CSRD Compliance MCP
This server provides tools to assess and manage EU Corporate Sustainability Reporting Directive (CSRD) compliance, covering entity classification, ESRS standards, double materiality, and reporting readiness.
classify_entity: Determine when a company must first report under CSRD based on employee count, turnover, balance sheet size, listed status, and public interest entity designation — returns the first reporting fiscal year and required ESRS standards.list_esrs_standards: Retrieve a full list of all 14 European Sustainability Reporting Standards (12 topical + 2 cross-cutting).double_materiality_assessment: Run a heuristic assessment covering both impact materiality (effects on people/planet) and financial materiality (effects on the entity), based on a business description and stakeholder concerns — returns which ESRS standards are material.ghg_emissions_readiness: Check readiness for ESRS E1 (Climate) Scope 1, 2, and 3 greenhouse gas emissions reporting, including methodology validation (e.g., GHG Protocol).ixbrl_taxonomy_check: Assess readiness for mandatory iXBRL digital tagging of sustainability statements under CSRD Article 29d and the ESEF taxonomy extension.enforcement_status: Get the current CSRD phase-in schedule and EU Member State transposition status to understand applicable deadlines.
Csrd Compliance MCP
EU Corporate Sustainability Reporting Directive (CSRD) compliance MCP — double materiality, ESRS ...
EU Corporate Sustainability Reporting Directive (CSRD) compliance MCP — double materiality, ESRS reporting, sustainability audit. Phased FY 2024-2028.
🚀 Quick Start
# Install via pip
pip install csrd_compliance_mcp
# Or install via Smithery
npx -y @smithery/cli@latest install csrd-compliance-mcp --client claudeRelated MCP server: ISO 42001 AI MCP
⚡ Pay-per-call (PAYG) — no subscription
This MCP supports universal pay-per-call billing across the MEOK compliance fleet:
# One-time setup
export MEOK_PAYG_KEY="your_topup_token"
# Every tool call now deducts £0.05 from your balance.
# When balance hits zero, the tool returns a top-up URL.
# Works across all 7 MEOK compliance MCPs with the same token.No subscription — top up once, deduct per call.
£0.05/call default (configurable via
MEOK_PAYG_RATE_GBP).USDC on Base L2 accepted — set
MEOK_X402_RECEIVERand pay via stablecoin.Backward-compatible — when
MEOK_PAYG_KEYis unset, behaviour is unchanged.
Get a token: councilof.ai/payg (£10 / £50 / £200 top-up tiers).
✨ Features
MCP protocol compliant
Easy installation
Well-documented API
Production-ready
Active maintenance
📖 Documentation
🛡️ Compliance
This MCP server is built with EU AI Act compliance built-in:
✅ Article 9 — Risk Management System
✅ Article 13 — Transparency & Instructions for Use
✅ Article 15 — Bias Detection & Testing
✅ Article 26 — FRIA Support (where applicable)
✅ Article 50 — AI Content Watermarking (where applicable)
Need help getting compliant? Book a free 15-min diagnostic →
🏢 Enterprise
Need custom development, SLA guarantees, or white-label deployment?
Pro: £79/mo — Full MCP suite + EU AI Act tracking
Enterprise: £499/mo — Custom dev + SLA + Dedicated support
View Pricing → | Contact Sales →
🤝 Part of the MEOK Ecosystem
This server is part of the MEOK AI Labs ecosystem — 26 PyPI packages · ~16,300 monthly installs.
Domain | Purpose |
EU AI Act compliance marketplace | |
AI safety & monitoring | |
Sovereign AI platform | |
Legacy modernization |
📜 License
MIT © CSOAI-ORG
Configuration
Add to your claude_desktop_config.json (Claude Desktop) or your MCP client config:
{
"mcpServers": {
"csrd-compliance-mcp": {
"command": "uvx",
"args": ["csrd-compliance-mcp"]
}
}
}Or: pip install csrd-compliance-mcp then run the csrd-compliance-mcp command (stdio transport).
Examples
Once configured, ask your assistant, for example:
"Use
classify_entityto …""Use
list_esrs_standardsto …""Use
double_materiality_assessmentto …"
Available Tools
6 toolsclassify_entityA
Classify when the entity must first report under CSRD. Returns first reporting FY, report year, and ESRS standards required.
Behavior: This tool is read-only and stateless — it produces analysis output without modifying any external systems, databases, or files. Safe to call repeatedly with identical inputs (idempotent). Free tier: 10/day rate limit. Pro tier: unlimited. No authentication required for basic usage.
When to use: Use this tool when you need to assess, audit, or verify compliance requirements. Ideal for gap analysis, readiness checks, and generating compliance documentation.
When NOT to use: Do not use as a substitute for qualified legal counsel. This tool provides technical compliance guidance, not legal advice.
Args: employees (int): The employees to analyze or process. turnover_million_eur (float): The turnover million eur to analyze or process. balance_sheet_million_eur (float): The balance sheet million eur to analyze or process. listed (bool): The listed to analyze or process. public_interest_entity (bool): The public interest entity to analyze or process. api_key (str): The api key to analyze or process.
Behavioral Transparency: - Side Effects: This tool is read-only and produces no side effects. It does not modify any external state, databases, or files. All output is computed in-memory and returned directly to the caller. - Authentication: No authentication required for basic usage. Pro/Enterprise tiers require a valid MEOK API key passed via the MEOK_API_KEY environment variable. - Rate Limits: Free tier: 10 calls/day. Pro tier: unlimited. Rate limit headers are included in responses (X-RateLimit-Remaining, X-RateLimit-Reset). - Error Handling: Returns structured error objects with 'error' key on failure. Never raises unhandled exceptions. Invalid inputs return descriptive validation errors. - Idempotency: Fully idempotent — calling with the same inputs always produces the same output. Safe to retry on timeout or transient failure. - Data Privacy: No input data is stored, logged, or transmitted to external services. All processing happens locally within the MCP server process.
| Name | Required | Description | Default |
|---|---|---|---|
| employees | Yes | ||
| turnover_million_eur | Yes | ||
| balance_sheet_million_eur | No | ||
| listed | No | ||
| public_interest_entity | No | ||
| api_key | No |
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description fully covers behavioral aspects: it declares read-only, stateless, idempotent, no side effects, authentication requirements (free vs. pro), rate limits (10/day free), error handling (structured errors), and data privacy. This is exceptionally thorough and goes well beyond basic expectations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is well-structured with clear sections (Behaviors, When to use, Args, Behavioral Transparency). It is front-loaded with the core purpose. However, there is some repetition (e.g., 'Behavior' and 'Behavioral Transparency' overlap) and the Args section could be omitted if schema descriptions were sufficient.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool has 6 parameters and no output schema shown, the description provides adequate context: it explains the return values (first reporting FY, report year, ESRS standards), behavioral transparency, usage guidelines. Missing elements include differentiation from sibling tools and more concrete parameter semantics, but overall it is fairly complete.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 0% (no descriptions in schema), so the description must compensate. The Args section provides one-line descriptions for each parameter, but they are vague and uninformative (e.g., 'The employees to analyze or process' for all parameters). No clarification on how values affect classification or constraints, leaving significant gaps.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool's purpose: 'Classify when the entity must first report under CSRD.' It specifies the verb 'classify' and the resource 'when the entity must first report under CSRD', and mentions the outputs (first reporting FY, report year, ESRS standards). This clearly distinguishes it from sibling tools like double_materiality_assessment or ghg_emissions_readiness.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description includes explicit 'When to use' and 'When NOT to use' sections, providing clear guidance on appropriate contexts (e.g., gap analysis, readiness checks) and explicitly warns against using as legal advice. However, it does not mention alternative tools from the same server for similar tasks, which would further enhance guidance.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
double_materiality_assessmentA
Run a heuristic double materiality assessment. Double materiality = (a) impact on people/planet AND (b) financial impact on the entity. Returns material ESRS standards to report on.
Behavior: This tool is read-only and stateless — it produces analysis output without modifying any external systems, databases, or files. Safe to call repeatedly with identical inputs (idempotent). Free tier: 10/day rate limit. Pro tier: unlimited. No authentication required for basic usage.
When to use: Use this tool when you need to assess, audit, or verify compliance requirements. Ideal for gap analysis, readiness checks, and generating compliance documentation.
When NOT to use: Do not use as a substitute for qualified legal counsel. This tool provides technical compliance guidance, not legal advice.
Args: business_description (str): The business description to analyze or process. stakeholder_concerns (str): The stakeholder concerns to analyze or process. api_key (str): The api key to analyze or process.
Behavioral Transparency: - Side Effects: This tool is read-only and produces no side effects. It does not modify any external state, databases, or files. All output is computed in-memory and returned directly to the caller. - Authentication: No authentication required for basic usage. Pro/Enterprise tiers require a valid MEOK API key passed via the MEOK_API_KEY environment variable. - Rate Limits: Free tier: 10 calls/day. Pro tier: unlimited. Rate limit headers are included in responses (X-RateLimit-Remaining, X-RateLimit-Reset). - Error Handling: Returns structured error objects with 'error' key on failure. Never raises unhandled exceptions. Invalid inputs return descriptive validation errors. - Idempotency: Fully idempotent — calling with the same inputs always produces the same output. Safe to retry on timeout or transient failure. - Data Privacy: No input data is stored, logged, or transmitted to external services. All processing happens locally within the MCP server process.
| Name | Required | Description | Default |
|---|---|---|---|
| business_description | Yes | ||
| stakeholder_concerns | No | ||
| api_key | No |
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Provides a comprehensive 'Behavioral Transparency' section covering side effects (read-only, stateless), authentication, rate limits, error handling, idempotency, and data privacy. No annotations provided, so description carries full burden and meets it excellently.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is well-structured with clear sections, and the first sentence immediately states the purpose. However, it is somewhat lengthy; some behavioral details could be condensed without losing value.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Output schema exists, so return values are covered. Behavioral transparency is thorough. However, parameter semantics are weak (0% schema coverage, no compensation in description), leaving gaps for the agent to understand inputs. Overall moderate completeness.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 0%, but the description's Args section merely repeats parameter names with generic phrases (e.g., 'The business description to analyze or process'), adding no meaningful detail about expected content, formats, or examples. The overall description is verbose but fails to clarify parameter semantics.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool performs a heuristic double materiality assessment, defining double materiality as impact on people/planet AND financial impact, and returns material ESRS standards. It is distinct from sibling tools like classify_entity or enforcement_status.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Includes explicit 'When to use' (compliance assessment, gap analysis) and 'When NOT to use' (not legal counsel) sections, providing clear guidance on appropriate contexts.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
enforcement_statusA
Current CSRD enforcement phase-in schedule + Member State transposition status.
Behavior: This tool is read-only and stateless — it produces analysis output without modifying any external systems, databases, or files. Safe to call repeatedly with identical inputs (idempotent). Free tier: 10/day rate limit. Pro tier: unlimited. No authentication required for basic usage.
When to use: Use this tool when you need to assess, audit, or verify compliance requirements. Ideal for gap analysis, readiness checks, and generating compliance documentation.
When NOT to use: Do not use as a substitute for qualified legal counsel. This tool provides technical compliance guidance, not legal advice.
Args: api_key (str): The api key to analyze or process.
Behavioral Transparency: - Side Effects: This tool is read-only and produces no side effects. It does not modify any external state, databases, or files. All output is computed in-memory and returned directly to the caller. - Authentication: No authentication required for basic usage. Pro/Enterprise tiers require a valid MEOK API key passed via the MEOK_API_KEY environment variable. - Rate Limits: Free tier: 10 calls/day. Pro tier: unlimited. Rate limit headers are included in responses (X-RateLimit-Remaining, X-RateLimit-Reset). - Error Handling: Returns structured error objects with 'error' key on failure. Never raises unhandled exceptions. Invalid inputs return descriptive validation errors. - Idempotency: Fully idempotent — calling with the same inputs always produces the same output. Safe to retry on timeout or transient failure. - Data Privacy: No input data is stored, logged, or transmitted to external services. All processing happens locally within the MCP server process.
| Name | Required | Description | Default |
|---|---|---|---|
| api_key | No |
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Since no annotations are provided, the description carries the full burden. It thoroughly discloses read-only, stateless, idempotent behavior, rate limits, authentication needs, error handling, and data privacy practices—far exceeding typical annotation coverage.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is well-organized with sections, but there is redundancy between the 'Behavior' and 'Behavioral Transparency' sections, which repeat several points. The 'Args' section is brief. Overall, it is reasonably concise but could be tightened.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The description covers purpose, usage, behavior, and most operational details. The output schema exists but is not shown; description does not explain return values, but that is acceptable per rules. The main gap is the weak parameter documentation, which slightly detracts from completeness.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema has 0% description coverage, so the description must compensate. The only parameter, api_key, is described as 'The api key to analyze or process,' which is vague. Behavioral transparency mentions it for pro tiers, but the parameter description itself lacks detail on purpose, format, or impact.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description starts with a clear, specific statement: 'Current CSRD enforcement phase-in schedule + Member State transposition status.' This distinguishes it from sibling tools like classify_entity or double_materiality_assessment, which cover different compliance aspects.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description includes explicit 'When to use' and 'When NOT to use' sections, providing context for compliance assessment and explicitly warning against substituting legal counsel. However, it does not directly compare with sibling tools, leaving the agent to infer when to choose this one over alternatives.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
ghg_emissions_readinessA
Check ESRS E1 (Climate) Scope 1/2/3 emissions readiness. scopes_tracked: comma-separated list (e.g. 'scope 1, scope 2 location-based, scope 2 market-based'). methodology: e.g. 'GHG Protocol'.
Behavior: This tool is read-only and stateless — it produces analysis output without modifying any external systems, databases, or files. Safe to call repeatedly with identical inputs (idempotent). Free tier: 10/day rate limit. Pro tier: unlimited. No authentication required for basic usage.
When to use: Use this tool when you need to assess, audit, or verify compliance requirements. Ideal for gap analysis, readiness checks, and generating compliance documentation.
When NOT to use: Do not use as a substitute for qualified legal counsel. This tool provides technical compliance guidance, not legal advice.
Args: scopes_tracked (str): The scopes tracked to analyze or process. methodology (str): The methodology to analyze or process. api_key (str): The api key to analyze or process.
Behavioral Transparency: - Side Effects: This tool is read-only and produces no side effects. It does not modify any external state, databases, or files. All output is computed in-memory and returned directly to the caller. - Authentication: No authentication required for basic usage. Pro/Enterprise tiers require a valid MEOK API key passed via the MEOK_API_KEY environment variable. - Rate Limits: Free tier: 10 calls/day. Pro tier: unlimited. Rate limit headers are included in responses (X-RateLimit-Remaining, X-RateLimit-Reset). - Error Handling: Returns structured error objects with 'error' key on failure. Never raises unhandled exceptions. Invalid inputs return descriptive validation errors. - Idempotency: Fully idempotent — calling with the same inputs always produces the same output. Safe to retry on timeout or transient failure. - Data Privacy: No input data is stored, logged, or transmitted to external services. All processing happens locally within the MCP server process.
| Name | Required | Description | Default |
|---|---|---|---|
| scopes_tracked | No | ||
| methodology | No | ||
| api_key | No |
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description fully covers side effects (read-only, stateless), authentication (none for basic, API key for pro), rate limits (free 10/day, pro unlimited), error handling (structured error objects), idempotency, and data privacy. This is comprehensive and exceeds expectations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is well-structured with clear sections and front-loads the core purpose. It is slightly verbose but every section adds value. Could be tightened while retaining information.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool has 3 parameters with no required fields, and the description includes detailed behavioral transparency, usage guidelines, and parameter context, it is complete and addresses all key aspects for an agent to use the tool correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The description provides examples for scopes_tracked and methodology (e.g., 'scope 1, scope 2 location-based', 'GHG Protocol'), adding meaning beyond the schema. The api_key parameter is mentioned but lacks detailed semantics, though authentication context compensates. Given 0% schema coverage, this is strong.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool checks ESRS E1 (Climate) Scope 1/2/3 emissions readiness. It uses a specific verb ('check') and resource, and effectively distinguishes from siblings like double_materiality_assessment by focusing on readiness assessment.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description includes explicit 'When to use' and 'When NOT to use' sections, providing clear context for assessment, audit, and verification purposes. It warns against substituting for legal counsel but does not reference specific sibling tools.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
ixbrl_taxonomy_checkA
Check readiness for mandatory iXBRL digital tagging of sustainability statements under CSRD Article 29d + ESEF taxonomy extension.
Behavior: This tool is read-only and stateless — it produces analysis output without modifying any external systems, databases, or files. Safe to call repeatedly with identical inputs (idempotent). Free tier: 10/day rate limit. Pro tier: unlimited. No authentication required for basic usage.
When to use: Use this tool when you need to assess, audit, or verify compliance requirements. Ideal for gap analysis, readiness checks, and generating compliance documentation.
When NOT to use: Do not use as a substitute for qualified legal counsel. This tool provides technical compliance guidance, not legal advice.
Args: api_key (str): The api key to analyze or process.
Behavioral Transparency: - Side Effects: This tool is read-only and produces no side effects. It does not modify any external state, databases, or files. All output is computed in-memory and returned directly to the caller. - Authentication: No authentication required for basic usage. Pro/Enterprise tiers require a valid MEOK API key passed via the MEOK_API_KEY environment variable. - Rate Limits: Free tier: 10 calls/day. Pro tier: unlimited. Rate limit headers are included in responses (X-RateLimit-Remaining, X-RateLimit-Reset). - Error Handling: Returns structured error objects with 'error' key on failure. Never raises unhandled exceptions. Invalid inputs return descriptive validation errors. - Idempotency: Fully idempotent — calling with the same inputs always produces the same output. Safe to retry on timeout or transient failure. - Data Privacy: No input data is stored, logged, or transmitted to external services. All processing happens locally within the MCP server process.
| Name | Required | Description | Default |
|---|---|---|---|
| api_key | No |
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description fully covers behavioral traits: read-only, stateless, idempotent, rate limits, authentication requirements, error handling, and data privacy. This exceeds the minimum to compensate for missing annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is well-structured with clear sections and front-loaded purpose. However, there is minor redundancy between the 'Behavior' and 'Behavioral Transparency' sections, and some sentences could be tightened without losing value.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool's complexity and the presence of an output schema, the description adequately covers all necessary aspects: purpose, usage, parameters, and behavioral details. It provides sufficient context for an agent to correctly invoke the tool.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Despite 0% schema description coverage, the description only briefly mentions the api_key parameter as 'The api key to analyze or process,' which adds minimal meaning beyond the schema's title. It lacks details on optionality, purpose, or relationship to tiers, failing to compensate for the coverage gap.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool checks readiness for iXBRL digital tagging under CSRD and ESEF, using specific verbs and regulatory references. It distinguishes itself from sibling tools like classify_entity or double_materiality_assessment by focusing on taxonomy compliance.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The 'When to use' and 'When NOT to use' sections provide explicit context and limitations, including a disclaimer against legal advice. However, it does not explicitly compare to sibling tools or state when alternatives might be preferred.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
list_esrs_standardsA
List all 12 ESRS topical standards + 2 cross-cutting.
Behavior: This tool is read-only and stateless — it produces analysis output without modifying any external systems, databases, or files. Safe to call repeatedly with identical inputs (idempotent). Free tier: 10/day rate limit. Pro tier: unlimited. No authentication required for basic usage.
When to use: Use this tool when you need to assess, audit, or verify compliance requirements. Ideal for gap analysis, readiness checks, and generating compliance documentation.
When NOT to use: Do not use as a substitute for qualified legal counsel. This tool provides technical compliance guidance, not legal advice.
Args: api_key (str): The api key to analyze or process.
Behavioral Transparency: - Side Effects: This tool is read-only and produces no side effects. It does not modify any external state, databases, or files. All output is computed in-memory and returned directly to the caller. - Authentication: No authentication required for basic usage. Pro/Enterprise tiers require a valid MEOK API key passed via the MEOK_API_KEY environment variable. - Rate Limits: Free tier: 10 calls/day. Pro tier: unlimited. Rate limit headers are included in responses (X-RateLimit-Remaining, X-RateLimit-Reset). - Error Handling: Returns structured error objects with 'error' key on failure. Never raises unhandled exceptions. Invalid inputs return descriptive validation errors. - Idempotency: Fully idempotent — calling with the same inputs always produces the same output. Safe to retry on timeout or transient failure. - Data Privacy: No input data is stored, logged, or transmitted to external services. All processing happens locally within the MCP server process.
| Name | Required | Description | Default |
|---|---|---|---|
| api_key | No |
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Dedicated 'Behavioral Transparency' section comprehensively covers side effects (read-only, stateless), authentication (none for basic), rate limits (free vs pro), error handling (structured errors), idempotency, and data privacy. With no annotations, the description fully fulfills the transparency burden.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Description is well-structured with clear sections (Behavior, When to use/not, Args, Behavioral Transparency) and front-loaded with the core purpose. While slightly verbose, every section adds value and no sentences are wasted.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Despite simplicity of the tool, the description covers all necessary aspects: purpose, usage context, behavioral properties, and parameter. Since an output schema exists, explanation of return values is not required. The description is complete for its function.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Only one parameter (api_key) is mentioned in the description, but its description ('The api key to analyze or process') is vague and does not clarify its role relative to authentication tiers. Context signals show 0% schema description coverage, so the description should compensate more. However, the presence of some description keeps it from being a 2.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description explicitly states the tool lists all 12 ESRS topical standards plus 2 cross-cutting, providing a clear verb-noun combination with specific count, distinguishing it from sibling tools.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Includes explicit 'When to use' and 'When NOT to use' sections, guiding the agent toward compliance assessment use cases and cautioning against substituting for legal advice. Sibling tools are distinct (e.g., classify_entity, ghg_emissions_readiness), so this tool stands out.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections. Dates show when Glama detected each change.
6 tool updates
v1.2.4- First observed
classify_entity - First observed
double_materiality_assessment - First observed
enforcement_status - First observed
ghg_emissions_readiness - First observed
ixbrl_taxonomy_check - First observed
list_esrs_standards
TDQS
Each tool has a unique and clearly defined purpose: classification, materiality, enforcement, emissions, iXBRL, and standards listing. There is no overlap or ambiguity between them.
All tool names follow a consistent snake_case verb_noun pattern (e.g., classify_entity, list_esrs_standards), making them predictable and easy to understand.
With 6 tools, the server covers the key aspects of CSRD compliance without being bloated. The count is well-suited for its advisory purpose.
The tools cover the core compliance workflow (classification, materiality, enforcement, climate, tagging, standards). However, it lacks readiness checks for other ESRS topics (e.g., social, governance), which is a minor gap.
Maintenance
Related MCP Connectors
AI governance MCP server for EU AI Act compliance and jurisdiction verification
EU compliance corpus across 8 frameworks (NIS2, DORA, AI Act, ISO 27001 + more) via MCP.
10,065 source-verified compliance nodes, 39 pillars, 25 MCP tools (EU AI Act, GDPR, NIST, MITRE).
Compliance frameworks (SOC 2, ISO 27001, CMMC, NIST, more) delivered to AI agents as MCP tools.
1
Related MCP Servers
- AlicenseAqualityBmaintenanceEU AI Act Compliance - MCP server providing AI-powered tools and automation by MEOK AI Labs11171MIT
- AlicenseAqualityCmaintenanceISO 42001 AI - MCP server providing AI-powered tools and automation by MEOK AI Labs10161MIT

SOC2 Compliance AI MCPofficial
AlicenseAqualityCmaintenanceSOC2 Compliance AI - MCP server providing AI-powered tools and automation by MEOK AI Labs616MIT- AlicenseAqualityBmaintenanceNIS2 Compliance - MCP server providing AI-powered tools and automation by MEOK AI Labs7MIT
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/CSOAI-ORG/csrd-compliance-mcp'
If you have feedback or need assistance with the MCP directory API, please join our Discord server