About cra-compliance-mcp
cra-compliance-mcp is an MCP server for EU Cyber Resilience Act compliance for products with digital elements. It supports product classification and checks related to CE marking, vulnerability disclosure, and SBOMs.
Key features
- 01Classify products
- 02Check Annex I requirements
- 03Create an SBOM skeleton
- 04Support CE marking and vulnerability disclosure
Use cases
- 01Assess a product under the Cyber Resilience Act
- 02Review Annex I requirements
- 03Prepare an SBOM outline
- 04Support CE marking and vulnerability disclosure work
MCP support
Exposes Cyber Resilience Act compliance tools, including product classification, Annex I auditing, and SBOM skeleton generation, to MCP clients.
Configuration
Local server config is the same for every client. Copy it into your client’s MCP config file.
Tools
Local servers expose tools only once running on your machine, and the maintainer has not provided a tool list.
Details
From the project README🔏 Free tier: 50 calls/day. Need audit-ready proof?
Pro (£199/mo) turns every result into an HMAC-signed attestation with a public verify URL your auditor validates without an account — EU AI Act Art 11/12 ready. → Start: https://proofof.ai ·
pip install meok-attestation-verifyto verify any cert.
Cra Compliance MCP
EU Cyber Resilience Act (Reg 2024/2847) compliance MCP for products with digital elements
EU Cyber Resilience Act (Reg 2024/2847) compliance MCP for products with digital elements. CE marking, vulnerability disclosure, SBOM. MIT
🚀 Quick Start
# Install via pip
pip install cra_compliance_mcp
# Or install via Smithery
npx -y @smithery/cli@latest install cra-compliance-mcp --client claude
⚡ Pay-per-call (PAYG) — no subscription
This MCP supports universal pay-per-call billing across the MEOK compliance fleet:
# One-time setup
export MEOK_PAYG_KEY="your_topup_token"
# Every tool call now deducts £0.05 from your balance.
# When balance hits zero, the tool returns a top-up URL.
# Works across all 7 MEOK compliance MCPs with the same token.
- No subscription — top up once, deduct per call.
- £0.05/call default (configurable via
MEOK_PAYG_RATE_GBP). - USDC on Base L2 accepted — set
MEOK_X402_RECEIVERand pay via stablecoin. - Backward-compatible — when
MEOK_PAYG_KEYis unset, behaviour is unchanged.
Get a token: councilof.ai/payg (£10 / £50 / £200 top-up tiers).
✨ Features
- MCP protocol compliant
- Easy installation
- Well-documented API
- Production-ready
- Active maintenance
📖 Documentation
🛡️ Compliance
This MCP server is built with EU AI Act compliance built-in:
- ✅ Article 9 — Risk Management System
- ✅ Article 13 — Transparency & Instructions for Use
- ✅ Article 15 — Bias Detection & Testing
- ✅ Article 26 — FRIA Support (where applicable)
- ✅ Article 50 — AI Content Watermarking (where applicable)
Need help getting compliant? Book a free 15-min diagnostic →
🏢 Enterprise
Need custom development, SLA guarantees, or white-label deployment?
- Pro: £79/mo — Full MCP suite + EU AI Act tracking
- Enterprise: £499/mo — Custom dev + SLA + Dedicated support
View Pricing → | Contact Sales →
🤝 Part of the MEOK Ecosystem
This server is part of the MEOK AI Labs ecosystem — 26 PyPI packages · ~16,300 monthly installs.
| Domain | Purpose |
|---|---|
| councilof.ai | EU AI Act compliance marketplace |
| safetyof.ai | AI safety & monitoring |
| meok.ai | Sovereign AI platform |
| cobolbridge.ai | Legacy modernization |
📜 License
MIT © CSOAI-ORG
Built with 💜 by MEOK AI Labs · UK Companies House 16939677
Configuration
Add to your claude_desktop_config.json (Claude Desktop) or your MCP client config:
{
"mcpServers": {
"cra-compliance-mcp": {
"command": "uvx",
"args": ["cra-compliance-mcp"]
}
}
}
Or: pip install cra-compliance-mcp then run the cra-compliance-mcp command (stdio transport).
Examples
Once configured, ask your assistant, for example:
- "Use
classify_productto …" - "Use
audit_annex_ito …" - "Use
sbom_skeletonto …"
Comments
New to MCP?
From what the protocol is to installing your first server, these answers cover most first questions.
An open protocol that defines how AI applications connect to external tools and data in a uniform way. Clients talk to the model; MCP servers provide tools, resources and prompt templates. They exchange standard messages, so one server can be reused by many clients.