{
  "markdown": "# EU Regulations MCP Server\n\n> ## ⚰️ RETIRED — folded into `ansvar-mcp-fleet` (2026-07-07)\n>\n> This standalone repo is **archived**. The eu-regulations corpus now lives at\n> [`Ansvar-Systems/ansvar-mcp-fleet`](https://github.com/Ansvar-Systems/ansvar-mcp-fleet)\n> under `mcps/eu-regulations/` (fold: fleet PR #594; cutover: deploy PR #653, live 2026-07-07).\n> Production serves the fleet-built image `ghcr.io/ansvar-systems/eu-regulations` with the\n> CI-published `eu-regulations-data-v2` data image — including the 7 MDR/IVDR delegated +\n> implementing acts and the 14 robotics instruments (#109).\n>\n> **All new content and fixes go to the fleet monorepo** (seeds in `mcps/eu-regulations/seed/`,\n> build via `scripts/build-chassis-db.ts`). Open PRs at archive time, for the record:\n> #110 (rail EU-law spine — port its instruments to fleet seeds), #113 (README banner,\n> superseded by this notice), #111 (dependabot), #57 / #4 (stale). The gateway endpoint\n> below still works — it now serves from the fleet deployment.\n\n<!-- ANSVAR-CTA-BEGIN -->\n> **The EU regulations corpus is now served through the Ansvar Gateway.** Connect your AI assistant (Claude, Copilot, Cursor, custom MCP client) to `https://gateway.ansvar.eu/mcp` — one OAuth connection, free tier available, covering this corpus plus EU regulations, national law across dozens of audited jurisdictions (Europe + the US), and CVE/security intelligence, every result with a verbatim source citation. Start at https://ansvar.eu/docs/quickstart\n\n### Connect\n\n**Claude Code** (one line):\n\n```bash\nclaude mcp add ansvar --transport http https://gateway.ansvar.eu/mcp\n```\n\n**Claude Desktop / Cursor** — add to `claude_desktop_config.json` (or `mcp.json`):\n\n```json\n{\n  \"mcpServers\": {\n    \"ansvar\": {\n      \"type\": \"url\",\n      \"url\": \"https://gateway.ansvar.eu/mcp\"\n    }\n  }\n}\n```\n\n**Claude.ai** — Settings → Connectors → Add custom connector → paste `https://gateway.ansvar.eu/mcp`\n\nFirst request opens an OAuth signup flow (setup details: [ansvar.eu/docs/quickstart](https://ansvar.eu/docs/quickstart)). After signup, your client is bound to your account; tier (free / premium / team / company) determines fan-out, quota, and which downstream MCPs are reachable.\n\n---\n\n## Self-host this MCP\n\nYou can also clone this repo and build the corpus yourself. The schema,\nfetcher, and tool implementations all live here. What is not in the repo is\nthe pre-built database — TDM and standards-licensing constraints on the\nupstream sources mean we host the corpus on Ansvar infrastructure rather\nthan redistribute it as a public artifact.\n\nBuild your own: run this repo's ingestion script (entry-point varies per\nrepo — typically `scripts/ingest.sh`, `npm run ingest`, or `make ingest`;\ncheck the repo root).\n<!-- ANSVAR-CTA-END -->\n\n\nMCP server providing structured access to full-text EU regulations via Claude, Cursor, and other MCP-compatible clients.\n\n[![MCP Registry](https://img.shields.io/badge/MCP-Registry-blue)](https://registry.modelcontextprotocol.io/eu.ansvar/eu-regulations-mcp)\n[![License](https://img.shields.io/badge/License-Apache_2.0-blue.svg)](https://opensource.org/licenses/Apache-2.0)\n[![GitHub stars](https://img.shields.io/github/stars/Ansvar-Systems/EU_compliance_MCP?style=social)](https://github.com/Ansvar-Systems/EU_compliance_MCP)\n[![Daily EUR-Lex Check](https://github.com/Ansvar-Systems/EU_compliance_MCP/actions/workflows/check-updates.yml/badge.svg)](https://github.com/Ansvar-Systems/EU_compliance_MCP/actions/workflows/check-updates.yml)\n[![Database](https://img.shields.io/badge/database-pre--built-green)](docs/COVERAGE_GAPS.md)\n\nQuery **EU regulations** — from GDPR and AI Act to DORA, Chips Act, MiFID II, eIDAS, Medical Device Regulation, MDCG cybersecurity guidance, and more — directly from Claude, Cursor, or any MCP-compatible client.\n\nIf you're building digital products, financial services, healthcare tech, or connected devices for the European market, this is your compliance reference.\n\nBuilt by [Ansvar Systems](https://ansvar.eu) — Stockholm, Sweden\n\n---\n\n## Why This Exists\n\nEU compliance is scattered across EUR-Lex PDFs, official journals, and regulatory sites. Whether you're:\n- A **developer** implementing GDPR data rights or NIS2 incident reporting\n- A **product team** navigating AI Act risk assessments or Medical Device conformity\n- A **compliance officer** mapping ISO 27001 to DORA requirements\n- A **legal researcher** comparing PSD2 authentication vs. eIDAS trust services\n\n...you shouldn't need a law degree and 47 browser tabs. Ask Claude. Get the exact article. With context.\n\nThis MCP server makes EU regulations **searchable, cross-referenceable, and AI-readable**.\n\n---\n\n## Example Queries\n\nOnce connected, just ask naturally:\n\n- *\"What are the risk management requirements under NIS2 Article 21?\"*\n- *\"How long do I have to report a security incident under DORA?\"*\n- *\"Compare GDPR breach notification with NIS2 incident reporting\"*\n- *\"Does the EU AI Act apply to my recruitment screening tool?\"*\n- *\"What are the essential cybersecurity requirements under the Cyber Resilience Act?\"*\n- *\"Which regulations apply to a healthcare organization in Germany?\"*\n- *\"Map DORA ICT risk management to ISO 27001 controls\"*\n- *\"What is an EU Digital Identity Wallet under eIDAS 2.0?\"*\n- *\"What are my data access rights under the Data Act?\"*\n\n**More examples:** [TEST_QUERIES.md](./TEST_QUERIES.md) — 60+ example queries organized by category\n\n---\n\n## What's Included\n\n- **Regulations** — GDPR, DORA, NIS2, AI Act, CRA, Chips Act, MiCA, eIDAS 2.0, Medical Device Regulation, and more\n- **Articles, Recitals & Official Definitions** — full text, with individually addressable annexes\n- **Regulation Guides** — Pitfalls, proportionality tiers, cross-regulation analysis, key article structures for DORA, CRA, AI Act, GDPR, NIS2, MDR, MiCA, DSA, Data Act, PLD, and more\n- **Full-Text Search** — Find relevant articles and annexes across all regulations instantly\n- **Control Mappings** — to ISO 27001:2022 & NIST CSF 2.0\n- **Evidence Requirements** — audit artifacts across all regulations\n- **Sector Rules** — applicability rules across all sectors and industries\n- **Daily Updates** — Automatic freshness checks against EUR-Lex\n\n**Detailed coverage:** [docs/coverage.md](docs/coverage.md)\n**Use cases by industry:** [docs/use-cases.md](docs/use-cases.md)\n**Available tools:** [docs/tools.md](docs/tools.md)\n\n---\n\n## 🎬 See It In Action\n\n### Why This Works\n\n**Verbatim Source Text (No LLM Processing):**\n- All article text is ingested from EUR-Lex/UNECE official sources\n- Snippets are returned **unchanged** from SQLite FTS5 database rows\n- Zero LLM summarization or paraphrasing — the database contains regulation text, not AI interpretations\n- **Note:** HTML-to-text conversion normalizes whitespace/formatting, but preserves content\n\n**Smart Context Management:**\n- Search returns **64-token snippets** with highlighted matches (safe for context)\n- Article retrieval warns about token usage (some articles = 70k tokens)\n- Cross-references help navigate without loading everything at once\n\n**Technical Architecture:**\n```\nEUR-Lex HTML → Parse → SQLite → FTS5 snippet() → MCP response\n                  ↑                    ↑\n           Formatting only      Verbatim database query\n```\n\n### Example: EUR-Lex vs. This MCP\n\n| EUR-Lex | This MCP Server |\n|---------|-----------------|\n| Search by CELEX number | Search by plain English: *\"incident reporting timeline\"* |\n| Navigate 100+ page PDFs | Get the exact article with context |\n| Manual cross-referencing | `compare_requirements` tool does it instantly |\n| \"Which regulations apply to me?\" → research for days | `check_applicability` tool → answer in seconds |\n| Copy-paste article text | Article + definitions + related requirements |\n| Check 47 sites for updates | Daily automated freshness checks |\n| No API, no integration | MCP protocol → AI-native |\n\n**EUR-Lex example:** Download DORA PDF → Ctrl+F \"incident\" → Read Article 17 → Google \"What's a major incident?\" → Cross-reference NIS2 → Repeat for 5 regulations\n\n**This MCP:** *\"Compare incident reporting requirements across DORA, NIS2, and CRA\"* → Done.\n\n---\n\n## 📚 Documentation\n\n- **[Database SSL/TLS Configuration](docs/DATABASE_SSL.md)** - Secure PostgreSQL connections for Cloudflare Workers deployments\n- **[Security Policy](SECURITY.md)** - Vulnerability reporting and security best practices\n- **[Coverage Gaps](docs/COVERAGE_GAPS.md)** - Known missing content from EUR-Lex\n- **[GitHub Actions Setup](docs/GITHUB_ACTIONS_SETUP.md)** - CI/CD workflow configuration\n- **[Privacy Policy](PRIVACY.md)** - Data handling and retention notes\n\n---\n\n## Directory Review Notes\n\n### Testing Account and Sample Data\n\nThis server is read-only and does not require a login account for functional review.\nFor directory review, use the bundled dataset and these sample prompts:\n- *\"What does NIS2 Article 21 require?\"*\n- *\"Compare DORA and NIS2 incident reporting obligations.\"*\n- *\"Map ISO 27001 controls to DORA requirements.\"*\n\n### Remote Authentication (OAuth 2.0)\n\nThe default server runtime is read-only and can be deployed without authentication.\nIf you deploy a remote authenticated endpoint, use OAuth 2.0 over TLS with certificates from recognized authorities.\n\n## ⚠️ Important Disclaimers\n\n### Legal Advice\n\n> **🚨 THIS TOOL IS NOT LEGAL ADVICE 🚨**\n>\n> Regulation text is sourced verbatim from EUR-Lex and UNECE (official public sources). However:\n> - **Control mappings** (ISO 27001, NIST CSF) are interpretive aids, not official guidance\n> - **Applicability rules** are generalizations, not legal determinations\n> - **Cross-references** are research helpers, not compliance mandates\n>\n> **Always verify against official sources and consult qualified legal counsel for compliance decisions.**\n\n### Token Usage\n\n> **⚠️ Context Window Warning**\n>\n> Some articles are very large (e.g., MDR Article 123 = ~70,000 tokens). The MCP server:\n> - **Search tool**: Returns smart snippets (safe for context)\n> - **Get article tool**: Returns full text (may consume significant tokens)\n> - **Recommendation**: Use search first, then fetch specific articles as needed\n>\n> Claude Desktop has a 200k token context window. Monitor your usage when retrieving multiple large articles.\n\n### ISO Standards Copyright\n\n**No copyrighted ISO standards are included.** Control mappings reference ISO 27001:2022 control IDs only (e.g., \"A.5.1\", \"A.8.2\"). The actual text of ISO standards requires a paid license from ISO. This tool helps map regulations to controls but doesn't replace the standard itself.\n\n---\n\n## More Ansvar MCPs\n\nFull fleet coverage at [ansvar.eu/coverage](https://ansvar.eu/coverage).\n## About Ansvar Systems\n\nWe build AI-accelerated threat modeling and compliance tools for automotive, financial services, and healthcare. This MCP server started as our internal reference tool — turns out everyone building for EU markets has the same EUR-Lex frustrations.\n\nSo we're open-sourcing it. Navigating EU regulations shouldn't require a legal team.\n\n**[ansvar.eu](https://ansvar.eu)** — Stockholm, Sweden\n\n---\n\n## Documentation\n\n- **[Coverage Details](docs/coverage.md)** — full regulation list with article counts\n- **[Use Cases](docs/use-cases.md)** — Industry-specific guidance (fintech, healthcare, IoT, etc.)\n- **[Available Tools](docs/tools.md)** — Detailed tool descriptions\n- **[Development Guide](docs/development.md)** — Adding regulations, webhooks, CI/CD\n- **[Troubleshooting](docs/troubleshooting.md)** — Common issues and fixes\n- **[Roadmap](ROADMAP.md)** — Upcoming features (delegated acts, national transpositions)\n- **[Coverage Gaps](docs/COVERAGE_GAPS.md)** — Known limitations\n- **[Test Queries](TEST_QUERIES.md)** — 60+ example queries\n\n---\n\n## Branching Strategy\n\nThis repository uses a `dev` integration branch. **Do not push directly to `main`.**\n\n```\nfeature-branch → PR to dev → verify on dev → PR to main → deploy\n```\n\n- `main` is production-ready. Only receives merges from `dev` via PR.\n- `dev` is the integration branch. All changes land here first.\n- Feature branches are created from `dev`.\n\n## License\n\nApache License 2.0. See [LICENSE](./LICENSE) for details.\n\n---\n\n<p align=\"center\">\n  <sub>Built with care in Stockholm, Sweden</sub>\n</p>\n",
  "bytes": 12301,
  "sha": "1be3b40eb91f7fe05e23725e1edf9ad89570ba78b8d834fa9e1d86e7d01bd6de",
  "repo_slug": "ansvar-systems/eu_compliance_mcp",
  "fonte": "repo",
  "truncated": false,
  "api": "https://agentalog.com/api/listings/mcp_io_github_ansvar_systems_eu_regulations__8054cf9a/readme"
}