MCP Eu AI Act

EU AI Act Compliance Scanner — CLI + MCP Server

One command. Zero config. Full EU AI Act + GDPR compliance report in under 10 seconds.

pip install eu-ai-act-scanner

eu-ai-act-scanner /path/to/your/project

Detects 16 AI frameworks in your codebase, maps each to binding legal articles, returns pass/fail with fix instructions. Free tier, no API key needed.

August 2, 2026 enforcement deadline. Fines up to 35M EUR or 7% global turnover.

If this tool helps your compliance work, a ⭐ on GitHub helps others discover it.

Need audit-grade proof? Certify every scan with ArkForge Trust Layer — tamper-proof, timestamped compliance evidence. 500 free proofs/month.

[Get your compliance report →](https://arkforge.tech/en/pricing.html?utm_source=pypi&utm_medium=readme&utm_campaign=mcp_euaiact)

Quick Start

CLI (scan any project in 10 seconds)

pip install eu-ai-act-scanner   # or: pip install mcp-eu-ai-act

cd your-project/ eu-ai-act-scanner

Output:

========================================================================

EU AI Act Compliance Scanner ========================================================================

Files scanned: 42 AI frameworks detected: 2

• openai (in 3 files)
• langchain (in 1 file)

Risk category: limited Compliance score: 4/7 (57%) Checks: [PASS] Transparency [PASS] User Disclosure [FAIL] Technical Documentation → Create docs/TECHNICAL_DOCUMENTATION.md [FAIL] Risk Management → Create docs/RISK_MANAGEMENT.md [FAIL] Data Governance → Create docs/DATA_GOVERNANCE.md

Or specify a path directly: eu-ai-act-scanner /path/to/your/project

Track compliance over time (free): eu-ai-act-scanner . --register you@email.com

Free vs Pro

Free tier: no sign-up, no API key — just pip install and scan. Pro unlocks the full compliance toolkit your team needs before the August 2027 deadline.

[→ Compare plans & get your API key](https://arkforge.tech/en/pricing.html?utm_source=pypi&utm_medium=readme&utm_campaign=mcp_euaiact)

What's New in v2

MCP Server (from source)

git clone https://github.com/ark-forge/mcp-eu-ai-act.git

cd mcp-eu-ai-act python3 -m venv .venv && source .venv/bin/activate pip install -r requirements.txt python3 server.py

Run tests

pip install pytest

pytest tests/ -v

MCP Integration

Install from PyPI (recommended)

pip install eu-ai-act-scanner

Claude Code

claude mcp add eu-ai-act -- eu-ai-act-mcp

Claude Desktop

Add to claude_desktop_config.json:

{

"mcpServers": { "eu-ai-act": { "command": "eu-ai-act-mcp" } } }

Cursor

Add to .cursor/mcp.json:

{

"mcpServers": { "eu-ai-act": { "command": "eu-ai-act-mcp" } } }

HTTP mode (for CI/CD or remote clients)

pip install uvicorn

python3 server.py --http

Listening on 0.0.0.0:8089

Tools Reference

1. scan_project

Detects AI framework usage in source code and config/manifest files. Supports 16 frameworks across Python, JS, TS, Go, Java, and Rust.

Key parameters: project_path (string, required)

Example output:

{

"files_scanned": 42, "ai_files": [ {"file": "src/chat.py", "frameworks": ["openai"]}, {"file": "requirements.txt", "frameworks": ["openai"], "source": "config"} ], "detected_models": {"openai": ["src/chat.py", "requirements.txt"]} }

---

2. check_compliance

Scores document *content* quality (0-100) and maps each finding to a specific EU AI Act article. Score ≥40 = pass. Fully backward compatible with v1.

Key parameters: project_path (string, required), risk_category (string, default: limited)

Example output (v2):

{

"risk_category": "high", "compliance_score": "4/6", "compliance_percentage": 66.7, "content_scores": { "RISK_MANAGEMENT.md": 82, "TRANSPARENCY.md": 45, "DATA_GOVERNANCE.md": 12 }, "article_map": { "art_9": {"status": "pass", "score": 82}, "art_10": {"status": "fail", "score": 12}, "art_13": {"status": "pass", "score": 45} } }

---

3. generate_compliance_roadmap — NEW in v2

Deadline-aware, week-by-week action plan to reach EU AI Act compliance before August 2, 2026. Sequences quick wins first using a criticality × 1/effort algorithm.

Key parameters: project_path (string, required), risk_category (string), target_date (string, ISO format, default: 2027-08-02)

Example output:

{

"weeks_remaining": 16, "phases": [ { "week": 1, "action": "Add TRANSPARENCY.md with user disclosure statement", "article": "Art. 13", "effort_days": 1, "priority": "critical" }, { "week": 2, "action": "Draft risk management procedure covering Art. 9 requirements", "article": "Art. 9", "effort_days": 3, "priority": "high" } ], "estimated_completion_week": 8 }

---

4. generate_report

Runs scan + compliance check, returns a combined report with two-level output: executive summary for DPO/legal and technical breakdown for developers. Article-by-article citations included.

Key parameters: project_path (string, required), risk_category (string, default: limited)

Example output:

{

"executive_summary": { "compliance_percentage": 67, "deadline": "2027-08-02", "days_remaining": 117, "gap_count": 3, "verdict": "Action required — 3 gaps must be addressed before deadline" }, "technical_breakdown": { "art_9": {"status": "fail", "missing": ["hazard identification section", "residual risk log"]}, "art_13": {"status": "pass", "score": 78} }, "recommendations": [ {"article": "Art. 9", "action": "Add hazard identification section to RISK_MANAGEMENT.md", "effort": "2 days"} ] }

---

5. suggest_risk_category

Classifies your AI system into an EU AI Act risk category from a plain-text description. Matches against Art. 5 (prohibited), Annex III (high-risk), Art. 52 (limited), and minimal.

Key parameters: system_description (string, required)

Example output:

{

"suggested_category": "high", "confidence": "high", "matched_criteria": ["Annex III, Category 4 — AI in employment decisions"], "obligations_summary": "Technical documentation, risk management, human oversight, data governance, transparency" }

---

6. generate_compliance_templates

Returns starter markdown templates for each required compliance document. Save them in docs/ and fill in the bracketed sections.

Key parameters: risk_category (string, default: high)

For high risk: Risk Management (Art. 9), Technical Documentation (Art. 11), Data Governance (Art. 10), Human Oversight (Art. 14), Robustness (Art. 15), Transparency (Art. 13).

---

7. generate_annex4_package — NEW in v2

Generates an auditor-ready ZIP with all 8 Annex IV sections populated from your actual project files. Optionally certifies with Trust Layer for cryptographic proof.

Key parameters: project_path (string, required), sign_with_trust_layer (bool, default: false), trust_layer_key (string, optional)

Example output:

{

"package_path": "/tmp/annex4_myproject_20260407.zip", "sha256": "a3f8c2d1...", "sections_populated": 8, "sections_missing_data": ["section_6_accuracy_metrics"], "proof_id": "prf_01j9z8x7w6v5u4t3s2r1", "verification_url": "https://trust.arkforge.tech/verify/prf_01j9z8x7w6v5u4t3s2r1" }

---

8. certify_compliance_report — NEW in v2

Certifies any compliance report with ArkForge Trust Layer. Returns a tamper-proof proof_id and public verification URL for your auditor (EU AI Act Art. 12 audit trail).

Key parameters: report_data (string, JSON-serialized report), trust_layer_key (string, required)

Example output:

{

"proof_id": "prf_01j9z8x7w6v5u4t3s2r1", "timestamp": "2026-04-07T14:32:00Z", "sha256": "a3f8c2d1e4b5...", "verification_url": "https://trust.arkforge.tech/verify/prf_01j9z8x7w6v5u4t3s2r1", "article": "EU AI Act Art. 12" }

---

9. gdpr_scan_project

Scans for personal data processing patterns: PII fields, tracking pixels, geolocation, file uploads, cookie patterns. Maps to GDPR Art. 22/35 requirements.

Key parameters: project_path (string, required)

---

10. combined_compliance_report

Runs GDPR + EU AI Act scans simultaneously and identifies dual-compliance hotspots — files where both regulations apply at once.

Key parameters: project_path (string, required), risk_category (string, default: limited)

Example output:

{

"hotspots": [ { "file": "src/hiring_model.py", "eu_ai_act_risk": "high", "gdpr_risk": "high", "overlap_patterns": ["AI+PII", "AI+automated_decision"], "combined_articles": ["EU AI Act Art. 14", "GDPR Art. 22"], "priority": "critical" } ], "key_insight": "2 files require simultaneous GDPR + EU AI Act remediation" }

---

Certify Your Compliance (EU AI Act Art. 12)

The only MCP that generates cryptographically certified compliance evidence.

# Step 1: Generate Annex IV package and certify it

generate_annex4_package( project_path="/path/to/project", sign_with_trust_layer=True, trust_layer_key="your_trust_layer_key" )

→ Returns proof_id + public verification URL for your auditor

Step 2: Or certify any compliance report directly

certify_compliance_report( report_data='{"compliance_percentage": 87, "risk_category": "high"}', trust_layer_key="your_trust_layer_key" )

Free Trust Layer account: 500 certified proofs/month → [ar