Verification is free and public: signed measurement cards and live verification at https://councilof.ai — measurement, not certification.

Dora Compliance MCP

DORA (Regulation EU 2022/2554) compliance MCP for financial entities

DORA (Regulation EU 2022/2554) compliance MCP for financial entities. ICT risk, incident classification, reporting workflows. MIT

🚀 Quick Start

# Install via pip
pip install dora_compliance_mcp

# Or install via Smithery
npx -y @smithery/cli@latest install dora-compliance-mcp --client claude

⚡ Pay-per-call (PAYG) — no subscription

This MCP supports universal pay-per-call billing across the MEOK compliance fleet:

# One-time setup
export MEOK_PAYG_KEY="your_topup_token"

# Every tool call now deducts £0.05 from your balance.
# When balance hits zero, the tool returns a top-up URL.
# Works across all 7 MEOK compliance MCPs with the same token.

No subscription — top up once, deduct per call.
£0.05/call default (configurable via MEOK_PAYG_RATE_GBP).
USDC on Base L2 accepted — set MEOK_X402_RECEIVER and pay via stablecoin.
Backward-compatible — when MEOK_PAYG_KEY is unset, behaviour is unchanged.

Get a token: councilof.ai/payg (£10 / £50 / £200 top-up tiers).

✨ Features

MCP protocol compliant
Easy installation
Well-documented API
Production-ready
Active maintenance

📖 Documentation

🛡️ Compliance

This MCP server is built with EU AI Act compliance built-in:

✅ Article 9 — Risk Management System
✅ Article 13 — Transparency & Instructions for Use
✅ Article 15 — Bias Detection & Testing
✅ Article 26 — FRIA Support (where applicable)
✅ Article 50 — AI Content Watermarking (where applicable)

Need help getting compliant? Book a free 15-min diagnostic →

🏢 Enterprise

Need custom development, SLA guarantees, or white-label deployment?

View Pricing → | Contact Sales →

🤝 Part of the MEOK Ecosystem

This server is part of the Council of AI ecosystem — 26 PyPI packages · ~public measurement tools.

Domain	Purpose
councilof.ai	EU AI Act compliance marketplace
safetyof.ai	AI safety & monitoring
councilof.ai	Sovereign AI platform
cobolbridge.ai	Legacy modernization

📜 License

MIT © CSOAI-ORG

_{Built with 💜 by Council of AI · UK Companies House 16939677}

Configuration

Add to your claude_desktop_config.json (Claude Desktop) or your MCP client config:

{
  "mcpServers": {
    "dora-compliance-mcp": {
      "command": "uvx",
      "args": ["dora-compliance-mcp"]
    }
  }
}

Or: pip install dora-compliance-mcp then run the dora-compliance-mcp command (stdio transport).

Examples

Once configured, ask your assistant, for example:

"Use classify_entity to …"
"Use list_pillars to …"
"Use audit_pillar to …"

Metadata

Release files for dora-compliance-mcp 1.4.17

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Built distribution (wheel)

Table of built distributions (wheels) for dora-compliance-mcp 1.4.17
File	Interpreter	ABI	Platform	Reset
dora_compliance_mcp-1.4.17-py3-none-any.whl 27.3 kB Sep 13, 2026 Without provenance	Python 3	none	any	Details

Release files / dora_compliance_mcp-1.4.17-py3-none-any.whl

Download URL	dora_compliance_mcp-1.4.17-py3-none-any.whl
Size	27.3 kB
Tags	Python 3
SHA-256 checksum How to use checksums	`a8291085183286f403853bf5d133adc0afe2b38fbaefb6813c750bc4a462e6bb`
BLAKE2b-256 checksum How to use checksums	`d2ea5ea760f3047a29dafcf96d5c1bb85c92896b34c777b1c29cb9a822f995a7`
Upload date	Sep 13, 2026
Uploaded using Trusted Publishing? What is trusted publishing?	No
Uploaded via	`twine/6.2.0 CPython/3.11.15`

Security for dora-compliance-mcp 1.4.17

Report project as malware

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

No provenance found

None of the files in this release were uploaded with provenance metadata.

A note on package security

PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.

To learn more about protecting yourself from malicious actors, visit our package security documentation.