What is the gateway
The Ansvar gateway is one MCP server — one URL, one OAuth flow, one tool catalogue — sitting in front of a fleet of 224 specialist MCP servers (as of 2026-07-20). The gateway is what your AI client connects to; the fleet is what answers regulatory questions.
One URL, one tool catalogue
The gateway publishes a curated tool surface to whichever client you connect — curated meaning every tool is deliberately promoted, not that there are few: the families run from research (search, get_provision, validate_citation) through workflows (start_workflow and its siblings), vulnerability intelligence (search_cve, KEV/EPSS), the control library, regulatory-update monitoring, document citation, effective risk, the architecture workspace, and the audit ledger. The surface is tier-scoped — the authoritative list is what tools/list returns for your tier, and the tool reference documents it family by family. Your client sees a stable interface that doesn't change when we add a new jurisdiction behind the gateway.
What's behind the gateway
The fleet is split by purpose (counts as of 2026-07-20, read from the routing data — never typed into this page):
- 57 law servers routable today, serving the 49 audited jurisdictions — primary legislation, secondary regulations, case law and preparatory works where licensing allows. Corpora for 119 jurisdictions exist further back in the build pipeline; they count as coverage only once audited and routed.
- 92 sector services — consolidated chassis services carrying per-country sector-regulator corpora (cybersecurity, data protection, financial supervision, competition) across the EU/EFTA states.
- 75 domain servers for framework material that isn't tied to a national legislator: CVE, STRIDE, OWASP, IEC 62443, and other sector-specific safety and security frameworks.
When you call search(query=..., jurisdictions=[...]) or search(query=..., sectors=[...]), the gateway picks the right MCPs, fans out, and merges the results with citations preserved at item level. See coverage for the live fleet inventory.
Corpora are not the whole story: the same gateway fronts the workflow engine (staged assessments), the document service (paragraph-cited uploads), the control library (canonical controls with framework crosswalks), the regulatory-update monitor, and the live CVE / effective-risk engines. One connection reaches all of them, tier permitting.
What the gateway is not
- Not a chatbot. The gateway never generates an answer — it returns data with citations. Your AI client (Claude, Cursor, Copilot, ChatGPT) is the one synthesising prose. The gateway's job is to make sure the synthesis is grounded in a real source.
- Not a RAG store. There is no embedding index inside the gateway. Each MCP behind it owns its corpus, indexes it natively (full-text search, regulator-specific schemas), and returns the precise article the agent asks for.
- Not silently degrading. If an MCP is down or a jurisdiction isn't covered, the tool returns an explicit data-source-unavailable result and the client must surface it. The gateway will not fall back to a generic LLM answer when its data source fails.