MCP lets AI look things up instead of guessing
Normally, AI answers from memory — which can be wrong. MCP gives it access to real sources like regulations, security frameworks, and standards, so answers come with citations you can check.
See how it worksThe problem MCP solves
Same question: "What does DORA Article 6 require?"
Without MCP
DORA Article 6 requires financial entities to have an ICT risk management framework. It should include strategies, policies, and procedures to protect information assets. Organizations need to ensure resilience and continuity of operations.
Plausible, but no source cited. Is this accurate?
With MCP
DORA Article 6 — ICT risk management framework
Financial entities shall have a sound, comprehensive and well-documented ICT risk management framework as part of their overall risk management system, which enables them to address ICT risk quickly, efficiently and comprehensively.
Source: Regulation (EU) 2022/2554, Article 6(1)
Exact article text with source citation. Verifiable.
How it works
Step 1
You ask a question
"What does DORA say about incident reporting?"
Step 2
AI retrieves the source
The MCP server finds the exact article text from the regulation.
Step 3
You get a cited answer
With the regulation name, article number, and actual wording — so you can verify.
What we built
20 open-source MCP servers across regulations, frameworks, and national law.
Need the full repository catalog (including non-endpoint projects)? Browse Open Source
Regulations & Frameworks
Cross-border regulatory frameworks and security control mappings.
EU Regulations
Search and retrieve EU law — full article text, recitals, and definitions.
GDPR, DORA, NIS2, AI Act, MiCA, Cyber Resilience Act, and 30+ more.
View on GitHubUS Regulations
Search and retrieve US federal and state law.
HIPAA, CCPA, SOX, GLBA, FERPA, COPPA, FDA 21 CFR Part 11, and state privacy laws.
View on GitHubSecurity Controls
Map and compare security frameworks and controls.
1,451 controls across 28 frameworks including ISO 27001, NIST CSF, DORA, PCI DSS, SOC 2, CMMC.
View on GitHubAutomotive Cybersecurity
UNECE R155/R156 regulations and ISO 21434 guidance for automotive compliance.
Full R155/R156 regulation text, ISO 21434 cross-references, and compliance matrices.
View on GitHubOT Security
Industrial and operational technology security standards.
IEC 62443, NIST 800-82, NIST 800-53, and MITRE ATT&CK for ICS.
View on GitHubNational Law Databases
Country-specific statutes, legislation, and legal provisions.
Dutch Law
Search Dutch statutes, regulations, and legal provisions from wetten.overheid.nl.
Dutch national legislation including the Burgerlijk Wetboek, Algemene wet bestuursrecht, and thousands of statutes.
View on GitHubGerman Law
Search German federal statutes and regulations from gesetze-im-internet.de.
German federal legislation including the BGB, StGB, GG, BDSG, and hundreds of federal laws.
View on GitHubSlovenian Law
Search Slovenian statutes, regulations, and legal provisions from pisrs.si.
Slovenian national legislation including the Obligacijski zakonik, Kazenski zakonik, Ustava RS, and thousands of statutes.
View on GitHubSwedish Law
Search Swedish statutes, preparatory works, and EU cross-references.
717 statutes, 31,198 provisions, 3,625 preparatory works, and 668 EU law cross-references.
View on GitHubDanish Law
Search Danish statutes sourced from retsinformation.dk.
Danish national legislation including all current consolidated statutes.
View on GitHubFinnish Law
Search Finnish statutes sourced from finlex.fi.
Finnish national legislation including all current consolidated statutes.
View on GitHubNorwegian Law
Search Norwegian statutes sourced from lovdata.no.
Norwegian national legislation including all current consolidated statutes.
View on GitHubIcelandic Law
Search Icelandic statutes sourced from althingi.is.
Icelandic national legislation including all current consolidated statutes.
View on GitHubUS Law
Search US federal and state statutes.
Federal Code, state codes, and key federal legislation.
View on GitHubUK Law
Search UK Acts of Parliament sourced from legislation.gov.uk.
UK primary legislation including all current Acts of Parliament.
View on GitHubIrish Law
Search Irish statutes sourced from irishstatutebook.ie.
Irish national legislation including all current consolidated Acts.
View on GitHubBelgian Law
Search Belgian legislation sourced from ejustice.just.fgov.be.
Belgian federal legislation including codes, lois, and arrêtés royaux.
View on GitHubLuxembourg Law
Search Luxembourg legislation sourced from legilux.public.lu.
Luxembourg national legislation including all current consolidated laws.
View on GitHubFrench Law
Search French legislation sourced from legifrance.gouv.fr.
French national legislation including codes, lois, and décrets.
View on GitHubAustrian Law
Search Austrian legislation sourced from ris.bka.gv.at.
Austrian federal legislation including all current consolidated laws.
View on GitHubReady to try it?
Choose how you want to connect. Remote is fastest and requires no local install. Local install gives full on-device control.
Remote (recommended): No local install required. Local install: Claude Desktop + Node.js.
No local install required
In remote mode, all servers are live and publicly accessible. No local Node.js or config files required—just add the URL.
Local install: Claude Desktop + Node.js.
Server endpoints
Each server is a Streamable HTTP endpoint. Copy the URL for the servers you need.
Dutch Law
Dutch statutes and regulations sourced from wetten.overheid.nl
German Law
German federal statutes sourced from gesetze-im-internet.de
Slovenian Law
Slovenian statutes and regulations sourced from pisrs.si
Swedish Law
717 Swedish statutes sourced from Riksdagen
EU Regulations
49 EU regulations — GDPR, NIS2, DORA, AI Act, CRA, and all DORA RTS/ITS
US Regulations
HIPAA, CCPA, SOX, GLBA, FERPA, COPPA, and state privacy laws
Security Controls
1,451 controls across ISO 27001, NIST CSF, DORA, PCI DSS, SOC 2
Automotive Cybersecurity
UN R155/R156, ISO/SAE 21434
Danish Law
Danish statutes sourced from retsinformation.dk
Finnish Law
Finnish statutes sourced from finlex.fi
Norwegian Law
Norwegian statutes sourced from lovdata.no
Icelandic Law
Icelandic statutes sourced from althingi.is
US Law
US federal and state statutes
UK Law
UK Acts of Parliament sourced from legislation.gov.uk
Irish Law
Irish statutes sourced from irishstatutebook.ie
Belgian Law
Belgian legislation sourced from ejustice.just.fgov.be
Luxembourg Law
Luxembourg legislation sourced from legilux.public.lu
French Law
French legislation sourced from legifrance.gouv.fr
Austrian Law
Austrian legislation sourced from ris.bka.gv.at
Go to Settings → Connectors
Click "Add custom connector"
Enter a name (e.g. "EU Regulations") and paste the server URL
Click "Add" — done. The tools appear in your next conversation.
Verify it works
Try one of these prompts depending on which server you added:
Quote DORA Article 6 exactly. Include the regulation name and article number.What does HIPAA say about breach notification timelines? Cite the specific section.Map ISO 27001 control A.8.1 to NIST CSF. Show the framework mapping.What does UN R155 require for cybersecurity management systems? Cite the article.Wat staat er in artikel 6:162 van het Burgerlijk Wetboek? Citeer de exacte wettekst.Was besagt § 823 BGB? Zitieren Sie den genauen Gesetzestext.Kaj določa 131. člen Obligacijskega zakonika? Citirajte natančno zakonsko besedilo.Visa 3 kap. 5 § i dataskyddslagen (2018:218). Citera den exakta lagtexten.Hvad bestemmer § 1 i persondataloven? Citér den præcise lovtekst.Mitä tietosuojalain 1 § määrää? Lainaa tarkka lakiteksti.Hva bestemmer § 1 i personopplysningsloven? Siter den nøyaktige lovteksten.Hvað segir 1. gr. laga um persónuvernd? Vitnaðu í nákvæman lagatexta.What does 18 U.S.C. § 1030 say about computer fraud? Cite the exact statutory text.What does Section 1 of the Data Protection Act 2018 say? Cite the exact statutory text.What does Section 1 of the Data Protection Act 2018 (Ireland) say? Cite the exact statutory text.Que dispose l'article 1er de la loi du 30 juillet 2018 relative à la protection de la vie privée? Citez le texte exact.Que dispose l'article 1er de la loi du 1er août 2018 portant organisation de la CNPD? Citez le texte exact.Que dispose l'article 1er de la loi n° 78-17 du 6 janvier 1978 relative à l'informatique? Citez le texte exact.Was besagt § 1 des Datenschutzgesetzes (DSG)? Zitieren Sie den genauen Gesetzestext.A good answer will cite the exact source — not a summary from memory.
What you can ask
Once installed, just ask Claude questions in plain language.
Basic
"What is GDPR Article 32?"
Claude retrieves the full text of Article 32 (Security of processing), including all subsections — no more tab-juggling through EUR-Lex.
Practical
"What are the NIS2 incident reporting timelines?"
Claude finds NIS2 Article 23, extracts the specific timelines (24 hours for early warning, 72 hours for detailed report), and explains what information is required at each stage.
Advanced
"How do GDPR and NIS2 differ on breach notification?"
Claude pulls both GDPR Article 33 and NIS2 Article 23, compares timelines, scope, and required information, and highlights key differences like NIS2's two-stage reporting vs GDPR's single notification.
Common questions
Is this free?
Yes. All Ansvar MCP servers are open source under the Apache 2.0 license.
Does my data leave my computer?
Remote mode sends tool calls to your AI provider and the MCP endpoint you connect. Local mode runs MCP servers on your machine.
What apps work with MCP?
Claude Desktop (recommended for beginners), Cursor, VS Code with Copilot, Windsurf, and other MCP-compatible clients.
Do I need to know how to code?
Remote (recommended): No local install required. Local install: Claude Desktop + Node.js.
Start with one server. Ask one question.
See the difference.
All servers are free and open source, with both remote endpoints and local install options.