@conformy/mcp-server

@conformy/mcp-server

MCP server for EU regulatory compliance. Classify AI systems under the EU AI Act, check NIS2 cybersecurity obligations, and generate compliance documentation — all from your AI assistant.

Tools

EU AI Act

Tool	Description
classify_ai_system	Classify an AI system by risk level (prohibited, high, limited, minimal) with Annex III category mapping
check_deadline	EU AI Act enforcement timeline — days remaining until each deadline
get_requirements	Quick lookup of required documents by risk level and role
list_annex_iii_categories	Reference list of all Annex III high-risk categories
generate_document_section	AI-powered compliance document section generation

NIS2 Directive

Tool	Description
classify_nis2_entity	Classify an organization as essential, important, or not in scope based on sector and size
list_nis2_sectors	All Annex I and Annex II sectors with size thresholds
check_nis2_obligations	Article 21 measures, Article 23 incident reporting timelines, supervision details

Setup

Claude Desktop

Add to your claude_desktop_config.json:

{
  "mcpServers": {
    "conformy": {
      "command": "npx",
      "args": ["-y", "@conformy/mcp-server"]
    }
  }
}

With API key (for document generation)

{
  "mcpServers": {
    "conformy": {
      "command": "npx",
      "args": ["-y", "@conformy/mcp-server"],
      "env": {
        "CONFORMY_API_KEY": "your-api-key"
      }
    }
  }
}

Self-hosted API

{
  "mcpServers": {
    "conformy": {
      "command": "npx",
      "args": ["-y", "@conformy/mcp-server"],
      "env": {
        "CONFORMY_API_URL": "http://localhost:5202"
      }
    }
  }
}

Environment variables

Variable	Default	Description
CONFORMY_API_URL	https://api.conformy.io	Conformy API base URL
CONFORMY_API_KEY	—	API key for authenticated endpoints (document generation)

Example usage

"Classify our facial recognition system used for employee access control"

"Is our energy company subject to NIS2? We have 300 employees and €80M turnover"

"What are the NIS2 incident reporting deadlines?"

"How many days until the EU AI Act high-risk deadline?"

License

MIT