Cyber Resilience Act MCP

EU CRA Annex I classifier + SBOM + vulnerability handling. Sept 2027 cliff.

★ MIT licensed📦 39 servers shipped↓ 4,400+ monthly installs across suite🛡 HMAC-signed attestations🔌 Anthropic MCP Registry listed

Free forever for self-hosted use. The MCP itself is MIT-licensed and runs locally — install via uvx cra-compliance-mcp below at zero cost. You only pay for HMAC-signed attestations (required for DORA Art 17 / EU AI Act Art 12 / ISO 42001 evidence) and managed hosting. No card to install or test.

⏰ EU AI Act Article 50 transparency obligations apply 2 Aug 2026; high-risk Annex III obligations 2 Dec 2027. First-10 subscribers lock today's £29/mo for life.

Starter · 14 days free

£29 / month, after trial

Signed attestations + unlimited audits + email support. Trial = £0 for 14 days, cancel anytime. Use code FREE14 for first month free.

Start 14-day trial →

PyPI →MCP Registry →GitHub →

Install

# Option 1 — uvx (no install)
uvx cra-compliance-mcp

# Option 2 — pip
pip install cra-compliance-mcp

# Option 3 — npx meok-setup install (recommended)
npx meok-setup --pack governance

What it does

✓Annex I classification (Class I / Class II / important)
✓SBOM in CycloneDX 1.6 format
✓Vulnerability handling process
✓Conformity assessment routing

Claude Desktop config

{
  "mcpServers": {
    "cra-compliance": {
      "command": "uvx",
      "args": ["cra-compliance-mcp"]
    }
  }
}

Frequent questions

Can I install + test without a card?

Yes. Run uvx cra-compliance-mcp — the MCP server starts locally, no signup, no card. The £29/mo only buys signed attestations + managed hosting + email support. You can use the open-source version forever.

What does the £29/mo Starter actually unlock?

(1) HMAC-signed attestation API — tamper-evident JSON your auditor accepts as DORA / EU AI Act / ISO 42001 evidence. (2) Hosted endpoint at api.meok.ai — no infra. (3) Email support < 48h. (4) Unlimited audits in your trial. Cancel any time inside Stripe.

Is the 14-day trial really free?

Yes. Card required to start; £0 charged for 14 days. Cancel inside the trial = never billed. Use code FREE14 at checkout for an additional first month free after the trial.

Who actually built this? Will it still be here in a year?

MEOK AI Labs — a UK Ltd run by Nicholas Templeman. The MCP code is MIT — even if MEOK disappeared tomorrow, you keep using it forever via PyPI / GitHub. The paid layer is the only thing tied to our infrastructure.

Where does my data go?

Self-hosted: data never leaves your machine. Managed: we sign attestation hashes (not your data) and store nothing else. GDPR + UK DPA 2018 compliant. Full data export + delete on request.

Part of the MEOK compliance MCP suite — see all 39 servers

MIT licensed · HMAC-signed attestations · Built by MEOK AI Labs · UK Ltd 16939677

CSOAI

Initializing...