one.clevsec/eu-compliance

up checked 2026-11-11T08:37:37.011Z

Unclaimed · Unverified

Agent searches it appeared in, last 30 days: 0. Run this server? Claim the listing: verified label, uptime alerts and analytics.

Publisher-provided title

ClevSec EU compliance tools

Publisher-provided description

Deterministic, sourced EU compliance checks: NIS2, DORA, GDPR, Cyber Resilience Act and AI Act.

Summary by lookupd

Runs deterministic EU compliance checks and gap assessments for NIS2, DORA, GDPR, CRA and AI Act, returning sourced remediation plans.

Install

Claude Code, remote (streamable-http)

claude mcp add --transport http eu-compliance https://mcp.clevsec.one/mcp

Codex, remote (streamable-http)

codex mcp add eu-compliance --url https://mcp.clevsec.one/mcp

Cursor, remote (streamable-http) → .cursor/mcp.json

{
  "mcpServers": {
    "eu-compliance": {
      "url": "https://mcp.clevsec.one/mcp"
    }
  }
}

Other clients: docs. Or tell your agent: Set up lookupd for me: read https://lookupd.com/agent.md and follow it.

Tools (showing 30 of 32)

Publisher-provided text

reporting_deadlines Use for any question about incident or breach reporting deadlines in the EU (for example 'how long do we have to report a breach / a cyber incident?'). Lists wh
nis2_scope_check Use for questions like 'does NIS2 apply to my company?', 'are we an essential or important entity?' or 'is a company of this size and sector in scope?'. Indicat
nis2_gap_assessment Use to assess how ready an organisation is for NIS2 cybersecurity requirements, or to find its gaps. Call without answers to get the 53 questions in nine domain
dora_classify_incident Use when a bank, insurer, investment firm, payment or crypto-asset firm or other financial entity has an IT outage, cyber attack or data incident and asks wheth
dora_checklist Use for 'what does DORA require?', DORA compliance checklists or gap reviews. Returns the core DORA (Regulation (EU) 2022/2554) requirements for financial entit
dora_gap_assessment Use to assess how ready a financial entity is for DORA, or to find its gaps. Call without answers to get the 39 questions in five pillars (ICT risk management,
gdpr_breach_decision Use when a personal data breach has happened (data lost, stolen, sent to the wrong person, encrypted by ransomware, accessed without authorisation) to decide wh
gdpr_fine_estimate Use for 'how big could a GDPR fine be?' or 'how are GDPR fines calculated?'. Applies step 2 of the EDPB Guidelines 04/2022 method: the Art. 83(4) or 83(5) legal
gdpr_checklist_assessment Use to check how far an organisation is with GDPR compliance, or to list what GDPR requires in practice. Call without input to get the 48 checklist items in 8 a
gdpr_dpia_screening Use when someone plans new processing of personal data (a new system, AI use, monitoring, profiling) and asks whether a data protection impact assessment is req
privacy_notice_requirements Use when writing or checking a privacy policy or privacy notice. Lists every item the GDPR requires with its article, for data collected from the person (Art. 1
data_flow_record_check Use when someone maps personal data flows or builds GDPR records of processing activities (ROPA, Art. 30). Give the flows (name, purpose, data categories, recip
cookie_consent_check Use when someone asks whether their cookie banner or cookie consent is compliant in the EU (ePrivacy Art. 5(3) and GDPR consent rules). Call without answers to
cra_reporting_check Use when a manufacturer of hardware or software sold in the EU learns of an actively exploited vulnerability or a security incident in its product. Applies Art.
iso27001_gap_assessment Use to check how close an organisation is to ISO/IEC 27001:2022 certification, or to list the Annex A controls in practice. Call without answers to get 41 contr
vendor_risk_assessment Use when an organisation evaluates a supplier, SaaS or ICT provider (vendor due diligence, third-party risk, supply chain security under NIS2 Art. 21(2)(d) or D
maturity_assessment Use to measure an organisation's cybersecurity maturity or to benchmark it against NIST CSF 2.0. Call without answers to get 39 capabilities in the six CSF func
cyber_risk_score Use for a quick view of a small organisation's cyber risk ('how secure are we?', 'what is our cyber risk score?'). Call without answers to get 15 weighted quest
agent_risk_check Use when someone asks how risky an AI agent or assistant setup is ('is it safe to let our agent read email and send replies?', 'what are the risks of this agent
mcp_tools_check Use before enabling an MCP server or connecting to an A2A agent ('is this MCP server safe to add?', 'check these tool descriptions'). Pass the server's tools/li
ai_act_scope_check Use when someone asks whether the EU AI Act applies to an AI system or model, how it is classified or what they must do ('is our recruitment tool high-risk?', '
nis2_remediation_plan Use after nis2_gap_assessment when the user wants a plan to close their NIS2 gaps. Turns the same answers into every gap with a recommended action, a priority,
dora_remediation_plan Use after dora_gap_assessment when the user wants a plan to close their DORA gaps. Turns the same answers into every gap with a recommended action, a priority,
gdpr_remediation_plan Use after gdpr_checklist_assessment when the user wants a plan to close their GDPR gaps. Turns the same input into every open item with a recommended action, a
gdpr_dpia_report Use after gdpr_dpia_screening when the user needs the DPIA worked out: a risk register linking each high or medium risk to its measures with coverage and indica
data_flow_review Use after data_flow_record_check for a compliance review of each personal data flow: legal basis, special category and children's data, consent and legitimate i
cookie_consent_fix_plan Use after cookie_consent_check when the user wants to fix their cookie consent. Returns every open item with the fix, its legal source (ePrivacy, GDPR, CJEU Pla
iso27001_remediation_plan Use after iso27001_gap_assessment when the user wants a plan towards ISO/IEC 27001 certification. Turns the same statuses into every gap with a recommended acti
vendor_due_diligence_plan Use after vendor_risk_assessment when the user needs to act on a vendor's gaps. Returns every gap with an action, the evidence to request from the vendor, ISO 2
maturity_improvement_plan Use after maturity_assessment when the user wants to raise their maturity. Lists every capability below the target level (3 or 4) with the next action, NIST CSF

Details

Version: 1.5.0
Transports: streamable-http
Uptime (7 days): 100%
Median latency: 373 ms
First indexed: 2026-11-01T10:07:56.219Z
Last seen in registry: 2026-11-10T13:17:25.636Z
Website: https://clevsec.one/mcp/

Badge for your README

Shows this live status and links here; updates hourly.

[![lookupd status](https://lookupd.com/badge/one.clevsec/eu-compliance.svg)](https://lookupd.com/servers/one.clevsec/eu-compliance)

62141 servers
Last crawl: 2026-11-11T18:39:04.612Z
API base: https://api.lookupd.com
MCP URL: https://api.lookupd.com/mcp