- Conduid
- Marketplace
- #compliance
MCP servers tagged compliance
352 live MCP servers tagged "compliance", ranked by trust score. Tags come from package metadata and repository topics, so this list covers servers across every category that work with compliance.
Ciso Assistant Community
CISO Assistant is a one-stop-shop GRC platform for Risk Management, AppSec, Compliance & Audit, TPRM, Privacy, and Reporting. It supports 100+ global frameworks with automatic con…
Fedramp Docs MCP
MCP Documentation Server Using the Official FedRAMP/docs Repo
knowledgepa3/gia-mcp-server
MCP proxy for GIA Governance — connects Claude Desktop and Claude Code to the hosted GIA governance engine
Fedramp20xmcp
MCP server for querying FedRAMP 20x requirements with Azure-first guidance
Prowler
Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.
Probo
Open source solutions for SOC2, GDPR, and ISO27001
Governance SDK
Enterprise Governance Layer (Identity, RBAC, Credentials, Auditing, Logging, Tracing) for the Model Context Protocol SDK
Agentmesh MCP Proxy
Public Preview — Security proxy for MCP servers: The Firewall for Model Context Protocol
Coverity Connect MCP
Model Context Protocol server for BlackDuck Coverity Connect static analysis platform
Vanta MCP Server
DEPRECATED: This project is no longer maintained. Please use the Vanta hosted MCP server instead.
Log
Compliance-grade audit logging for MCP client operations (SOC2, HIPAA, PCI)
Spotter Sast
A comprehensive Model Context Protocol (MCP) server providing enterprise-grade Static Application Security Testing (SAST) with advanced compliance verification, multi-tenant manag…
Aiworkdeck
Open-source workspace for professional document AI: reviewable agent edits, source-linked work, three-way document merges, and an extensible plugin runtime. Starting with legal wo…
Cloud Compliance
Conversational cloud security compliance auditing. MCP server enabling natural language queries about AWS security posture via Claude and other AI assistants.
Permit0
Stop AI agents from doing things they shouldn't. The action authorization layer — pre-execution, deterministic, policies included. Drop in. Day one.
DocSentinel
MCP server for AI agent for cybersecurity: automate assessment of documents, questionnaires & reports. Multi-format parsing, RAG knowledge base,Risks, compliance gaps, remediation…
arthurpanhku/Arthor-Agent
...
Medharness
Harness Engineering for Medical AI Coding · HIPAA + PIPL compliant · 12-step SOP + 5-step micro + 23 Skills + 8 MCP servers · Apache 2.0
Halo Record
Tamper-evident runtime records for AI agents. Hash-chained, dependency-free, verifiable by anyone.
SecuritySkills
Open-source security skills for AI coding agents. Grounded in OWASP, NIST, MITRE ATT&CK, CIS. Works with Claude Code, Gemini CLI, Cursor, Codex CLI, OpenClaw, Kiro.
Kyc Analyst
Open-source KYC/AML compliance automation. 17 human-in-the-loop checkpoints, free public data sources, deterministic risk scoring. Runs on Claude Cowork, Claude Code, or any Claud…
Opena2a CLI
Unified CLI for the OpenA2A security platform
Financeskills
AI-powered skills for financial professionals. Comprehensive collection of finance, accounting, audit, and compliance skills for AI agents. IFRS/GAAP compliant with industry-speci…
Specky
Agentic Spec-Driven Development — 13 agents, 58 MCP tools, 10-phase enforced pipeline. From meeting transcript to PR in one command. Install via npm install -g specky-sdd@latest
OpenTrustBench
Trust & security scanner for AI agents and MCP servers — OWASP-mapped findings, Trust Cards (A–F grades), SARIF + CI gate. Free CLI, zero telemetry.
server-scf
MCP server for the SCF Controls Platform — security compliance controls, frameworks, evidence, and risk management for AI agents
Mitre Attack MCP
🔌 Exposes MITRE ATT&CK matrix lookup + tactic/technique mapper over MCP — MIT
Avakill
🔪 Open-source safety firewall for AI agents. Intercepts tool calls before they execute, enforces YAML policies, and kills dangerous operations in real-time. Works with OpenAI, Ant…
Sandcastle
Describe what you want. Go home. Sandcastle ships it. 6 AI providers, EU data residency, smart failover, cost intelligence, 20 step types, 236 templates. European-built, open sour…
Asqav SDK
Python SDK for AI agent governance - audit trails, policy enforcement, quantum-safe signatures. Works with LangChain, CrewAI, MCP.
Aegis Memory
Secure context engineering for AI agents. Content security · integrity verification · trust hierarchy · ACE patterns. Self-hosted, Apache 2.0.
Aigis
Deterministic, zero-dependency Python firewall for AI agents — MCP rug-pull, memory poisoning, indirect injection, exfil channels. 44 compliance templates (US/CN/JP/EU).
Heron
Open-source AI agent auditor. Know what your agents do before production.
Remotepower
Server management dashboard, CVE-scanner, patch-mangement, SNMP-polling, monitoring, MCP-server, drift-detection, Proxmox. Basically a swiss-knife! AIO.
Legal Skills Open
Open library of legal AI skills (SKILL.md) for MCP-compatible agents — 39 jurisdictions, 200+ plugins, Apache-2.0.
Security Framework MCP
Unified NIST + OWASP security framework MCP server — 36 tools, 3439+ records, live NVD/KEV, PDF reading, STRIDE threat modeling, compliance mapping
KL4A
Turn SOP, policy and regulatory documents into human-verified Open Knowledge Format (OKF) bundles — every claim carries its source span. Desktop app + CLI + MCP server.
Sofagent
FDE Harness: audit-first governance for AI coding agents — 24 rules, HMAC chain, snapshot rollback (83 tools, 13 plugins)
Awesome AI Agent Governance
The curated list of tools, standards, and resources for governing AI agents in production: policy enforcement, audit trails, EU AI Act compliance, MCP and Claude Code security.
Inkog
Static security scanner for AI agents. Catches prompt injection, runaway loops, missing oversight, and compliance gaps across 21 frameworks. Use from Claude Code, Cursor, ChatGPT…
Terraview
Realiza análise estática e contextual de segurança em infraestrutura Terraform, detecta misconfigurations e riscos de compliance antes do apply, calcula scores de segurança e gera…
Awesome Legal Tech
A compilation of useful software, repos, and apps for lawyers and legal tech developers.
Airom
Open-source AI Bill of Materials (AIBOM) scanner: inventories AI models, datasets, prompts, embeddings, vector DBs & RAG pipelines across code, containers & Kubernetes — with file…
CloakLLM
Open-source PII cloaking + tamper-evident audit logs for LLM API calls
Trustmodel
Score any AI for trust — Eval, Monitor, Govern. 10 trust dimensions, one free API key (5 credits / $500).
Secure Sdlc Agents
A team of Claude Code sub-agents that enforce security across the full SDLC, from ASVS requirements and threat modelling to SAST triage, IaC review, compliance attestation and rel…
Audit Proxy
A tamper-evident audit proxy for MCP agents. Policy enforcement & hash-chained logs without the bloat.
Attestor
Tamper-evident flight recorder for AI agents: hash-chained tool-call ledger, RFC 6962 Merkle checkpoints anchored in Sigstore Rekor, verify CLI, regulator-ready evidence packs.
Flowlite MCP Bridge
A Model Context Protocol (MCP) bridge that exposes FlowLite workflow automation as structured AI tools — with compliance logging and audit trails.
Karukia
KARUKIA MCP Server v3.0 — AI-powered development methodology with 26 tools, 19 skills, 1797+ checkpoints across 11 audit dimensions. Works with any AI platform via MCP protocol.