EU Regulations MCP
About
Query 37 EU regulations (DORA, NIS2, GDPR, AI Act, CRA) with full-text search, cross-regulation comparison, and ISO 27001/NIST CSF control mappings. Auto-updates via EUR-Lex monitoring.
Details
- Author
- ansvar-systems
- Categories
- Search, Security, Knowledge Base, Other
Jump to
Setup
Install EU Regulations MCP in your MCP client (Claude Desktop, Cursor, Windsurf, and others).
Repository: https://github.com/ansvar-systems/EU_compliance_MCP
Follow the installation instructions in the repository README, then restart your MCP client.
⚰️ RETIRED — folded intoansvar-mcp-fleet(2026-07-07)
This standalone repo isarchived. The eu-regulations corpus now lives atAnsvar-Systems/ansvar-mcp-fleetundermcps/eu-regulations/(fold: fleet PR #594; cutover: deploy PR #653, live 2026-07-07). Production serves the fleet-built imageghcr.io/ansvar-systems/eu-regulationswith the CI-publishedeu-regulations-data-v2data image — including the 7 MDR/IVDR delegated + implementing acts and the 14 robotics instruments (#109).
All new content and fixes go to the fleet monorepo(seeds inmcps/eu-regulations/seed/, build viascripts/build-chassis-db.ts). Open PRs at archive time, for the record: #110 (rail EU-law spine — port its instruments to fleet seeds), #113 (README banner, superseded by this notice), #111 (dependabot), #57 / #4 (stale). The gateway endpoint below still works — it now serves from the fleet deployment.
The EU regulations corpus is now served through the Ansvar Gateway.Connect your AI assistant (Claude, Copilot, Cursor, custom MCP client) tohttps://gateway.ansvar.eu/mcp— one OAuth connection, free tier available, covering this corpus plus EU regulations, national law across dozens of audited jurisdictions (Europe + the US), and CVE/security intelligence, every result with a verbatim source citation. Start athttps://ansvar.eu/docs/quickstart
claude mcp add ansvar --transport http https://gateway.ansvar.eu/mcp
Claude Desktop / Cursor— add toclaude_desktop_config.json(ormcp.json):
{ "mcpServers": { "ansvar": { "type": "url", "url": "https://gateway.ansvar.eu/mcp" } } }
Claude.ai— Settings → Connectors → Add custom connector → pastehttps://gateway.ansvar.eu/mcp
First request opens an OAuth signup flow (setup details:ansvar.eu/docs/quickstart). After signup, your client is bound to your account; tier (free / premium / team / company) determines fan-out, quota, and which downstream MCPs are reachable.
You can also clone this repo and build the corpus yourself. The schema, fetcher, and tool implementations all live here. What is not in the repo is the pre-built database — TDM and standards-licensing constraints on the upstream sources mean we host the corpus on Ansvar infrastructure rather than redistribute it as a public artifact.
Build your own: run this repo's ingestion script (entry-point varies per repo — typicallyscripts/ingest.sh,npm run ingest, ormake ingest; check the repo root).
MCP server providing structured access to full-text EU regulations via Claude, Cursor, and other MCP-compatible clients.
QueryEU regulations— from GDPR and AI Act to DORA, Chips Act, MiFID II, eIDAS, Medical Device Regulation, MDCG cybersecurity guidance, and more — directly from Claude, Cursor, or any MCP-compatible client.
If you're building digital products, financial services, healthcare tech, or connected devices for the European market, this is your compliance reference.
Built byAnsvar Systems— Stockholm, Sweden
EU compliance is scattered across EUR-Lex PDFs, official journals, and regulatory sites. Whether you're:
- Adeveloperimplementing GDPR data rights or NIS2 incident reporting
- Aproduct teamnavigating AI Act risk assessments or Medical Device conformity
- Acompliance officermapping ISO 27001 to DORA requirements
- Alegal researchercomparing PSD2 authentication vs. eIDAS trust services
...you shouldn't need a law degree and 47 browser tabs. Ask Claude. Get the exact article. With context.
This MCP server makes EU regulationssearchable, cross-referenceable, and AI-readable.
- "What are the risk management requirements under NIS2 Article 21?"
- "How long do I have to report a security incident under DORA?"
- "Compare GDPR breach notification with NIS2 incident reporting"
- "Does the EU AI Act apply to my recruitment screening tool?"
- "What are the essential cybersecurity requirements under the Cyber Resilience Act?"
- "Which regulations apply to a healthcare organization in Germany?"
- "Map DORA ICT risk management to ISO 27001 controls"
- "What is an EU Digital Identity Wallet under eIDAS 2.0?"
- "What are my data access rights under the Data Act?"
More examples:TEST_QUERIES.md— 60+ example queries organized by category
- Regulations— GDPR, DORA, NIS2, AI Act, CRA, Chips Act, MiCA, eIDAS 2.0, Medical Device Regulation, and more
- Articles, Recitals & Official Definitions— full text, with individually addressable annexes
- Regulation Guides— Pitfalls, proportionality tiers, cross-regulation analysis, key article structures for DORA, CRA, AI Act, GDPR, NIS2, MDR, MiCA, DSA, Data Act, PLD, and more
- Full-Text Search— Find relevant articles and annexes across all regulations instantly
- Control Mappings— to ISO 27001:2022 & NIST CSF 2.0
- Evidence Requirements— audit artifacts across all regulations
- Sector Rules— applicability rules across all sectors and industries
- Daily Updates— Automatic freshness checks against EUR-Lex
Detailed coverage:docs/coverage.mdUse cases by industry:docs/use-cases.mdAvailable tools:docs/tools.md
Verbatim Source Text (No LLM Processing):
- All article text is ingested from EUR-Lex/UNECE official sources
- Snippets are returnedunchangedfrom SQLite FTS5 database rows
- Zero LLM summarization or paraphrasing — the database contains regulation text, not AI interpretations
- Note:HTML-to-text conversion normalizes whitespace/formatting, but preserves content
- Search returns64-token snippetswith highlighted matches (safe for context)
- Article retrieval warns about token usage (some articles = 70k tokens)
- Cross-references help navigate without loading everything at once
EUR-Lex HTML → Parse → SQLite → FTS5 snippet() → MCP response ↑ ↑ Formatting only Verbatim database query
EUR-Lex example:Download DORA PDF → Ctrl+F "incident" → Read Article 17 → Google "What's a major incident?" → Cross-reference NIS2 → Repeat for 5 regulations
This MCP:"Compare incident reporting requirements across DORA, NIS2, and CRA"→ Done.
- Database SSL/TLS Configuration- Secure PostgreSQL connections for Cloudflare Workers deployments
- Security Policy- Vulnerability reporting and security best practices
- Coverage Gaps- Known missing content from EUR-Lex
- GitHub Actions Setup- CI/CD workflow configuration
- [Privacy Policy- Data handling and retention notes
This server is read-only and does not require a login account for functional review. For directory review, use the bundled dataset and these sample prompts:
- "What does NIS2 Article 21 require?"
- "Compare DORA and NIS2 incident reporting obligations."
- "Map ISO 27001 controls to DORA requirements."
The default server runtime is read-only and can be deployed without authentication. If you deploy a remote authenticated endpoint, use OAuth 2.0 over TLS with certificates from recognized authorities.
Regulation text is sourced verbatim from EUR-Lex and UNECE (official public sources). However:
…
Sign in to leave a review
Use Google, GitHub, or an email account so ratings stay tied to real people.
No reviews posted yet.


