
Security News
Open VSX Unblocks Extension IDs Used in Malware Campaign
Open VSX has removed three extension IDs from its malicious-extension list as the legitimate publishers they impersonated move to claim the names for themselves.
dora-compliance-mcp
Advanced tools
DORA (EU Digital Operational Resilience Act) compliance for AI agents. 5-pillar audit, incident classification, Article 28 Register of Information, TLPT readiness. Regulation (EU) 2022/2554. By MEOK AI Labs.
🔏 Free tier: 50 calls/day. Need audit-ready proof?
Pro (£199/mo) turns every result into an HMAC-signed attestation with a public verify URL your auditor validates without an account — EU AI Act Art 11/12 ready. → Start: https://proofof.ai ·
pip install meok-attestation-verifyto verify any cert.
The 7 May 2026 EU Digital Omnibus Act political agreement delayed Annex III high-risk AI provisions by 16 months.
| Deadline | Days | What |
|---|---|---|
| 2 Aug 2026 | 36 days | Article 50 transparency + watermarking — NOT DELAYED |
| 2 Dec 2027 | 523 days | Annex III high-risk — DELAYED 16 months |
| 2 Aug 2028 | 767 days | Annex I product-safety — DELAYED 12 months |
Penalties unchanged: EUR 35M or 7% turnover (prohibited), EUR 15M or 3% (other violations).
CSOAI-ORG is the ONLY compliance vendor with the Omnibus delay built into the tooling. Every other vendor still says "37 days to cliff". Our MCPs return "36 days for Art 50, 523 days for Annex III".
DORA (Regulation EU 2022/2554) compliance MCP for financial entities
DORA (Regulation EU 2022/2554) compliance MCP for financial entities. ICT risk, incident classification, reporting workflows. MIT
# Install via pip
pip install dora_compliance_mcp
# Or install via Smithery
npx -y @smithery/cli@latest install dora-compliance-mcp --client claude
This MCP supports universal pay-per-call billing across the MEOK compliance fleet:
# One-time setup
export MEOK_PAYG_KEY="your_topup_token"
# Every tool call now deducts £0.05 from your balance.
# When balance hits zero, the tool returns a top-up URL.
# Works across all 7 MEOK compliance MCPs with the same token.
MEOK_PAYG_RATE_GBP).MEOK_X402_RECEIVER and pay via stablecoin.MEOK_PAYG_KEY is unset, behaviour is unchanged.Get a token: councilof.ai/payg (£10 / £50 / £200 top-up tiers).
This MCP server is built with EU AI Act compliance built-in:
Need help getting compliant? Book a free 15-min diagnostic →
Need custom development, SLA guarantees, or white-label deployment?
View Pricing → | Contact Sales →
This server is part of the MEOK AI Labs ecosystem — 26 PyPI packages · ~16,300 monthly installs.
| Domain | Purpose |
|---|---|
| councilof.ai | EU AI Act compliance marketplace |
| safetyof.ai | AI safety & monitoring |
| meok.ai | Sovereign AI platform |
| cobolbridge.ai | Legacy modernization |
MIT © CSOAI-ORG
Built with 💜 by MEOK AI Labs · UK Companies House 16939677
Add to your claude_desktop_config.json (Claude Desktop) or your MCP client config:
{
"mcpServers": {
"dora-compliance-mcp": {
"command": "uvx",
"args": ["dora-compliance-mcp"]
}
}
}
Or: pip install dora-compliance-mcp then run the dora-compliance-mcp command (stdio transport).
Once configured, ask your assistant, for example:
classify_entity to …"list_pillars to …"audit_pillar to …"FAQs
DORA (EU Digital Operational Resilience Act) compliance for AI agents. 5-pillar audit, incident classification, Article 28 Register of Information, TLPT readiness. Regulation (EU) 2022/2554. By MEOK AI Labs.
We found that dora-compliance-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Open VSX has removed three extension IDs from its malicious-extension list as the legitimate publishers they impersonated move to claim the names for themselves.

Product
Socket’s PHP and Composer support is now in Beta for all customers, with PHP reachability analysis generally available.

Product
Socket is bringing experimental protection to Firefox, scanning 97,000+ extensions in Mozilla's official directory for malware and risky updates.