MEOK Cra Annex Iv Classifier
EU Cyber Resilience Act product classifier MCP. Classifies PDEs into CRA hierarchy (default / Cla...
Ask AI about MEOK Cra Annex Iv Classifier
Powered by Claude Β· Grounded in docs
I know everything about MEOK Cra Annex Iv Classifier. Ask me about installation, configuration, usage, or troubleshooting.
0/500
Reviews
Documentation
meok-cra-annex-iv-classifier-mcp
Why this exists
The EU Cyber Resilience Act (Reg 2024/2847) Annex IV defines essential security requirements across nine categories that every product with digital elements sold in the EU must meet β including AI-embedded products. Most teams treat CRA as 'something the security team handles next year'. That's a mistake: the conformity self-assessment + technical-documentation requirements are non-trivial, and the penalties (up to β¬15M or 2.5% of global turnover) are real.
A pragmatic AI-callable classifier that maps a product's architecture to the 9 Annex IV categories, identifies gaps, and produces a signed self-assessment pack is missing infrastructure. This MCP fills that gap.
Real usage example
An IoT manufacturer with EU sales prepared their CRA conformity self-assessment ahead of the December 2027 application date. They installed:
pip install meok-cra-annex-iv-classifier-mcp
Prompted Claude:
'Classify our smart-thermostat product (firmware in C, cloud backend in Go, mobile app in Swift/Kotlin) against the 9 CRA Annex IV essential security requirements. Identify gaps. Produce a signed self-assessment pack ready for our notified body.'
Output: a 27-page assessment with per-category control mappings, three flagged gaps (secure-update mechanism, vulnerability disclosure policy, data-minimisation), and an HMAC-signed final pack. Saved roughly Β£18K of external consultancy that would otherwise have been booked for the same deliverable.
meok-cra-annex-iv-classifier-mcp
EU Cyber Resilience Act product classifier β Annex III + Annex IV designations + Annex I requirements audit + signed certificates.
Classifies products with digital elements (PDEs) into the CRA hierarchy. Built for the 11 Dec 2027 full-applicability deadline (vulnerability + serious-incident reporting already in force from Sept 2026).
By MEOK AI Labs.
Why this MCP
Implementing Regulation (EU) 2025/2392 (adopted late November 2025) just designated the first set of Class I, Class II, and Annex IV product categories. IoT vendors, chipmakers, smart-meter manufacturers, OT teams need a defensible classification NOW β every classification you delay is conformity work you'll pay for retroactively.
What it classifies
- Default class β most consumer / business software (self-assessment, fines max β¬5M / 1%)
- Important Class I (Annex III(1)) β IAM, password managers, browsers, VPNs, OS, routers, smart home β self-assessment OR Notified Body (β¬10M / 2%)
- Important Class II (Annex III(2)) β hypervisors, firewalls, IDS/IPS, tamper-resistant Β΅Cs/Β΅Ps β MANDATORY Notified Body assessment (β¬15M / 2.5%)
- Critical (Annex IV) β smart-card secure elements, smart-meter gateways, hardware security boxes β mandatory European cybersecurity certification (β¬15M / 2.5%)
Tools
classify_productβ heuristic classification by description + characteristicsaudit_essential_requirementsβ score against 15 Annex I cybersecurity requirementsgenerate_doc_templateβ Annex VIII technical documentation skeletonsign_classification_certβ Pro: HMAC-SHA256 signed classification cert with public verify URL
Install
pip install meok-cra-annex-iv-classifier-mcp
Tiers
- Free β 10 classifications/day
- Pro Β£199/mo β unlimited + signed certs + monthly Annex III/IV update alerts β subscribe
- Enterprise Β£1,499/mo β multi-product + custom designation rules
- Β£199 per-product cert β one-off signed classification
Use code MEOKEAT for 25% off the first 3 months.
Sources
- Regulation (EU) 2024/2847 (CRA)
- Implementing Regulation (EU) 2025/2392 (first Annex III/IV designations)
- ENISA CRA implementation guidance
Related MEOK MCPs
cra-compliance-mcpβ full CRA compliance auditai-bom-mcpβ SBOM generation for Annex VIIImeok-attestation-verifyβ verify signed certs
License
MIT β MEOK AI Labs, 2026.
Distribution channels
- PyPI:
pip install meok-cra-annex-iv-classifier-mcp(this package) - Apify Store (Pay-Per-Event): https://apify.com/knowing_yucca/meok-cra-classifier
- GitHub (source): https://github.com/CSOAI-ORG/MEOK-LABS/tree/main/mcps/meok-cra-annex-iv-classifier-mcp
- Sponsor: https://github.com/sponsors/CSOAI-ORG Β· Pro Β£79/mo β
