Cra Compliance MCP

Install

Works with Claude Code, Codex, VS Code, Cursor, Windsurf, Claude Desktop. Read the repository before you give any tool access to your data.

npx agentmarket install connector/csoai-org-cra-compliance-mcp

About

No reviews yet. Installed it? Reviews come from verified installers only. How reviews work

Permissions

What this server can do and what it asks for, from its tool list and install config. Checked Oct 25, 2026.

Tools

4 read · 1 write · 0 delete · 2 not yet classified

Secrets

None asked for

Install scripts

Not scanned yet

Runs as

Python package

Tools (7)

Read from the source code; the running server may differ. Descriptions are the server’s own words; hidden characters are shown as [U+…].

• audit_annex_i

  COST WARNING: $0.50/call on x402-billed deployments (hosted); free when self-hosted or X402 is disabled. Audit Annex I essential cybersecurity requirements (both Part 1 product properties and Part 2 vulnerability handling) against your current controls. Behavior: This tool generates structured output without modifying external systems. Output is deterministic for identical inputs. No side effects. Free tier: 10/day rate limit. Pro tier: unlimited. No authentication required for basic usage. When to use: Use this tool when you need to assess, audit, or verify compliance …

• classify_product

  COST WARNING: $0.10/call on x402-billed deployments (hosted); free when self-hosted or X402 is disabled. Classify a product with digital elements (PDE) into its CRA class (default/I/II/critical) and return the conformity assessment path + essential requirements scope. Behavior: This tool generates structured output without modifying external systems. Output is deterministic for identical inputs. No side effects. Free tier: 10/day rate limit. Pro tier: unlimited. No authentication required for basic usage. When to use: Use this tool when you need to assess, audit, or veri…

• conformity_assessment_roadmap

  COST WARNING: $0.25/call on x402-billed deployments (hosted); free when self-hosted or X402 is disabled. Produce a conformity assessment roadmap for CE marking your product under CRA. Behavior: This tool generates structured output without modifying external systems. Output is deterministic for identical inputs. No side effects. Free tier: 10/day rate limit. Pro tier: unlimited. No authentication required for basic usage. When to use: Use this tool when you need to assess, audit, or verify compliance requirements. Ideal for gap analysis, readiness checks, and generat…

• enforcement_status

  Current CRA enforcement timeline + key deadlines. Behavior: This tool is read-only and stateless — it produces analysis output without modifying any external systems, databases, or files. Safe to call repeatedly with identical inputs (idempotent). Free tier: 10/day rate limit. Pro tier: unlimited. No authentication required for basic usage. When to use: Use this tool when you need to assess, audit, or verify compliance requirements. Ideal for gap analysis, readiness checks, and generating compliance documentation. When NOT to use: Do not use as a substitu…

• sbom_skeleton

  COST WARNING: $0.25/call on x402-billed deployments (hosted); free when self-hosted or X402 is disabled. Generate a minimal CycloneDX-style SBOM skeleton required for CRA Article 13. Pass components as a comma-separated list or JSON; Pro tier auto-scans dependencies. Behavior: This tool generates structured output without modifying external systems. Output is deterministic for identical inputs. No side effects. Free tier: 10/day rate limit. Pro tier: unlimited. No authentication required for basic usage. When to use: Use this tool when you need to assess, audit, or verif…

• sign_cra_attestation

  Generate a cryptographically signed CRA (Cyber Resilience Act) compliance attestation (Pro/Enterprise). Uses the shared MEOK attestation module — HMAC-SHA256 signed JSON + public verify URL + optional board-ready PDF. Auditors validate via verify_url without backend access. Expires 365 days from issue. - findings_csv: comma-separated findings (e.g. "Annex I.1 cybersecurity-by-design PASS,Annex I.2 vulnerability handling GAP") - requirements_audited_csv: comma-separated Annex I requirement IDs (e.g. "1,2,3") - include_pdf_base64: True to receive PDF as base64

• vulnerability_reporting_readiness

  Check readiness for the Sep 2026 mandatory reporting of exploited vulnerabilities + severe incidents under CRA Article 14 (single reporting platform via ENISA). Behavior: This tool is read-only and stateless — it produces analysis output without modifying any external systems, databases, or files. Safe to call repeatedly with identical inputs (idempotent). Free tier: 10/day rate limit. Pro tier: unlimited. No authentication required for basic usage. When to use: Use this tool when you need to assess, audit, or verify compliance requirements. Ideal for gap analysis…

Signals

Stars

0

Forks

0

Open issues

1

Weekly downloads

75

Last commit

Sep 4, 2026 (1 month ago)

Last release

Jun 30, 2026 (4 months ago)

Last package publish

Jun 27, 2026 (4 months ago)

From GitHub (fetched Oct 24, 2026) and the package registry.

Details

Registry name

io.github.CSOAI-ORG/cra-compliance-mcp

Version

1.3.15

Auth

No auth

Packages

pypi cra-compliance-mcp

License

MIT

Repository

github.com/CSOAI-ORG/cra-compliance-mcp

Website

meok.ai/cra-compliance-mcp

First seen

Oct 24, 2026

Last checked

Oct 25, 2026

Source

Official MCP Registrygithub-graphql