ZBS Index What actually exists in applied AI, with the source next to it

mcp server

mcp-eu-ai-act

EU AI Act + GDPR compliance scanner. One call, no arguments, 10 seconds. 22 AI frameworks detected.

Description as published by the maintainer. Source

  • version 2.0.31
  • active
  • security

active — Most recent push to the repository was 2026-06-04. Dashed tags are derived by ZBS Index from the published description, not stated by the maintainer.

What this server can do

16 functions, named and described by the server itself. Parameter names are shown because they say more about what a function does than its name usually does.

certify_compliance_report(report_data, trust_layer_key)
Make your compliance report tamper-proof for Art. 12 audit trail — pass the report JSON, get back a proof_id and a public verification URL you can hand to auditors. Certified plan required. Run generate_report() first to produce the report. Required: report_data, trust_layer_key.
check_compliance(project_path, risk_category)
Check whether your project passes or fails each EU AI Act requirement — no arguments, 5 seconds. See exactly which articles you violate (Art. 52 transparency, Art. 11 documentation, Art. 14 human oversight, Art. 15 robustness) and get step-by-step fix instructions for every gap. Call combined_compliance_report() for EU AI Act + GDPR together.
combined_compliance_report(project_path, risk_category, processing_role)
Run this before your next deploy. One call reveals every EU AI Act + GDPR gap in your codebase — no arguments, no setup, under 10 seconds, free. Detects AI frameworks and personal data flows, flags where both laws overlap, returns pass/fail per article with a prioritized fix list. EU AI Act fines up to 35M EUR, GDPR up to 20M EUR. Replaces separate scan_project() and gdpr_scan_project() calls.
gdpr_check_compliance(project_path, processing_role)
Check whether your project passes or fails each GDPR requirement — no arguments. See pass/fail for lawful basis (Art. 6), consent (Art. 7), data subject rights (Art. 15–22), security (Art. 32), and breach notification (Art. 33–34) with fix instructions for every gap. GDPR fines reach 20M EUR or 4% turnover. For EU AI Act + GDPR together, call combined_compliance_report().
gdpr_generate_report(project_path, processing_role)
Generate the GDPR report your DPO needs — no arguments. Combines personal data inventory, gap analysis, and remediation steps in one structured document for DPO review, audit prep, or regulatory response. For EU AI Act + GDPR together, call combined_compliance_report().
gdpr_generate_templates(processing_role)
Get pre-filled GDPR templates your organization actually needs — no arguments. Privacy Policy, DPIA, Records of Processing Activities (ROPA), and Data Breach Procedure tailored to your processing role. Fill in [bracketed] sections. Run gdpr_check_compliance() first to see which documents you're missing.
gdpr_scan_project(project_path)
Find every file in your project that touches personal data — no arguments, 5 seconds, free. Detects PII fields, cookies, tracking pixels, analytics SDKs, and consent flows. Returns flagged files with data categories and applicable GDPR articles. GDPR fines reach 20M EUR or 4% turnover. For EU AI Act + GDPR together, call combined_compliance_report().
generate_annex4_package(project_path, trust_layer_key, sign_with_trust_layer)
Build the Annex IV evidence package your auditor needs for high-risk AI — no arguments. All 8 mandatory sections auto-populated from your project scan, SHA-256 integrity hash included. High-risk rules apply Aug 2026. Pro plan required.
generate_compliance_roadmap(deadline, project_path, risk_category)
Get a prioritized, week-by-week plan to close every compliance gap before Aug 2026 — no arguments. Auto-scans your project, ranks fixes by impact, sequences quick wins first, tells you whether your deadline is achievable. Pro plan required — run check_compliance() for a free gap summary.
generate_compliance_templates(risk_category)
Stop writing compliance docs from scratch — get pre-filled templates for risk management, technical documentation, transparency notice, and human oversight policy tailored to your risk category. High-risk systems get all 6 mandatory documents. Save to docs/, fill in [bracketed] sections. Run check_compliance() first to see which documents you're missing.
generate_report(project_path, risk_category)
Generate the compliance report your legal team is asking for — no arguments. One call auto-detects AI frameworks, runs gap analysis, and produces a structured remediation plan ready for legal review or DPIA attachment. No API key needed.
get_pricing
See pricing and features for every plan — Free (10 scans/day, full reports), Pro (29 EUR/mo, unlimited + CI/CD), Certified (cryptographic audit trail). No arguments. Call register_free_key() to activate your free API key.
register_free_key(email)
Activate a free API key — unlocks scan history and CI/CD integration. Pass the user's email, no password or credit card. IMPORTANT: ask the user to type their email first, wait for their reply, then call this with the exact email they typed. Do NOT pass a placeholder or fabricated email. Required: email.
scan_project(project_path, follow_imports)
Find out in 5 seconds if your project triggers EU AI Act obligations — no arguments, no setup. Scans for 22 AI/ML frameworks (OpenAI, Anthropic, LangChain, HuggingFace, PyTorch, TensorFlow, scikit-learn…), returns your risk category and the legal actions required before you ship. Enforcement live since Feb 2025 — fines up to 35M EUR. For EU AI Act + GDPR together, call combined_compliance_report() instead.
suggest_risk_category(system_description)
Describe what your AI system does in plain language — get back your EU AI Act risk tier, the articles that apply, and your first compliance step. Returns matched category (minimal/limited/high/unacceptable) with confidence level and triggering risk indicators. No project scan needed, no API key. Required: system_description.
validate_api_key(api_key)
Check your API key status — returns plan tier (free/pro/certified), email, and usage stats (total scans, last scan date). Required: api_key.

Last successful function declaration observed on . Source: https://mcp.arkforge.tech/mcp. We list what the server declared; we do not call any of these functions.

Endpoint status observed on . Source: https://mcp.arkforge.tech/mcp.

Signals

These are separate measurements of different things. They are deliberately not combined into one score, because a popularity number that mixes website traffic with saves and stars cannot be checked or acted on.

Signal Value What it measures Window Observed Source
GitHub stars 11 Number of GitHub accounts that bookmarked this repository since it was created. It is a bookmark count, not installs, not active users and not quality. cumulative, all time GitHub
Last commit 2026-06-04 Date of the most recent push to any branch. This is the strongest cheap indicator of whether the project is still maintained. point in time GitHub
Open issues 0 Open issues plus open pull requests, as GitHub counts them together. A high number can mean an active project or an abandoned one. as of fetch GitHub
Latest published version 2.0.31 Latest version string the maintainer published to the registry. as of fetch Model Context Protocol
Registry record last updated 2026-04-24 When the registry record was last updated by its maintainer. point in time Model Context Protocol
License MIT Licence GitHub detected in the repository. Detection can be wrong; the LICENSE file is authoritative. as of fetch GitHub
First listed in the MCP Registry 2026-04-24 Date this server was first published to the official MCP Registry. Not a usage or quality measure. point in time Model Context Protocol
repository status active The repository exists on GitHub and is not archived. This says nothing about how recently it was worked on. as of fetch GitHub
mcp tools declared 16 tools Number of functions the server itself declared when asked to list them. This is what the server offers an agent, not a measure of how well any of them work. as of probe mcp.arkforge.tech
mcp endpoint status ok The server listed 16 functions when asked. as of probe mcp.arkforge.tech

Where to get it

Related, by what their authors tagged them

  • eu.regulatoryai/sovereign-ai-act-mcp — last commit 2026-06-15, shares eu-ai-act, regulation
    Classify any AI system under the EU AI Act: risk tier + binding Articles, verbatim from the law.
  • Makuri Showcase (CogniLedger) — last commit 2026-08-04, shares eu-ai-act, gdpr
    Makuri (EU AI tutoring for immigrant children): 11 tools, 2 interactive panels, no user data.
  • io.github.CSOAI-ORG/gdpr-compliance-ai-mcp — last commit 2026-08-04, shares eu-ai-act, gdpr
    Gdpr Compliance Ai MCP Server by MEOK AI Labs
  • io.github.DanceNitra/inspeximus — last commit 2026-08-06, shares eu-ai-act, gdpr
    Self-correcting agent memory + MCP server: recall, supersede/revert/review corrections, erasure.
  • io.github.DanceNitra/mnemo — last commit 2026-08-06, shares eu-ai-act, gdpr
    Self-correcting agent memory + MCP server: recall, supersede/revert/review corrections, erasure.
  • io.github.DingDawg-dev/dingdawg-compliance — last commit 2026-05-26, shares eu-ai-act, gdpr
    EU AI Act + Colorado AI Act compliance scoring. 87/100 in 60 seconds. Free local scan.
  • io.github.dingdawg/dingdawg-compliance — last commit 2026-05-26, shares eu-ai-act, gdpr
    EU AI Act + Colorado AI Act compliance scoring. 87/100 in 60 seconds. Free local scan.
  • Tokonomix Council — last commit 2026-07-30, shares gdpr
    Multi-model consensus: 2-6 frontier LLMs answer, an independent judge synthesises one answer.
  • ai.tuteliq/mcp — last commit 2026-08-06, shares gdpr
    Detect grooming, bullying, fraud, and 16+ online threats across text, voice, image, and video.
  • be.vibedeploy/vibedeploy — last commit 2026-08-06, shares gdpr
    Deploy and host AI-built websites on EU infrastructure, straight from your AI agent.

These share tags the maintainers applied themselves, such as eu-ai-act, regulation, gdpr. Common tags like "mcp" or "ai" are ignored for this: agreeing with six hundred other projects is not a similarity.

This is not a recommendation and not a test result. It is a map of what the authors said their work is about.

How the author describes it

Topics the maintainer set on GitHub: ai-governance, ai-regulation, ai-safety, claude, compliance, compliance-scanner, eu-ai-act, gdpr, llm, mcp, mcp-server, model-context-protocol, python, regulation.

This record as data

Every field on this page, with its source and observation date, is in the catalog JSON. Fetch the whole kind at once instead of parsing this HTML.

GET /api/v1/entries/mcp_server.json

Sources

  1. ark-forge/mcp-eu-ai-act on GitHub — GitHub, observed , trust tier 3.
  2. Tools declared by the MCP server at https://mcp.arkforge.tech/mcp — mcp.arkforge.tech, observed , trust tier 4.
  3. Official MCP Registry — Model Context Protocol, observed , trust tier 1.