{
  "markdown": "# RuleMesh MCP\n\nEngineered Compliance Infrastructure for engineers and AI agents.\n\nRuleMesh delivers source-traced rules for GDPR and the EU AI Act: determine applicability, retrieve the requirements and implementation checklists that apply to a system, submit evidence signals, and track human verification. It runs as a hosted **remote MCP server** at `https://api.rulemesh.com/mcp` (Streamable HTTP, OAuth login), consumable from any MCP client.\n\nThis repo is the canonical home for the server's listing (`server.json`, published to the [MCP Registry](https://registry.modelcontextprotocol.io) as `com.rulemesh/compliance`) and client setup docs.\n\n## Connect\n\nYou authenticate once in the browser (email/password or Google); no API key to manage. A RuleMesh account is required. The FREE tier includes GDPR. EU AI Act access and control mappings are available with a paid subscription.\n\n### OpenAI Codex\n\nAdd to `~/.codex/config.toml`:\n\n```toml\n[features]\nrmcp_client = true            # enables the remote MCP client (use experimental_use_rmcp_client = true on older Codex)\n\n[mcp_servers.rulemesh]\nurl = \"https://api.rulemesh.com/mcp\"\nstartup_timeout_sec = 30\ntool_timeout_sec = 120\n```\n\nThen `codex mcp login rulemesh` (opens the browser for OAuth), and `/mcp` in the TUI to confirm the tools loaded.\n\n### Claude Code\n\n```bash\nclaude mcp add --transport http rulemesh https://api.rulemesh.com/mcp\n```\n\nRun `/mcp` and follow the browser login. A packaged plugin is also available at [RuleMesh/rulemesh-claude-plugin](https://github.com/RuleMesh/rulemesh-claude-plugin).\n\n### Claude Desktop / Cursor / VS Code / other clients\n\nAdd a remote (Streamable HTTP) MCP server pointing at `https://api.rulemesh.com/mcp`. For example, Claude Desktop (`claude_desktop_config.json`) or Cursor (`.cursor/mcp.json`):\n\n```json\n{\n  \"mcpServers\": {\n    \"rulemesh\": {\n      \"type\": \"streamable-http\",\n      \"url\": \"https://api.rulemesh.com/mcp\"\n    }\n  }\n}\n```\n\n## What you get\n\nThe server groups its 19 tools around one loop: plan, pull, implement, prove. GDPR and the EU AI Act are live today, with access depending on the account's plan.\n\n- **Discovery and scoping:** `list_regulations`, `list_frameworks`, `lookup_definition`, `get_compliance_plan`, `scope_next_question`, `scope_classify`, `scope_retrieve_source`, `scope_query_applicable`, `scope_update_profile`\n- **Implement:** `pull_rules`, `scan_compliance`\n- **Prove:** `submit_signals`, `submit_signals_batch`\n- **Track:** `get_progress`, `get_ticket_status`, `get_scan_sessions`, `start_scan`, `end_scan`, `resume_session`\n\nFour prompts package the common workflows: `implement_bundle`, `scan_and_report_bundle`, `review_bundle`, and `plan_compliance`. One resource, `regulation://{id}`, returns regulation metadata.\n\nYour coding agent reads your repository locally using RuleMesh requirements. RuleMesh does not read or receive source-code contents. Evidence submissions contain the evidence description and relevant filenames; they do not certify compliance or mark a requirement verified. Verification remains a human action.\n\n## Example prompts\n\n- \"Which regulations can I use on my current RuleMesh plan?\"\n- \"Does the EU AI Act apply to this system? Ask the necessary scoping questions and cite the source provisions behind the result.\"\n- \"Give me a prioritised GDPR implementation plan for this application.\"\n- \"Pull the GDPR rules for my data-export feature and give me an engineering checklist.\"\n- \"Review this repository against the pulled requirements. Submit only evidence signals and filenames; do not upload source code or mark anything verified.\"\n\n## Authentication\n\nOAuth 2.1 with PKCE and Dynamic Client Registration. Clients register themselves and open a browser login; tokens refresh automatically.\n\n## About RuleMesh\n\nRuleMesh is Engineered Compliance Infrastructure — the engineered rule graph that sits between regulation as written and software as built, consumable by engineers, AI agents, and auditors. It defines what each obligation requires, how to execute it with framework-specific controls, and what evidence proves it was done. GDPR and the EU AI Act are released today; more regulations are on the roadmap. → [rulemesh.com](https://rulemesh.com)\n\n## Links\n\n- Product: https://rulemesh.com\n- Docs: https://rulemesh.com/docs/mcp\n- Privacy: https://rulemesh.com/privacy · Terms: https://rulemesh.com/terms\n- Support: support@rulemesh.com\n",
  "bytes": 4417,
  "sha": "0500fcead7a800c89664c35d1adf3da58f96159f06ca5001eaf12a78486a38cb",
  "repo_slug": "rulemesh/rulemesh-mcp",
  "fonte": "repo",
  "truncated": false,
  "api": "https://agentalog.com/api/listings/mcp_com_rulemesh_compliance_f52cc4ad/readme"
}