Compliance Intelligence

GJB65

Access 692+ compliance frameworks, 13,700+ controls, and 280,000+ cross-framework mappings via MCP. Query ISO 27001, NIST CSF, GDPR, SOC 2, HIPAA, PCI DSS and more.

Install

Install and configure the MCP from https://github.com/GJB65/compliance-mcp-server now. Follow the repository's installation instructions, ask me for anything you can't complete yourself, and verify its tools load.

View source on GitHub

README

TheArtOfService Compliance Intelligence MCP Server

This repository contains the source of an MCP (Model Context Protocol) server implementation, under npm/. It speaks MCP over stdio to any MCP client and is published as @theartofservice/compliance-mcp.

Alongside it, python/ holds a LangChain toolkit for the same API. That one is not an MCP server, it is an SDK, and it is here because it targets the same graph.

The server exposes a compliance knowledge graph of 686 frameworks, 21,696+ controls and 300K+ cross-framework mappings, where a mapping records what one standard already evidences of another, along with the reasoning and the rejections.

The server implementation

	what it is	source	published as
Node	MCP server, stdio	`npm/src/index.js`	`@theartofservice/compliance-mcp`
Python	LangChain toolkit, not MCP	`python/src/theartofservice_compliance/`	`theartofservice-compliance`

The Node implementation is built on the official @modelcontextprotocol/sdk, registering its tools through Server and serving them over StdioServerTransport.

Tools

tool	what it answers
`search_frameworks`	find a standard by name or subject
`get_framework`	one framework in full, with its domains
`get_framework_controls`	the control set of a framework
`search_controls`	find controls by text across the graph
`cross_framework_map`	what standard A already evidences of standard B
`coverage_report`	how much of a target standard a source covers

Run it locally

npx -y @theartofservice/compliance-mcp

Tools list without a key, so any client can inspect the server. Calling one needs THEARTOFSERVICE_API_KEY. If you would rather not sign up for anything, the hosted endpoint below serves the same graph anonymously.

Claude Desktop, Claude Code, Cursor, Windsurf and any other MCP client can launch either one directly. Add to your client config:

{
  "mcpServers": {
    "compliance": {
      "command": "npx",
      "args": ["-y", "@theartofservice/compliance-mcp"]
    }
  }
}

Or use the hosted endpoint

If you would rather not run anything, the same server is hosted:

https://api.theartofservice.com/mcp

Streamable HTTP, anonymous access. It is listed in the official MCP registry as com.theartofservice/compliance-intelligence.

Counts

The figures above are read from the live graph. They move, so treat them as a floor rather than a fixed number, and read the current values from:

https://api.theartofservice.com/api/agent/stats

Licence

MIT. See LICENSE.