, generates CycloneDX/SPDX SBOMs, and enforces compliance across OWASP LLM Top 10, MITRE ATLAS, NIST AI RMF, and EU AI Act.

ENTIA-IA/entia-mcp-server

Verified business-identity intelligence for AI agents & MCP clients — company verification, VAT, BORME, GLEIF, ownership and risk signals across 34 countries. Remote MCP server, free tier. `npx mcp-remote https://mcp.entia.systems/mcp`

kakunin-ai/kakunin-mcp

Compliance and identity for AI agents — verify an agent's certificate scope, read its behavioral risk score, and append to an immutable audit trail. X.509 identity issued via AWS KMS; MiCA / EU AI Act aligned. `npx -y @kakunin/mcp`

Pantheon-Security/notebooklm-mcp-secure

Security-hardened NotebookLM MCP with post-quantum encryption (ML-KEM-768), GDPR/SOC2/CSSF compliance, and 14 security layers. Query Google's Gemini-grounded research from Claude and AI agents.

atomno-labs/mcp-fns-check

Russian counterparty due diligence — INN/OGRN lookup against EGRUL/EGRIP, bankruptcy registry (EFRSB), tax debts (Transparent Business), FSSP enforcement proceedings, and arbitration courts (KAD). Aggregated verdict with risk flags and recommendations. No API key required (public Federal Tax Service data).

Brand-System/brandsystem-mcp

Make your brand machine-readable. Extract brand identity (colors, fonts, logo, voice, visual rules) from any website via static CSS + rendered-page extraction, compile into DTCG tokens, brand runtime contracts, and interaction policies. 34 tools across 4 progressive sessions. Subscribable `brand://runtime` and `brand://policy` MCP resources. Content compliance scoring (0-100), pass/fail gate, and

agentward-ai/agentward

Permission control plane for AI agents. MCP proxy that enforces least-privilege YAML policies on every tool call, classifies sensitive data (PII/PHI), detects dangerous skill chains, and generates compliance audit trails. Supports stdio and HTTP proxy modes.

everstake/mcp

An MCP server for Everstake's non-custodial staking data across 130+ networks: live APY, uptime metrics, rewards calculator, integrations, security and compliance. Built for asset managers, custodians, and exchanges evaluating institutional staking.

telleroutlook/agentkit-js/mcp-server

Code-mode MCP server: collapses N user-defined tools into a two-tool surface (`execute_code` + `docs_search`). Backed by a unified capability manifest (`allowedHosts` / `cpuMs` / `memoryLimitBytes`) honoured across three sandbox kernels — in-process node:vm, WASM (QuickJS / Pyodide / Wasmtime), and remote microVM (E2B / Cloudflare Sandbox). Token-saving benchmark in repo CI.

OrbiAds/Orbiads-GAM-MCP

Hosted Google Ad Manager MCP server for Claude, ChatGPT, Gemini, and Codex. 200+ tools across campaign management, line items, creatives (image/video/HTML5/native), interactive reporting, inventory exploration, and ad-ops compliance audits. OAuth on-behalf-of-user, GAM API v202602. Free trial at [orbiads.com](https://orbiads.com) — 5 credits, no credit card.

knowledgepa3/gia-mcp-server

Enterprise AI governance layer with 29 tools: MAI decision classification (Mandatory/Advisory/Informational), hash-chained forensic audit trails, human-in-the-loop gates, compliance mapping (NIST AI RMF, EU AI Act, ISO 42001), governed memory packs, and site reliability tools.

Acacian/aegis

Policy-based governance for AI agent tool calls. YAML policies, approval gates, risk assessment, and audit logging. Cross-platform: LangChain, OpenAI, Anthropic, MCP.

airblackbox/air-blackbox-mcp

EU AI Act compliance scanner for Python AI agents. Scans, analyzes, and remediates LangChain/CrewAI/AutoGen/OpenAI code across 6 articles with 10 tools including prompt injection detection, risk classification, and trust layer integration. The only MCP compliance server that generates fix code, not just findings.

zw008/VMware-Harden

VMware vSphere compliance and hardening — read-only baseline scanning plus drift detection across CIS, vSphere SCG, China DJCP 2.0, and PCI-DSS frameworks. 6 read-only tools with LLM-powered remediation suggestions (apply-side gated through vmware-pilot approval workflow).

tempguru-co/tempguru-mcp

W-2 event staffing for AI agents across 300+ US and Canadian markets. Brand ambassadors, registration, hospitality, setup/breakdown, ushers. Read-only data lookups for coverage, rates, lead-time guidance, and state compliance, plus an opt-in request_quote submission. No auth required. MCP server at `https://mcp.tempguru.co/mcp` and skills at [`tempguru-co/tempguru-agent-skills`](https://github.com

ark-forge/mcp-eu-ai-act

EU AI Act compliance scanner that detects regulatory violations in AI codebases with risk classification and remediation guidance.

ronantakizawa/a11ymcp

Web accessibility testing MCP server that analyzes URLs and HTML for WCAG 2.0/2.1/2.2 compliance using axe-core. Tools for color contrast, ARIA validation, and orientation lock detection.

signal8ai/signal8-mcp

SEC filing intelligence for AI agents: insider (Form 4) & institutional (13F) ownership, dilution-risk scoring, congressional & executive (STOCK Act) trades, FEC campaign finance, SEC filing search, compliance monitoring, and a dilution-aware stock screener. 86 tools over live Signal8 data.

chaoz23/loudcheck

Loudness compliance verdicts for media files against formal broadcast standards (EBU R128, ATSC A/85): pass/fail with per-metric deltas, spec citations, and the exact ffmpeg remediation command. CLI and MCP over one engine; zero-install via `uvx --from 'loudcheck[mcp]' loudcheck --mcp`. Requires ffmpeg.

hanoak/unsplash-mcp-server

Unsplash API server exposing 21 tools across photos, search, users, collections, topics, and stats. Ships Unsplash-guideline compliance built in — ready-to-use attribution with UTM parameters, a download-tracking tool, rate-limit surfacing, and `content_filter=high` by default. Install via `npx -y @hanoak/unsplash-mcp-server`.

datanexusmcp/mcp-server

55 tools for verified public data lookups — CVE/SBOM security audits, licence compliance, patents, federal contracts, NPI provider lookups, nonprofit 990 filings, and domain intelligence. No API key required.

MyMedi-AI/mymedi-ai-mcp-server

Healthcare billing AI for agents: ICD-10/CPT/HCPCS code lookup (81,769 codes with RVU + OPPS pricing), prior auth prediction, medical NER, claims validation, denial-risk scoring, HIPAA compliance auditing, and NPI/drug enrichment. 20 tools, 10 free credits then pay-per-call via credits or anonymous USDC (x402). `npx @mymedi-ai/mcp-server`

thehealthai/fda-risk-radar-mcp

The MCP server behind [Constat](https://constat.dev): FDA & NHTSA regulatory-risk intelligence for agents — device compliance risk by 3-letter product code, parsed 510(k) premarket evidence with verbatim source quotes, predicate chains, postmarket drift signals, clearance-to-payment reimbursement pathways (NTAP/CPT/CMS), and NHTSA vehicle safety. 14 tools. Decision support, not regulatory advice.

atomno-mcp/mcp-fssp

FSSP enforcement proceedings lookup for Russian debtors and compliance checks.

atomno-mcp/mcp-erid

MCP-проверка маркировки интернет-рекламы (erid/ЕРИР): валидация токена, аудит страницы на соответствие 38-ФЗ. Волна 1, роль «читалки», ответственность не на нас

Departi/mcp-server

Travel compliance and curated booking for digital nomads — visa requirements, tax residency analysis, Schengen 90/180-day tracking, accommodation, transport, and experiences across 189 European destinations. Hosted at https://mcp.departi.eu/v3 (Streamable HTTP, OAuth 2.1).

douglasborthwick-crypto/mcp-server-insumer

On-chain attestation across 31 blockchains. 25 tools: ECDSA-signed verification, wallet trust profiles, compliance templates, merchant onboarding, ACP/UCP commerce protocols.

ad0750/regintel-mcp

MCP server for the RegIntel API: structured regulatory data across 41 jurisdictions and 212 regulations (GDPR, MiCA, DORA, SEC, FINRA, FCA, APRA, ASIC, MAS). Tools for search, lookup, recent updates, and compliance checks.

teodorofodocrispin-cmyk/intelica-mcp

Competitive intelligence API for autonomous AI agents. Analyzes any URL or company description and returns structured JSON with market positioning, competitors, pain points, and executable Market Score (threat_level, moat_strength, agent_recommendation). 10 context modes including regulatory_compliance, venture_screening, crypto_protocol, and sales_enablement. Pay-per-call via x402 on Base and Sol

girste/mcp-cybersec-watchdog

Comprehensive Linux server security audit with 89 CIS Benchmark controls, NIST 800-53, and PCI-DSS compliance checks. Real-time monitoring with anomaly detection across 23 analyzers: firewall, SSH, fail2ban, Docker, CVE, rootkit, SSL/TLS, filesystem, network, and more.

Crindo2/gph-mcp-server

Healthcare service vendor matching for medical practices: 76,000+ curated vendors across 25 categories (billing, credentialing, EHR, compliance, legal) in all 50 US states.

sanyambassi/ciphertrust-manager-mcp-server

MCP server for Thales CipherTrust Manager integration, enabling secure key management, cryptographic operations, and compliance monitoring through AI assistants.