About compliance-shield
compliance-shield is an MCP server for EU AI Act risk classification, audit trails, gap checks, and evidence generation. It is intended for teams documenting AI agent systems and preparing compliance materials.
Key features
- 01按 EU AI Act 分类风险
- 02记录可追溯的 AI 决策
- 03识别合规要求缺口
- 04生成审计证据文档
- 05查看执法时间线
Use cases
- 01评估 AI 系统的风险等级
- 02持续记录 AI 决策信息
- 03查找尚未满足的合规要求
- 04为审计准备证据材料
MCP support
该 MCP 服务提供风险评估、审计记录、合规缺口检查、证据包生成和执法时间线工具,并提供时间线及活动审计记录资源。
Configuration
Local server config is the same for every client. Copy it into your client’s MCP config file.
Tools
Local servers expose tools only once running on your machine, and the maintainer has not provided a tool list.
Details
From the project READMEcompliance-shield-mcp
EU AI Act compliance audit trails and evidence generation for AI agent systems.
EU AI Act enforcement begins August 2, 2026. Fines up to 35M EUR or 7% of global annual turnover.
What it does
Runtime compliance layer that plugs into any MCP-compatible AI system to provide:
- Risk Classification — Classify AI systems as Unacceptable, High, Limited, or Minimal risk per the EU AI Act framework
- Audit Trails — Create and maintain decision logs with full traceability (input, output, reasoning, human oversight, model, confidence)
- Gap Analysis — Identify missing compliance requirements with specific article references and actionable recommendations
- Evidence Packages — Generate auditor-ready documentation suitable for regulatory submission
- Enforcement Timeline — Track upcoming deadlines with days remaining and penalty structure
Install
npx compliance-shield-mcp
Claude Desktop
{
"mcpServers": {
"compliance-shield": {
"command": "npx",
"args": ["compliance-shield-mcp"]
}
}
}
Tools
| Tool | Description |
|---|---|
assess_risk_level | Classify an AI system under EU AI Act risk framework |
create_audit_trail | Start a compliance audit trail for an AI system |
log_decision | Log an AI decision with full traceability metadata |
check_compliance_gaps | Identify missing compliance requirements |
generate_evidence_package | Generate auditor-ready evidence documentation |
get_enforcement_timeline | Show upcoming enforcement deadlines and penalties |
Resources
| URI | Description |
|---|---|
compliance://timeline | EU AI Act enforcement timeline |
compliance://trails | List all active audit trails |
Quick Start
1. assess_risk_level → Know your risk classification
2. create_audit_trail → Start logging
3. log_decision (repeatedly) → Record every AI decision
4. check_compliance_gaps → Find what's missing
5. generate_evidence_package → Hand to your auditor
EU AI Act Key Dates
| Date | Milestone |
|---|---|
| Feb 2, 2025 | Prohibited AI practices banned |
| Aug 2, 2025 | Governance bodies operational |
| Aug 2, 2026 | High-risk AI obligations enforced |
| Aug 2, 2027 | Full enforcement for all AI systems |
Architecture
- Pure Node.js, ES modules
@modelcontextprotocol/sdk+zodonly- In-memory Maps (no external dependencies)
- stdio transport
License
MIT
Comments
New to MCP?
From what the protocol is to installing your first server, these answers cover most first questions.
An open protocol that defines how AI applications connect to external tools and data in a uniform way. Clients talk to the model; MCP servers provide tools, resources and prompt templates. They exchange standard messages, so one server can be reused by many clients.