ISO 42001 AI MCP
This server provides comprehensive ISO/IEC 42001 AI Management System (AIMS) compliance tooling, enabling organizations to assess, audit, and prepare for AI governance certification.
audit_management_system: Evaluate AI management practices against ISO 42001 clauses 4–10 (Context, Leadership, Planning, Support, Operation, Performance Evaluation, Improvement) with per-clause assessments, gap analysis, and prioritized recommendations.assess_ai_risk: Perform a full ISO 42001 Annex B risk assessment covering risk identification, likelihood/impact analysis, and evaluation against organizational risk criteria.generate_policy_template: Auto-generate ISO 42001-compliant AI policy documents (comprehensive, brief, or executive formats) satisfying clause 5.2 and Annex A.2.2 requirements.check_annex_controls: Map an AI system against all Annex A control objectives, evaluate applicability and implementation status, and produce a gap analysis for a Statement of Applicability.crosswalk_to_eu_ai_act: Map ISO 42001 clauses and Annex A controls to EU AI Act articles, highlighting where ISO 42001 conformity satisfies EU AI Act requirements for dual-compliance.create_certification_checklist: Generate a certification readiness checklist with pass/fail status, covering all mandatory requirements, documentation, and evidence needed for ISO 42001 audit.predict_risk_neural: Use a neural network-based model to predict AI system risk scores based on attributes such as biometric data use, health data, human oversight, and prior incidents.neural_insights: Retrieve aggregate learning insights and trends from the neural compliance model.quick_scan: Get an instant ISO 42001 gap assessment from a one-line AI system description — no API key needed.certification_timeline: Retrieve a structured overview of ISO 42001 certification steps and typical timelines, with no parameters required.
Iso 42001 Ai MCP
⚖️ Built by MEOK AI Labs / CSOAI. Need this applied to your system fast? Book a 30-min Founder Office Hour (£29) → https://meok.ai/work · Full governance platform → https://meok.ai
ISO 42001 AI Management System compliance MCP — AIMS assessment, risk management, AI lifecycle go...
ISO 42001 AI Management System compliance MCP — AIMS assessment, risk management, AI lifecycle governance, certification readiness.
🚀 Quick Start
# Install via pip
pip install iso_42001_ai_mcp
# Or install via Smithery
npx -y @smithery/cli@latest install iso-42001-ai-mcp --client claudeRelated MCP server: ISO 27001 AI MCP
⚡ Pay-per-call (PAYG) — no subscription
This MCP supports universal pay-per-call billing across the MEOK compliance fleet:
# One-time setup
export MEOK_PAYG_KEY="your_topup_token"
# Every tool call now deducts £0.05 from your balance.
# When balance hits zero, the tool returns a top-up URL.
# Works across all 7 MEOK compliance MCPs with the same token.No subscription — top up once, deduct per call.
£0.05/call default (configurable via
MEOK_PAYG_RATE_GBP).USDC on Base L2 accepted — set
MEOK_X402_RECEIVERand pay via stablecoin.Backward-compatible — when
MEOK_PAYG_KEYis unset, behaviour is unchanged.
Get a token: councilof.ai/payg (£10 / £50 / £200 top-up tiers).
✨ Features
MCP protocol compliant
Easy installation
Well-documented API
Production-ready
Active maintenance
📖 Documentation
🛡️ Compliance
This MCP server is built with EU AI Act compliance built-in:
✅ Article 9 — Risk Management System
✅ Article 13 — Transparency & Instructions for Use
✅ Article 15 — Bias Detection & Testing
✅ Article 26 — FRIA Support (where applicable)
✅ Article 50 — AI Content Watermarking (where applicable)
Need help getting compliant? Book a free 15-min diagnostic →
🏢 Enterprise
Need custom development, SLA guarantees, or white-label deployment?
Pro: £79/mo — Full MCP suite + EU AI Act tracking
Enterprise: £499/mo — Custom dev + SLA + Dedicated support
View Pricing → | Contact Sales →
🤝 Part of the MEOK Ecosystem
This server is part of the MEOK AI Labs ecosystem — 26 PyPI packages · ~16,300 monthly installs.
Domain | Purpose |
EU AI Act compliance marketplace | |
AI safety & monitoring | |
Sovereign AI platform | |
Legacy modernization |
📜 License
MIT © CSOAI-ORG
Configuration
Add to your claude_desktop_config.json (Claude Desktop) or your MCP client config:
{
"mcpServers": {
"iso-42001-ai-mcp": {
"command": "uvx",
"args": ["iso-42001-ai-mcp"]
}
}
}Or: pip install iso-42001-ai-mcp then run the iso-42001-ai-mcp command (stdio transport).
Examples
Once configured, ask your assistant, for example:
"Use
audit_management_systemto …""Use
assess_ai_riskto …""Use
generate_policy_templateto …"
Available Tools
10 toolsassess_ai_riskA
Perform ISO 42001 Annex B risk assessment for AI systems.
Comprehensive AI risk assessment covering risk criteria establishment, risk identification across all Annex B categories, risk analysis (likelihood and impact), and risk evaluation against organizational risk criteria. Follows the ISO 42001 Annex B guidance structure.
Args: system_description: Detailed description of the AI system including purpose, data, deployment context, and affected populations. system_name: Name of the AI system. risk_criteria: Organization's risk acceptance criteria description. caller: Caller identifier for rate limiting. tier: Pricing tier ('free' or 'pro').
Returns: Complete Annex B risk assessment with identified risks, analysis, and evaluation results.
Behavior: This tool is read-only and stateless — it produces analysis output without modifying any external systems, databases, or files. Safe to call repeatedly with identical inputs (idempotent). Free tier: 10/day rate limit. Pro tier: unlimited. No authentication required for basic usage.
When to use: Use this tool when you need to assess, audit, or verify compliance requirements. Ideal for gap analysis, readiness checks, and generating compliance documentation.
When NOT to use: Do not use as a substitute for qualified legal counsel. This tool provides technical compliance guidance, not legal advice. Behavioral Transparency: - Side Effects: This tool is read-only and produces no side effects. It does not modify any external state, databases, or files. All output is computed in-memory and returned directly to the caller. - Authentication: No authentication required for basic usage. Pro/Enterprise tiers require a valid MEOK API key passed via the MEOK_API_KEY environment variable. - Rate Limits: Free tier: 10 calls/day. Pro tier: unlimited. Rate limit headers are included in responses (X-RateLimit-Remaining, X-RateLimit-Reset). - Error Handling: Returns structured error objects with 'error' key on failure. Never raises unhandled exceptions. Invalid inputs return descriptive validation errors. - Idempotency: Fully idempotent — calling with the same inputs always produces the same output. Safe to retry on timeout or transient failure. - Data Privacy: No input data is stored, logged, or transmitted to external services. All processing happens locally within the MCP server process.
| Name | Required | Description | Default |
|---|---|---|---|
| system_description | Yes | ||
| system_name | No | AI System | |
| risk_criteria | No | ||
| caller | No | anonymous | |
| tier | No | free | |
| api_key | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Despite no annotations, the description includes a comprehensive 'Behavioral Transparency' section covering side effects (read-only, no side effects), authentication (none for basic, API key for pro), rate limits (free 10/day, pro unlimited), error handling (structured errors), idempotency, and data privacy. This fully informs the agent of the tool's behavior.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is well-structured with clear sections (When to use, Behavioral Transparency). However, it contains repetition: the 'Behavior' paragraph and 'Behavioral Transparency' section both state read-only and stateless. This redundancy slightly reduces conciseness.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The description covers the tool's purpose, parameters, behavioral traits, and constraints extensively. It lacks precise output format details (e.g., expected JSON structure) but given no output schema, the general description is adequate. Missing api_key parameter description is a gap, but overall completeness is high.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The description's Args section adds meaning for 5 of 6 parameters (system_description, system_name, risk_criteria, caller, tier), clarifying their roles. However, it omits the api_key parameter present in the schema. Given 0% schema coverage, the description partially compensates but misses one parameter.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description explicitly states 'Perform ISO 42001 Annex B risk assessment for AI systems' and lists specific activities (risk criteria establishment, identification, analysis, evaluation). It clearly distinguishes from sibling tools like quick_scan or predict_risk_neural by focusing on comprehensive Annex B risk assessment.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Provides a dedicated 'When to use' section listing use cases (assess, audit, verify compliance, gap analysis) and a 'When NOT to use' warning against substituting for legal counsel. This gives clear guidance on appropriate contexts.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
audit_management_systemA
Audit an AI management system against ISO/IEC 42001 clauses 4-10.
Evaluates organizational readiness and conformity across all seven management system clauses: Context (4), Leadership (5), Planning (6), Support (7), Operation (8), Performance Evaluation (9), and Improvement (10). Returns per-clause assessment with audit questions, gap analysis, and prioritized recommendations.
Args: organization_description: Description of the organization and its AI management practices, governance structures, and policies. ai_systems_description: Description of AI systems in scope. existing_certifications: Existing ISO or other certifications held (e.g., 'ISO 27001, ISO 9001'). caller: Caller identifier for rate limiting. tier: Pricing tier ('free' or 'pro').
Returns: Clause-by-clause audit results with conformity status and recommendations.
Behavior: This tool is read-only and stateless — it produces analysis output without modifying any external systems, databases, or files. Safe to call repeatedly with identical inputs (idempotent). Free tier: 10/day rate limit. Pro tier: unlimited. No authentication required for basic usage.
When to use: Use this tool when you need to assess, audit, or verify compliance requirements. Ideal for gap analysis, readiness checks, and generating compliance documentation.
When NOT to use: Do not use as a substitute for qualified legal counsel. This tool provides technical compliance guidance, not legal advice. Behavioral Transparency: - Side Effects: This tool is read-only and produces no side effects. It does not modify any external state, databases, or files. All output is computed in-memory and returned directly to the caller. - Authentication: No authentication required for basic usage. Pro/Enterprise tiers require a valid MEOK API key passed via the MEOK_API_KEY environment variable. - Rate Limits: Free tier: 10 calls/day. Pro tier: unlimited. Rate limit headers are included in responses (X-RateLimit-Remaining, X-RateLimit-Reset). - Error Handling: Returns structured error objects with 'error' key on failure. Never raises unhandled exceptions. Invalid inputs return descriptive validation errors. - Idempotency: Fully idempotent — calling with the same inputs always produces the same output. Safe to retry on timeout or transient failure. - Data Privacy: No input data is stored, logged, or transmitted to external services. All processing happens locally within the MCP server process.
| Name | Required | Description | Default |
|---|---|---|---|
| organization_description | Yes | ||
| ai_systems_description | No | ||
| existing_certifications | No | ||
| caller | No | anonymous | |
| tier | No | free | |
| api_key | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries full burden and delivers extensively. It dedicates a 'Behavioral Transparency' section covering side effects (none, read-only), authentication (none for basic, API key for pro/enterprise), rate limits (10/day free, unlimited pro), error handling (structured errors), idempotency (fully idempotent), and data privacy (no storage or transmission). This is comprehensive and beyond typical disclosure.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is well-structured with clear headers (Args, Returns, Behavior, When to use, etc.), but there is redundancy: the 'Behavior:' section and later 'Behavioral Transparency:' section repeat similar information. It is informative and front-loaded, but slightly longer than necessary.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool has 6 parameters, no annotations, and no output schema, the description covers most aspects: purpose, usage, behavior, param semantics, and return format (clause-by-clause results). It lacks explicit detail on the exact structure of the return value but provides enough for an AI agent to understand expectations. Very close to complete.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 0%, so description must add meaning. It describes 5 of 6 parameters in the 'Args' section (missing 'api_key' parameter) with clear explanations (e.g., tier explained as 'free' or 'pro'). The description adds context not in schema. However, missing the api_key parameter and the slight confusion about passing it via environment variable vs parameter prevents a perfect score.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description starts with a clear verb+resource: 'Audit an AI management system against ISO/IEC 42001 clauses 4-10.' It specifies the scope (clauses 4-10) and what is returned (per-clause assessment, gap analysis, recommendations). This clearly distinguishes it from sibling tools like 'assess_ai_risk' or 'crosswalk_to_eu_ai_act' which have different purposes.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description includes explicit 'When to use' and 'When NOT to use' sections, stating ideal use cases (gap analysis, readiness checks) and an important exclusion (not a substitute for legal counsel). It provides clear context but does not explicitly name or differentiate from sibling tools, which would push it to a 5.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
certification_timelineA
Returns ISO 42001 certification steps and typical timelines. No parameters needed.
Behavior: This tool is read-only and stateless — it produces analysis output without modifying any external systems, databases, or files. Safe to call repeatedly with identical inputs (idempotent). Free tier: 10/day rate limit. Pro tier: unlimited. No authentication required for basic usage.
When to use: Use this tool when you need to assess, audit, or verify compliance requirements. Ideal for gap analysis, readiness checks, and generating compliance documentation.
When NOT to use: Do not use as a substitute for qualified legal counsel. This tool provides technical compliance guidance, not legal advice. Behavioral Transparency: - Side Effects: This tool is read-only and produces no side effects. It does not modify any external state, databases, or files. All output is computed in-memory and returned directly to the caller. - Authentication: No authentication required for basic usage. Pro/Enterprise tiers require a valid MEOK API key passed via the MEOK_API_KEY environment variable. - Rate Limits: Free tier: 10 calls/day. Pro tier: unlimited. Rate limit headers are included in responses (X-RateLimit-Remaining, X-RateLimit-Reset). - Error Handling: Returns structured error objects with 'error' key on failure. Never raises unhandled exceptions. Invalid inputs return descriptive validation errors. - Idempotency: Fully idempotent — calling with the same inputs always produces the same output. Safe to retry on timeout or transient failure. - Data Privacy: No input data is stored, logged, or transmitted to external services. All processing happens locally within the MCP server process.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description fully covers behavioral details: read-only, stateless, no side effects, idempotent, rate limits (free 10/day, pro unlimited), authentication (none for basic, API key for pro/enterprise), error handling, and data privacy. This exceeds the required transparency.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is well-structured with sections and bullet points, but it is slightly verbose, containing more detail than strictly necessary. However, it front-loads the purpose and provides organized information.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given no output schema and no annotations, the description is complete: it covers purpose, usage guidelines, behavioral transparency, and parameter semantics thoroughly, leaving no gaps for a tool with no parameters.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The tool has zero parameters, and the schema coverage is 100% (empty). The description adds meaning by explaining the output (certification steps and timelines) and the nature of the tool, going beyond the baseline of 4 for zero-parameter tools.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool returns ISO 42001 certification steps and typical timelines. The verb 'returns' and the resource 'certification steps and timelines' are specific, and the tool is distinct from siblings like audit_management_system or check_annex_controls.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides explicit 'When to use' (assess, audit, gap analysis, compliance documentation) and 'When NOT to use' (not a substitute for legal counsel) guidelines, offering clear context and exclusions.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
check_annex_controlsA
Evaluate AI system against ISO 42001 Annex A controls.
Maps the system to all Annex A control objectives and evaluates which controls are applicable and their implementation status. Produces a gap analysis suitable for Statement of Applicability.
Args: system_description: Description of the AI system and its management. system_name: Name of the AI system. implemented_controls: Description of controls already implemented (free text or comma-separated control IDs). caller: Caller identifier for rate limiting. tier: Pricing tier ('free' or 'pro').
Returns: Annex A control evaluation with applicability and gap analysis.
Behavior: This tool generates structured output without modifying external systems. Output is deterministic for identical inputs. No side effects. Free tier: 10/day rate limit. Pro tier: unlimited. No authentication required for basic usage.
When to use: Use this tool when you need to assess, audit, or verify compliance requirements. Ideal for gap analysis, readiness checks, and generating compliance documentation.
When NOT to use: Do not use as a substitute for qualified legal counsel. This tool provides technical compliance guidance, not legal advice. Behavioral Transparency: - Side Effects: This tool is read-only and produces no side effects. It does not modify any external state, databases, or files. All output is computed in-memory and returned directly to the caller. - Authentication: No authentication required for basic usage. Pro/Enterprise tiers require a valid MEOK API key passed via the MEOK_API_KEY environment variable. - Rate Limits: Free tier: 10 calls/day. Pro tier: unlimited. Rate limit headers are included in responses (X-RateLimit-Remaining, X-RateLimit-Reset). - Error Handling: Returns structured error objects with 'error' key on failure. Never raises unhandled exceptions. Invalid inputs return descriptive validation errors. - Idempotency: Fully idempotent — calling with the same inputs always produces the same output. Safe to retry on timeout or transient failure. - Data Privacy: No input data is stored, logged, or transmitted to external services. All processing happens locally within the MCP server process.
| Name | Required | Description | Default |
|---|---|---|---|
| system_description | Yes | ||
| system_name | No | AI System | |
| implemented_controls | No | ||
| caller | No | anonymous | |
| tier | No | free | |
| api_key | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Despite no annotations, the description includes a comprehensive 'Behavioral Transparency' section covering side effects (read-only, no side effects), authentication, rate limits, error handling, idempotency, and data privacy. No contradiction with annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is well-structured with clear sections and front-loaded purpose. However, there is slight redundancy between the 'Behavior:' and 'Behavioral Transparency:' sections, making it a bit longer than necessary.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a tool with 6 parameters, no output schema, and no annotations, the description is very complete, covering behavior, usage, parameters, and error handling. Missing a more detailed return format, but acceptable given the complexity.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, but the description's 'Args:' section explains each parameter in detail (e.g., 'implemented_controls: free text or comma-separated control IDs'), fully compensating for the missing schema descriptions.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool's purpose: evaluate AI system against ISO 42001 Annex A controls, mapping controls, assessing applicability, and producing a gap analysis. It distinguishes itself from siblings like 'assess_ai_risk' by focusing on a specific standard.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicit 'When to use' and 'When NOT to use' sections provide clear guidance: use for compliance assessment, gap analysis, and documentation; not a substitute for legal advice. This helps the agent decide when to invoke.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
create_certification_checklistA
Generate ISO 42001 certification readiness checklist with pass/fail.
Creates a comprehensive certification preparation checklist covering all mandatory requirements, documentation, and evidence needed for ISO 42001 certification audit. Includes pre-audit assessment and remediation guidance.
Args: organization_name: Name of the organization pursuing certification. current_status: Description of current AIMS implementation status. target_date: Target certification date (YYYY-MM-DD format). caller: Caller identifier for rate limiting. tier: Pricing tier ('free' or 'pro').
Returns: Certification readiness checklist with pass/fail status per item.
Behavior: This tool generates structured output without modifying external systems. Output is deterministic for identical inputs. No side effects. Free tier: 10/day rate limit. Pro tier: unlimited. No authentication required for basic usage.
When to use: Use this tool when you need to assess, audit, or verify compliance requirements. Ideal for gap analysis, readiness checks, and generating compliance documentation.
When NOT to use: Do not use as a substitute for qualified legal counsel. This tool provides technical compliance guidance, not legal advice. Behavioral Transparency: - Side Effects: This tool is read-only and produces no side effects. It does not modify any external state, databases, or files. All output is computed in-memory and returned directly to the caller. - Authentication: No authentication required for basic usage. Pro/Enterprise tiers require a valid MEOK API key passed via the MEOK_API_KEY environment variable. - Rate Limits: Free tier: 10 calls/day. Pro tier: unlimited. Rate limit headers are included in responses (X-RateLimit-Remaining, X-RateLimit-Reset). - Error Handling: Returns structured error objects with 'error' key on failure. Never raises unhandled exceptions. Invalid inputs return descriptive validation errors. - Idempotency: Fully idempotent — calling with the same inputs always produces the same output. Safe to retry on timeout or transient failure. - Data Privacy: No input data is stored, logged, or transmitted to external services. All processing happens locally within the MCP server process.
| Name | Required | Description | Default |
|---|---|---|---|
| organization_name | No | ||
| current_status | No | ||
| target_date | No | ||
| caller | No | anonymous | |
| tier | No | free | |
| api_key | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Since no annotations are provided, the description fully covers behavioral traits: read-only, no side effects, authentication requirements, rate limits, error handling, idempotency, and data privacy. This is thorough and exceeds typical disclosure.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Description is well-structured with clear sections, but some redundancy exists between 'Behavior' and 'Behavioral Transparency'. The length is justified by the amount of information, but minor trimming could improve conciseness.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the lack of output schema and annotations, the description covers purpose, parameters, behavior, and usage guidance. However, it misses the 'api_key' parameter and does not specify the exact output format beyond 'pass/fail status per item'.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The 'Args' section describes 5 of 6 parameters, adding meaning beyond the schema (0% coverage). However, it omits the 'api_key' parameter entirely, and does not explain constraints like date format or valid tier values.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description explicitly states 'Generate ISO 42001 certification readiness checklist with pass/fail', giving a clear verb, resource, and outcome. It distinguishes from siblings like 'assess_ai_risk' by focusing on checklist creation.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Has dedicated 'When to use' and 'When NOT to use' sections, providing context for gap analysis and compliance verification. However, it does not explicitly compare with sibling tools like 'certification_timeline' or 'audit_management_system'.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
crosswalk_to_eu_ai_actA
Map ISO/IEC 42001 clauses and Annex A controls to EU AI Act articles.
This is the killer feature -- regulation-to-regulation mapping showing exactly where ISO 42001 conformity satisfies EU AI Act requirements. Essential for organizations pursuing ISO 42001 certification while preparing for EU AI Act compliance.
Args: iso_clauses: Comma-separated ISO clauses to crosswalk (e.g., '4,5,8') or 'all' for complete mapping. Include 'annex' for Annex A mappings. focus_area: Optional focus area to filter (e.g., 'risk management', 'transparency', 'data governance', 'human oversight'). caller: Caller identifier for rate limiting. tier: Pricing tier ('free' or 'pro').
Returns: Detailed crosswalk between ISO 42001 and EU AI Act with alignment strength ratings and dual-compliance guidance.
Behavior: This tool is read-only and stateless — it produces analysis output without modifying any external systems, databases, or files. Safe to call repeatedly with identical inputs (idempotent). Free tier: 10/day rate limit. Pro tier: unlimited. No authentication required for basic usage.
When to use: Use this tool when you need to assess, audit, or verify compliance requirements. Ideal for gap analysis, readiness checks, and generating compliance documentation.
When NOT to use: Do not use as a substitute for qualified legal counsel. This tool provides technical compliance guidance, not legal advice. Behavioral Transparency: - Side Effects: This tool is read-only and produces no side effects. It does not modify any external state, databases, or files. All output is computed in-memory and returned directly to the caller. - Authentication: No authentication required for basic usage. Pro/Enterprise tiers require a valid MEOK API key passed via the MEOK_API_KEY environment variable. - Rate Limits: Free tier: 10 calls/day. Pro tier: unlimited. Rate limit headers are included in responses (X-RateLimit-Remaining, X-RateLimit-Reset). - Error Handling: Returns structured error objects with 'error' key on failure. Never raises unhandled exceptions. Invalid inputs return descriptive validation errors. - Idempotency: Fully idempotent — calling with the same inputs always produces the same output. Safe to retry on timeout or transient failure. - Data Privacy: No input data is stored, logged, or transmitted to external services. All processing happens locally within the MCP server process.
| Name | Required | Description | Default |
|---|---|---|---|
| iso_clauses | No | all | |
| focus_area | No | ||
| caller | No | anonymous | |
| tier | No | free | |
| api_key | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations provided, so description fully covers behavior: read-only, stateless, idempotent, rate limits (free 10/day, pro unlimited), authentication (none for basic, API key for pro), error handling, and data privacy. All traits are accurately stated.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Well-organized with clear sections (Args, Returns, Behavior, When to use/not, Behavioral Transparency). Front-loaded with purpose. Some redundancy between Behavior and Behavioral Transparency sections could be trimmed.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
With 5 parameters, no output schema, and no annotations, the description covers all necessary aspects: parameter details, return value with alignment ratings, rate limits, authentication, idempotency. No gaps were identified.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema has 0% description coverage, but the description's Args section explains iso_clauses, focus_area, caller, and tier with examples and constraints. However, the api_key parameter is in the schema but not described in Args, though mentioned later in authentication context.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool maps ISO/IEC 42001 to EU AI Act articles, a specific verb and resources. It distinguishes itself from sibling tools like risk assessment or audit by calling it a 'killer feature' for regulation-to-regulation mapping.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description includes explicit 'When to use' and 'When NOT to use' sections, providing clear guidance on appropriate contexts (gap analysis, compliance docs) and cautioning against legal advice substitution.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
generate_policy_templateA
Generate AI policy documents per ISO 42001 requirements.
Creates policy templates that satisfy ISO 42001 clause 5.2 (AI policy) and Annex A.2.2 requirements. Includes AI policy statement, roles and responsibilities, objectives, principles, and governance structure.
Args: organization_name: Name of the organization. ai_scope: Description of AI systems and activities in scope. policy_type: Type of policy ('comprehensive', 'brief', 'executive'). caller: Caller identifier for rate limiting. tier: Pricing tier ('free' or 'pro').
Returns: Markdown-formatted policy template with all required elements.
Behavior: This tool generates structured output without modifying external systems. Output is deterministic for identical inputs. No side effects. Free tier: 10/day rate limit. Pro tier: unlimited. No authentication required for basic usage.
When to use: Use this tool when you need to assess, audit, or verify compliance requirements. Ideal for gap analysis, readiness checks, and generating compliance documentation.
When NOT to use: Do not use as a substitute for qualified legal counsel. This tool provides technical compliance guidance, not legal advice. Behavioral Transparency: - Side Effects: This tool is read-only and produces no side effects. It does not modify any external state, databases, or files. All output is computed in-memory and returned directly to the caller. - Authentication: No authentication required for basic usage. Pro/Enterprise tiers require a valid MEOK API key passed via the MEOK_API_KEY environment variable. - Rate Limits: Free tier: 10 calls/day. Pro tier: unlimited. Rate limit headers are included in responses (X-RateLimit-Remaining, X-RateLimit-Reset). - Error Handling: Returns structured error objects with 'error' key on failure. Never raises unhandled exceptions. Invalid inputs return descriptive validation errors. - Idempotency: Fully idempotent — calling with the same inputs always produces the same output. Safe to retry on timeout or transient failure. - Data Privacy: No input data is stored, logged, or transmitted to external services. All processing happens locally within the MCP server process.
| Name | Required | Description | Default |
|---|---|---|---|
| organization_name | Yes | ||
| ai_scope | No | ||
| policy_type | No | comprehensive | |
| caller | No | anonymous | |
| tier | No | free | |
| api_key | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description fully bears the burden and delivers a comprehensive 'Behavioral Transparency' section covering side effects, authentication, rate limits, error handling, idempotency, and data privacy. This exceeds expectations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is lengthy with some redundancy between 'Behavior' and 'Behavioral Transparency' sections. While structured, it could be more streamlined without losing clarity.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given no output schema, the description adequately explains the return type and includes essential behavioral context. It covers parameters, use cases, and constraints, but missing api_key parameter weakens completeness slightly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, requiring compensation. The description's 'Args' section explains 5 of 6 parameters, adding meaning. However, 'api_key' is missing from that section, and default values or enums are not described, leaving a gap.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool generates AI policy documents per ISO 42021 requirements, listing specific clauses and components. It distinctively positions itself among siblings like 'assess_ai_risk' and 'audit_management_system' by focusing on policy template generation.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description includes 'When to use' and 'When NOT to use' sections, providing clear guidance. However, the 'When to use' is somewhat generic and could be interpreted for multiple sibling tools, lacking explicit differentiation or alternative suggestions.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
neural_insightsA
Get aggregate learning insights from the neural compliance model.
Behavior: This tool is read-only and stateless — it produces analysis output without modifying any external systems, databases, or files. Safe to call repeatedly with identical inputs (idempotent). Free tier: 10/day rate limit. Pro tier: unlimited. No authentication required for basic usage.
When to use: Use this tool when you need to assess, audit, or verify compliance requirements. Ideal for gap analysis, readiness checks, and generating compliance documentation.
When NOT to use: Do not use as a substitute for qualified legal counsel. This tool provides technical compliance guidance, not legal advice. Behavioral Transparency: - Side Effects: This tool is read-only and produces no side effects. It does not modify any external state, databases, or files. All output is computed in-memory and returned directly to the caller. - Authentication: No authentication required for basic usage. Pro/Enterprise tiers require a valid MEOK API key passed via the MEOK_API_KEY environment variable. - Rate Limits: Free tier: 10 calls/day. Pro tier: unlimited. Rate limit headers are included in responses (X-RateLimit-Remaining, X-RateLimit-Reset). - Error Handling: Returns structured error objects with 'error' key on failure. Never raises unhandled exceptions. Invalid inputs return descriptive validation errors. - Idempotency: Fully idempotent — calling with the same inputs always produces the same output. Safe to retry on timeout or transient failure. - Data Privacy: No input data is stored, logged, or transmitted to external services. All processing happens locally within the MCP server process.
| Name | Required | Description | Default |
|---|---|---|---|
| api_key | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description fully discloses behavioral traits: read-only, stateless, idempotent, rate limits, authentication requirements, error handling, and data privacy commitments. All relevant aspects are covered comprehensively.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is well-structured with clear sections and front-loaded purpose. However, it is somewhat verbose, repeating read-only and idempotency details in the Behavioral Transparency section that could be condensed without losing clarity.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool has only one parameter, no output schema, and no annotations, the description covers all necessary aspects: behavior, usage guidelines, side effects, authentication, and error handling. It is complete for the context.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The sole parameter 'api_key' is not explicitly described in the input schema (0% coverage). The description indirectly explains its usage via authentication details (basic usage no key, tiers require key), but does not directly map the parameter to its role or format.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool's purpose: 'Get aggregate learning insights from the neural compliance model.' It uses a specific verb+resource combination and distinguishes itself from sibling tools like 'assess_ai_risk' and 'audit_management_system' by focusing on aggregate insights.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides explicit 'When to use' and 'When NOT to use' sections. It recommends using the tool for compliance assessment, gap analysis, and documentation, and warns against using it as a substitute for legal counsel.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
predict_risk_neuralA
Neural network-based risk prediction that improves from every compliance check.
Behavior: This tool is read-only and stateless — it produces analysis output without modifying any external systems, databases, or files. Safe to call repeatedly with identical inputs (idempotent). Free tier: 10/day rate limit. Pro tier: unlimited. No authentication required for basic usage.
When to use: Use this tool when you need to assess, audit, or verify compliance requirements. Ideal for gap analysis, readiness checks, and generating compliance documentation.
When NOT to use: Do not use as a substitute for qualified legal counsel. This tool provides technical compliance guidance, not legal advice. Behavioral Transparency: - Side Effects: This tool is read-only and produces no side effects. It does not modify any external state, databases, or files. All output is computed in-memory and returned directly to the caller. - Authentication: No authentication required for basic usage. Pro/Enterprise tiers require a valid MEOK API key passed via the MEOK_API_KEY environment variable. - Rate Limits: Free tier: 10 calls/day. Pro tier: unlimited. Rate limit headers are included in responses (X-RateLimit-Remaining, X-RateLimit-Reset). - Error Handling: Returns structured error objects with 'error' key on failure. Never raises unhandled exceptions. Invalid inputs return descriptive validation errors. - Idempotency: Fully idempotent — calling with the same inputs always produces the same output. Safe to retry on timeout or transient failure. - Data Privacy: No input data is stored, logged, or transmitted to external services. All processing happens locally within the MCP server process.
| Name | Required | Description | Default |
|---|---|---|---|
| system_name | Yes | ||
| uses_biometric | No | ||
| uses_health_data | No | ||
| has_human_oversight | No | ||
| affected_users | No | ||
| sector | No | ||
| has_documentation | No | ||
| prior_incidents | No | ||
| api_key | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries full burden and delivers thorough transparency: it declares read-only, stateless, idempotent behavior, rate limits, authentication needs, error handling, and data privacy. No contradictions.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is well-structured with clear sections, front-loading purpose and behavior. It is relatively long but every sentence adds value, so it earns its length.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool has 9 parameters, no output schema, and no annotations, the description covers all necessary aspects: behavior, usage, limitations, and error handling. It is complete enough for an AI agent to select and invoke the tool correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The description adds no information about any of the 9 parameters, despite 0% schema coverage. The schema's titles are self-explanatory, but the description fails to provide any additional context or clarify expected formats or values.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool provides neural network-based risk prediction for compliance checks. It is specific about verb ('predicts') and resource ('risk'), but does not explicitly differentiate from sibling tools like 'assess_ai_risk' or 'quick_scan'.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description includes explicit 'When to use' and 'When NOT to use' sections, providing clear guidance on appropriate contexts and a crucial limitation about not substituting for legal counsel.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
quick_scanA
One-line system description to instant ISO 42001 gap assessment. No API key needed.
Args: description: Brief description of your AI system (e.g. 'customer service chatbot using GPT-4')
Returns: Instant gap assessment against ISO/IEC 42001:2023 clauses.
Behavior: This tool is read-only and stateless — it produces analysis output without modifying any external systems, databases, or files. Safe to call repeatedly with identical inputs (idempotent). Free tier: 10/day rate limit. Pro tier: unlimited. No authentication required for basic usage.
When to use: Use this tool when you need to assess, audit, or verify compliance requirements. Ideal for gap analysis, readiness checks, and generating compliance documentation.
When NOT to use: Do not use as a substitute for qualified legal counsel. This tool provides technical compliance guidance, not legal advice. Behavioral Transparency: - Side Effects: This tool is read-only and produces no side effects. It does not modify any external state, databases, or files. All output is computed in-memory and returned directly to the caller. - Authentication: No authentication required for basic usage. Pro/Enterprise tiers require a valid MEOK API key passed via the MEOK_API_KEY environment variable. - Rate Limits: Free tier: 10 calls/day. Pro tier: unlimited. Rate limit headers are included in responses (X-RateLimit-Remaining, X-RateLimit-Reset). - Error Handling: Returns structured error objects with 'error' key on failure. Never raises unhandled exceptions. Invalid inputs return descriptive validation errors. - Idempotency: Fully idempotent — calling with the same inputs always produces the same output. Safe to retry on timeout or transient failure. - Data Privacy: No input data is stored, logged, or transmitted to external services. All processing happens locally within the MCP server process.
| Name | Required | Description | Default |
|---|---|---|---|
| description | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries full burden and excels. Includes details on side effects (read-only, no state changes), authentication (none required for basic), rate limits (10/day free), error handling (structured errors), idempotency, and data privacy. Covers all critical behavioral traits.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Well-structured with sections ('When to use', 'Behavioral Transparency', etc.), front-loaded with the key purpose. Some redundancy (behavioral points repeated in both 'Behavior' and 'Behavioral Transparency' sections), but overall efficient and easy to scan.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Comprehensive for a simple tool with one input and no output schema. Details return value ('instant gap assessment'), behavior, authentication, rate limits, and error handling. Leaves no major gaps for an agent to infer.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Only one parameter 'description' with 0% schema coverage. The description provides a clear example and explanation ('e.g., customer service chatbot using GPT-4'), adding significant meaning beyond the bare schema. Fully compensates for the lack of schema documentation.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Clearly states the tool performs an ISO 42001 gap assessment using a system description. Verb and resource are specific. While sibling tools exist (e.g., assess_ai_risk, audit_management_system), the description does not explicitly differentiate, but the purpose is distinct enough.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicit 'When to use' and 'When NOT to use' sections. Provides clear context for appropriate usage (gap analysis, readiness checks) and warns against substituting for legal advice. No explicit alternatives, but guidance is thorough.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections. Dates show when Glama detected each change.
10 tool updates
v1.0.0- First observed
assess_ai_risk - First observed
audit_management_system - First observed
certification_timeline - First observed
check_annex_controls - First observed
create_certification_checklist - First observed
crosswalk_to_eu_ai_act - First observed
generate_policy_template - First observed
neural_insights - First observed
predict_risk_neural - First observed
quick_scan
TDQS
Most tools have distinct purposes, but there is overlap between risk assessment tools (assess_ai_risk, predict_risk_neural) and between audit/checklist tools (audit_management_system, create_certification_checklist). The vague descriptions of neural_insights and predict_risk_neural add confusion.
Most tools use verb_noun snake_case, but neural_insights (noun_noun) and quick_scan (adjective_noun) deviate. predict_risk_neural also inverts the expected order. The pattern is not fully consistent.
10 tools cover the core domain of ISO 42001 compliance well. The count is reasonable, though a few tools (e.g., neural_insights, predict_risk_neural) could be merged or clarified without loss.
The tool set covers risk assessment, management system audit, certification, Annex A controls, policy generation, and crosswalk to EU AI Act. Minor gaps exist, such as no direct support for corrective actions or evidence management.
Maintenance
Related MCP Connectors
AI governance MCP server for EU AI Act compliance and jurisdiction verification
ISO/IEC 42005:2025 AI Impact Assessment MCP — first international standard for AI impact
Agent Orchestrator MCP Server by MEOK AI Labs
A2a Governance Bridge MCP Server by MEOK AI Labs
Related MCP Servers
- AlicenseNot gradedqualityCmaintenanceNIST RMF AI - MCP server providing AI-powered tools and automation by MEOK AI Labs24MIT

ISO 27001 AI MCPofficial
AlicenseNot gradedqualityBmaintenanceISO 27001 AI - MCP server providing AI-powered tools and automation by MEOK AI Labs183MIT- AlicenseAqualityBmaintenanceEU AI Act Compliance - MCP server providing AI-powered tools and automation by MEOK AI Labs11171MIT

SOC2 Compliance AI MCPofficial
AlicenseAqualityCmaintenanceSOC2 Compliance AI - MCP server providing AI-powered tools and automation by MEOK AI Labs616MIT
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/CSOAI-ORG/iso-42001-ai-mcp'
If you have feedback or need assistance with the MCP directory API, please join our Discord server