Spec Driven Development
MCP Server that facilitates spec-driven development workflows, not just Vibe Coding.
Description from the maker (original English)
Check code against secure-coding rules mapped to ISO 27001 and the DPDP Act. Free, no account.
These three are never merged into one score: opinions, measurements and popularity are different things.
We have not written a plain-language summary for this one yet. Below are the facts we read from the registry.
Pick the AI app you use, then copy the settings.
You need
Which app do you use?
Pick your app above. We remember it, so next time the button says “Install in …”.
Works in Claude on the web, desktop and mobile:
https://regulane.com/api/mcpRun this in your terminal
claude mcp add --transport http compliance https://regulane.com/api/mcpPaste into .cursor/mcp.json in your project, or ~/.cursor/mcp.json
{
"mcpServers": {
"compliance": {
"url": "https://regulane.com/api/mcp"
}
}
}Your browser asks to open the app, then the app shows the settings and asks you to confirm. Key values are left empty for you to fill in.
Paste into .vscode/mcp.json in your project
{
"servers": {
"compliance": {
"type": "http",
"url": "https://regulane.com/api/mcp"
}
}
}Your browser asks to open the app, then the app shows the settings and asks you to confirm. Key values are left empty for you to fill in.
ChatGPT connects only to servers on the internet:
https://regulane.com/api/mcpMenu names can differ slightly by plan and over time.
Your choice stays on this device in a cookie; no account needed.
These settings are generated from the maker’s registry entry. If the README says otherwise, follow the README.
We have not read this server’s tool list yet; we check endpoints in rotation.
We check information anyone can see; we have not read the code. Checks that do not apply are left out of the count. · Checked Nov 6, 2026
The registry name was verified against the domain regulane.com (the registry checks domain ownership)
We have not read this repo from GitHub yet
We have not read this repo from GitHub yet
Not checked yet; we check endpoints in rotation
Not checked yet; we check endpoints in rotation
Not checked yet; we read the tool list when we check the endpoint
Compared with every active server in this category in the registry. Stars count only when the publisher owns the repo.
It passed 1 of 1 applicable basic checks. We have not read the code. Before adding a key or token, see what access the server asks for and use a key with only the permissions you need.
The registry does not list a required key, though some servers ask you to sign in on first use.
It runs in the maker’s cloud. Connect over the internet with nothing to install, but what you send passes through the maker’s servers.
The GitHub repo last changed –, and the latest version (1.0.0) reached the registry 11 days ago.
Apps that support MCP, such as Claude Desktop, Claude Code, Cursor and VS Code. It connects by URL, so apps that accept remote MCP servers work too, such as ChatGPT in developer mode.
In the same category: Spec Driven Development, Remote Desktop Commander, Reelsaw
Servers in the same category from other makers, sorted by stars.
Reading a card:★ GitHub starsiThree pillars: reviews · checks · usageiUpdated = latest version published to the registryi
MCP Server that facilitates spec-driven development workflows, not just Vibe Coding.
Remote Desktop Commander: use files, terminal and processes on your own computers from any AI app.
Drive a self-hosted Reelsaw: turn long videos into vertical clips, edit, re-render and export them.
Copied from the maker’s repo as written. PopNx MCP has not reviewed or endorsed it. HTML, images and scripts are removed. Links lead off this site.
A free compliance check inside the coding agent you already use. Your agent checks your code against Regulane's 34 secure-coding rules, each mapped to ISO/IEC 27001:2022 Annex A controls and, for personal data, the DPDP Act 2023, and you get back a scorecard: findings by severity, the controls they affect, and the fix for each.
Regulane never receives your code. Your agent reads it on your machine and reports only file paths, line numbers and one-sentence findings. No account is needed, and a free check is not stored.
More: regulane.com/coding-agents
Ask your agent:
Check this repository with Regulane.
The agent calls get_compliance_rules, reviews the code in scope, then calls report_compliance_check and shows you the scorecard. It can then make the fixes and check again. In Claude Code the skill is also available as /regulane:compliance-check.
This repository is a plugin for Claude, Codex and Cursor, and an extension for Gemini CLI. Each loads the same MCP server, https://regulane.com/api/mcp, and the same skill.
| Agent | Install |
|---|---|
| Claude Code | /plugin marketplace add siddhantmallah/regulane-agent-plugin, then /plugin install regulane@regulane |
| Gemini CLI | gemini extensions install https://github.com/siddhantmallah/regulane-agent-plugin |
| Codex, Cursor, Claude (app) | From each product's plugin directory, once listed |
Or add only the MCP server, with no plugin:
claude mcp add --transport http regulane https://regulane.com/api/mcp
codex mcp add regulane --url https://regulane.com/api/mcp gemini mcp add --transport http regulane https://regulane.com/api/mcp
Setup for VS Code, Cursor, Windsurf and other agents: regulane.com/coding-agents#setup.
| Path | For |
|---|---|
skills/compliance-check/SKILL.md | The skill every agent follows: scope, rules, report, scorecard |
.claude-plugin/ | Claude plugin manifest and Claude Code marketplace |
.codex-plugin/ | Codex plugin manifest |
.cursor-plugin/, mcp.json | Cursor plugin manifest and MCP config |
.mcp.json | MCP config for Claude and Codex |
gemini-extension.json, GEMINI.md | Gemini CLI extension |
server.json | Listing in the official MCP Registry (com.regulane/compliance) |
There is no code to install: only Markdown and JSON pointing at the hosted server.
What your agent sends to regulane.com: the repository name or address (any credentials in it are removed), branch, commit, which agent ran the check, one line describing the scope, the rule ids checked, and for each finding a file path, line number and one sentence. Anything that looks like a secret, an email address, or a card, Aadhaar or PAN number is replaced on arrival. A free check is turned into a scorecard, sent back, and not stored.
Teams can keep every check as audit evidence by connecting a Regulane workspace with an agent token; those checks are kept in the workspace. See the privacy notice, section 4c.
A clean scorecard means your agent checked the code it was given against these rules and found nothing. It is not a certification, an audit opinion or a penetration test, and Regulane does not run or scan your code itself.
support@regulane.com · regulane.com/contact
MIT