
Research
/Security News
CanisterWorm: npm Publisher Compromise Deploys Backdoor Across 29+ Packages
The worm-enabled campaign hit @emilgroup and @teale.io, then used an ICP canister to deliver follow-on payloads.
ai-reg-mcp-server
Advanced tools
Structured, queryable US AI and privacy law data via MCP (thin client)
Structured, queryable US AI and privacy law data via Model Context Protocol (MCP).
AI Regulations MCP (ai-reg-mcp) is an MCP server that provides Claude (and other MCP clients) with instant access to structured data about US AI regulations, privacy laws, and compliance requirements. No more searching through PDFs or legal websites — get precise regulatory information through natural language queries.
Visit ai-reg-api.vercel.app and sign in with GitHub. You'll get an API key instantly.
Add to your Claude Desktop config (claude_desktop_config.json):
macOS: ~/Library/Application Support/Claude/claude_desktop_config.json
Windows: %APPDATA%\Claude\claude_desktop_config.json
{
"mcpServers": {
"ai-reg-mcp": {
"command": "npx",
"args": ["-y", "ai-reg-mcp-server"],
"env": {
"AI_REG_API_KEY": "aireg_live_your_key_here"
}
}
}
}
You should see the MCP server connected. Now ask Claude about AI regulations.
Once connected, you can ask Claude questions like:
search_lawsSearch for laws by jurisdiction, keyword, status, or effective date.
get_obligationsGet detailed compliance obligations from specific laws.
compare_jurisdictionsCompare requirements across multiple jurisdictions.
get_changesView regulatory changes over time.
Tier 1 Laws
Tier 2 Laws
| Environment Variable | Required | Default | Description |
|---|---|---|---|
AI_REG_API_KEY | Yes | — | Your API key from ai-reg-api.vercel.app |
AI_REG_API_URL | No | https://ai-reg-api.vercel.app | API base URL (for self-hosting) |
All data is:
v0.2.0 is a thin client — no data is bundled in the package. All law data is served from a private API, keeping intellectual property protected while keeping the MCP interface identical.
Claude Desktop → MCP Server (this package) → AI-Reg API (private) → Turso DB
git clone https://github.com/Fractionalytics/ai-reg-mcp.git
cd ai-reg-mcp
npm install
npm test
npm run build
v0.2.0 requires an API key. If you were using v0.1.0:
env block to your Claude Desktop config (see Quick Start above)The MCP tool interface is unchanged — all your existing prompts will work the same.
MIT License — see LICENSE for details
This software provides reference information about AI regulations and should not be considered legal advice. For compliance questions, consult with a qualified attorney familiar with your specific situation and jurisdiction.
FAQs
Structured, queryable US AI and privacy law data via MCP (thin client)
We found that ai-reg-mcp-server demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
The worm-enabled campaign hit @emilgroup and @teale.io, then used an ICP canister to deliver follow-on payloads.

Research
/Security News
Attackers compromised Trivy GitHub Actions by force-updating tags to deliver malware, exposing CI/CD secrets across affected pipelines.

Security News
ENISA’s new package manager advisory outlines the dependency security practices companies will need to demonstrate as the EU’s Cyber Resilience Act begins enforcing software supply chain requirements.