Developer Docs
MEOK ships compliance MCPs you drop into any agent stack. All 8 packages are listed in the official Model Context Protocol Registry, MIT-licensed, and run via uvx or pip install. No central API key needed for the free tier.
Quick install — Claude Code
"mcpServers": {
"meok-watermark": {
"command": "uvx",
"args": ["meok-watermark-attest-mcp"]
},
"meok-omnibus": {
"command": "uvx",
"args": ["meok-omnibus-tracker-mcp"]
}
}
}
Restart Claude Code. Run /mcp to verify both servers connected. Same pattern works in Cursor (`.cursor/mcp.json`), Cline (`cline_mcp_settings.json`), and Windsurf.
The 8 MCPs
EU AI Act Article 50 Watermarking
meok-watermark-attest-mcpC2PA + invisible watermark + perceptual fingerprint per the Code of Practice (2 Aug 2026 cliff). HMAC-signed conformity attestation.
Attestation Verifier
meok-attestation-verifyCryptographically verifies any MEOK signed compliance certificate by cert_id. Stand-alone — works without contacting MEOK.
EU CRA Annex IV Classifier
meok-cra-annex-iv-classifier-mcpClassifies your product against the EU Cyber Resilience Act Annex III + Annex IV technical documentation requirements. 24h ENISA reporting from 11 Sep 2026.
EDPB Harmonised DPIA Template
meok-dpia-edpb-template-mcpAuto-fills the EDPB harmonised DPIA template (14 April 2026) for any AI system. Cross-maps to EU AI Act Article 26(9) FRIA requirements.
Governance Engine
meok-governance-engine-mcpCross-walks every EU AI Act article (4-72) to ISO/IEC 42001 Annex A controls + NIST AI RMF + Anthropic RSP. One control source, three frameworks.
MCP Injection Scanner
meok-mcp-injection-scan-mcpScans MCP servers for known prompt-injection + tool-poisoning vectors before you let an agent use them. Outputs signed scan certificate.
Germany NIS2 BSI Register
meok-nis2-de-register-mcpSection 30/32 entity classifier + BSI register payload generator. Late-filing rationale included for the 6 March 2026 deadline.
EU Digital Omnibus Deadline Tracker
meok-omnibus-tracker-mcpAuthoritative dated tracker for every EU AI Act / DORA / NIS2 / CRA / GDPR deadline + the 16-month omnibus delay (Annex III → Dec 2027).
Attestation API
POST to meok-attestation-api.vercel.app/sign with email + entity + regulation + score + findings, get back an HMAC-SHA256-signed certificate with a public verify URL.
Returns a cert_id + verify_url + signature_sha256_hmac. Auditors verify by curling the verify_url — no MEOK contact needed.
Pro (£79/mo) unlocks: custom verify domain, your own HMAC signing key, no "free tier" cert marker, Slack support, unlimited certs. See pricing →
Sources
- GitHub: github.com/CSOAI-ORG
- PyPI publisher: all 8 packages under user csoai
- MCP Registry: registry.modelcontextprotocol.io/...search=io.github.CSOAI-ORG
- Live Catalogue: meok-attestation-api.vercel.app/catalogue
- Verifier UI: meok-attestation-api.vercel.app/verify
MEOK AI Labs · CSOAI LTD · UK Companies House 16939677 · MIT-licensed MCPs