About SOC 2 Compliance
An MCP server for SOC 2 compliance work across all five Trust Service Criteria. It helps compliance teams assess controls, find gaps, prepare evidence, and produce audit-ready documentation.
Key features
- 01Assess controls against five criteria
- 02Analyze control gaps
- 03Generate control matrices
- 04Score audit readiness
- 05Create evidence checklists
- 06Plan remediation
Use cases
- 01Review controls against a SOC 2 principle
- 02Identify gaps in existing controls
- 03Prepare evidence for an audit
- 04Prioritize remediation work
MCP support
Exposes SOC 2 assessment, gap analysis, control matrix, audit readiness, evidence checklist, and remediation tools to MCP clients.
Configuration
Local server config is the same for every client. Copy it into your client’s MCP config file.
Tools
Local servers expose tools only once running on your machine, and the maintainer has not provided a tool list.
Details
From the project READMESoc2 Compliance Ai MCP
⚖️ Built by MEOK AI Labs / CSOAI. Need this applied to your system fast? Book a 30-min Founder Office Hour (£29) → https://meok.ai/work · Full governance platform → https://meok.ai
SOC 2 Type II compliance MCP — Trust Service Criteria audit, access review, change management, co... mcp-name: io.github.CSOAI-ORG/soc2-compliance-ai-mcp
SOC 2 Compliance MCP
SOC 2 Trust Service Criteria — Security, Availability, Processing Integrity, Confidentiality, Privacy
SOC 2 Type II compliance MCP — Trust Service Criteria audit, access review, change management, control evidence automation.
🚀 Quick Start
# Install via pip
pip install soc2_compliance_ai_mcp
# Or install via Smithery
npx -y @smithery/cli@latest install soc2-compliance-ai-mcp --client claude
✨ Features
- MCP protocol compliant
- Easy installation
- Well-documented API
- Production-ready
- Active maintenance
📖 Documentation
🛡️ Compliance
This MCP server is built with EU AI Act compliance built-in:
- ✅ Article 9 — Risk Management System
- ✅ Article 13 — Transparency & Instructions for Use
- ✅ Article 15 — Bias Detection & Testing
- ✅ Article 26 — FRIA Support (where applicable)
- ✅ Article 50 — AI Content Watermarking (where applicable)
Need help getting compliant? Book a free 15-min diagnostic →
🏢 Enterprise
Need custom development, SLA guarantees, or white-label deployment?
- Pro: $99/mo — Full MCP suite + EU AI Act tracking
- Enterprise: $499/mo — Custom dev + SLA + Dedicated support
View Pricing → | Contact Sales →
🤝 Part of the MEOK Ecosystem
This server is part of the MEOK AI Labs ecosystem — 300+ MCP servers for sovereign AI governance.
| Domain | Purpose |
|---|---|
| councilof.ai | EU AI Act compliance marketplace |
| safetyof.ai | AI safety & monitoring |
| meok.ai | Sovereign AI platform |
| cobolbridge.ai | Legacy modernization |
📜 License
MIT © CSOAI-ORG
Built with 💜 by MEOK AI Labs · UK Companies House 16939677
AI-powered SOC 2 compliance automation covering all five Trust Service Criteria. Assess controls, generate control matrices, identify gaps, and produce audit-ready documentation.Tools
| Tool | Description | Parameters |
|---|---|---|
assess_trust_principles | Assess controls against all 5 TSC principles | principle, controls |
control_gap_analysis | Identify gaps between existing controls and SOC 2 | current_controls, principle |
generate_control_matrix | Generate a SOC 2 control matrix | principle, controls, evidence |
audit_readiness | Overall SOC 2 audit readiness score | all_controls, principles |
evidence_checklist | Generate evidence checklist by principle | principle (str, required) |
remediation_plan | Prioritized remediation plan for gaps | findings, timeline |
Installation
pip install mcp
Claude Desktop / Cursor / VS Code / Windsurf
{
"mcpServers": {
"soc2-compliance": {
"command": "python",
"args": ["path/to/server.py"]
}
}
}
Usage Examples
Assess security principle
{
"principle": "security",
"controls": ["firewall", "encryption", "access control", "no monitoring"]
}
Generate control matrix
{
"principle": "availability",
"controls": ["redundant servers", "backup power", "DR plan"],
"evidence": ["uptime reports", "DR test results"]
}
Pricing
- Free: 10 assessments/day
- Pro: $99/mo — unlimited assessments + matrices
- Enterprise: $499/mo — full audit trail + readiness scoring
Built by MEOK AI Labs | meok.ai
💸 Try MEOK in 30 seconds — instant buy ladder
| Tier | Price | What you get | Stripe |
|---|---|---|---|
| Smoke test | £1 | Signed sample MCP-Hardening report + Article 50 PDF | https://buy.stripe.com/5kQ6oJ0xS3ce8sl7ew8k91j |
| Quick Kit | £9 | EU AI Act Article 50 implementation guide (C2PA + EU-Icon) | https://buy.stripe.com/5kQ6oJ0xS3ce8sl7ew8k91j |
| Founder Call | £29 | 30-min 1-on-1 with the founder | https://buy.stripe.com/5kQ6oJ0xS3ce8sl7ew8k91j |
Refundable. UK Stripe — VAT-clean. Builds on the 81-MCP MEOK fleet. Verify any signed report at https://meok.ai/verify.
Comments
New to MCP?
From what the protocol is to installing your first server, these answers cover most first questions.
An open protocol that defines how AI applications connect to external tools and data in a uniform way. Clients talk to the model; MCP servers provide tools, resources and prompt templates. They exchange standard messages, so one server can be reused by many clients.