Documentation

Ongoing operations

Compliance-as-Code with the MCP Server

The Model Context Protocol (MCP) server lets you ask AI coding assistants questions about your compliance posture without leaving your IDE. Check system risk, review security findings, or get a compliance summary using natural language.

Transcript

EuroCompliant includes a native Model Context Protocol server. That means you can ask Cursor, Claude Desktop, or any MCP-compatible tool questions about your compliance posture in natural language, without leaving your IDE.

To connect, you need an API key from the Security page and your connection URL. Paste both into your MCP client configuration and you are ready to start querying.

Ask about your compliance posture. The get system compliance status tool returns risk classifications, checklist progress, and framework scores for any AI system in your inventory.

Ask about security findings. The list open security findings tool returns scan results filtered by severity and framework, so you can ask things like: are there any critical GDPR findings?

Ask about Shadow AI. The check shadow AI status tool shows which systems were discovered by automated scans versus manually registered, giving you visibility into untracked AI usage.

The compliance summary resource gives you a high-level JSON snapshot: active frameworks, your overall compliance score, urgent findings, and pending obligations. Subscribe to it for continuous monitoring.

MCP access is included with the Business plan and above. If you are on Free or Starter, you will see an upgrade prompt in the Security page. All queries are read-only and scoped to your organisation.

Why this is required

Developers spend less time context-switching between their IDE and the compliance dashboard. An MCP integration means compliance checks happen in the same workflow where code is written, reviewed, and shipped.

For engineering-led organisations on the Business plan and above, this makes compliance a native part of the development process rather than a separate administrative task.

What EuroCompliant does

The MCP server exposes three read-only tools and one resource over SSE transport. All queries are authenticated via API key and scoped to your organisation's data.

The get system compliance status tool returns risk classifications, checklist progress, and framework scores for any AI system in your inventory. You can filter by system name.

The list open security findings tool returns scan results filtered by severity (high, critical) and framework (GDPR, EU AI Act, DORA, ISO 27001, CRA).

The check shadow AI status tool shows which systems were discovered by automated scans versus manually registered, giving you visibility into untracked AI usage.

The compliance summary resource provides a high-level JSON snapshot: active frameworks, compliance score, urgent findings, and pending obligations.

Walking through it

1

Generate an API key

Go to Security, generate an API key with read permissions. You will need this key to authenticate MCP requests.

Open /security#api-keys →
2

Configure your MCP client

Add the connection URL and your API key to your Claude Desktop or Cursor configuration. The connection URL is shown in the Security page under AI and IDE Integrations.

Open /security#api-keys →
3

Start querying

Ask your AI assistant about compliance. Try: What is our overall compliance score? Are there any critical GDPR findings? Which systems were discovered by Shadow AI scans?

Open /security#api-keys →

The law

Frequently asked

Which MCP clients are supported?

Any client that supports SSE transport and the Model Context Protocol, including Claude Desktop, Cursor, and VS Code with MCP extensions.

Is MCP access available on all plans?

No. MCP access is included with the Business plan (899 EUR/mo) and above. Free and Starter plans see an upgrade prompt.

Can MCP tools modify my data?

No. All MCP tools are read-only. They query your compliance data but cannot create, update, or delete anything.

Related guides

Try it on your own systems

Everything in this guide runs in the live product. Start a free trial and follow along with your own data.

Start free trial