io.github.ark-forge/mcp-eu-ai-act

Est-ce que io.github.ark-forge/mcp-eu-ai-act est sûr ?

Au dernier audit MCP Hub, le serveur MCP « io.github.ark-forge/mcp-eu-ai-act » est classé « Non encore testé ». Référencé dans l'annuaire. Seul le pentest comportemental fait foi, et il n'a pas encore été exécuté sur ce serveur. Le verdict est réévalué en continu ; consultez la fiche pour l'état à jour.

Méthode : MCP Hub analyse la description de chaque outil (couche 1) et, pour le verdict fort, exécute le serveur dans une micro-VM isolée avec leurres et réseau bloqué (couche 2). On publie des noms et des compteurs, jamais le contenu brut renvoyé par un outil.

Les 16 outils

• certify_compliance_report≈ 171 tokens

  Make your compliance report tamper-proof for Art. 12 audit trail — pass the report JSON, get back a proof_id and a public verification URL you can hand to auditors. Certified plan required. Run generate_report() first to produce the report.

  Paramètres, retour & exemple (2)

  Paramètres

  • report_data · string · requis
    JSON string of the compliance report to certify.
  • trust_layer_key · string · requis
    ArkForge Trust Layer API key.

  Exemple d'appel

  {"name": "certify_compliance_report", "arguments": {"report_data": "texte", "trust_layer_key": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• check_compliance≈ 258 tokens

  Check whether your project passes or fails each EU AI Act requirement — no arguments, 5 seconds. See exactly which articles you violate (Art. 52 transparency, Art. 11 documentation, Art. 14 human oversight, Art. 15 robustness) and get step-by-step fix instructions for every gap. Call combined_compliance_report() for EU AI Act + GDPR together.

  Paramètres, retour & exemple (2)

  Paramètres

  • project_path · string · optionnel
    Path to the project root. Omit entirely or pass '.' to check the current working directory.
  • risk_category · ? · optionnel
    EU AI Act risk category: 'minimal', 'limited' (default, fits most AI apps), 'high', or 'unacceptable'.

  Exemple d'appel

  {"name": "check_compliance", "arguments": {"project_path": "texte", "risk_category": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• combined_compliance_report≈ 372 tokens

  Run this before your next deploy. One call reveals every EU AI Act + GDPR gap in your codebase — no arguments, no setup, under 10 seconds, free. Detects AI frameworks and personal data flows, flags where both laws overlap, returns pass/fail per article with a prioritized fix list. EU AI Act fines up to 35M EUR, GDPR up to 20M EUR. Replaces separate scan_project() and gdpr_scan_project() calls.

  Paramètres, retour & exemple (3)

  Paramètres

  • project_path · string · optionnel
    Path to the project root. Omit entirely or pass '.' to scan the current working directory — no arguments required.
  • risk_category · ? · optionnel
    EU AI Act risk category: 'minimal', 'limited' (default, fits most AI apps), 'high', or 'unacceptable'.
  • processing_role · ? · optionnel
    GDPR processing role: 'controller' (default, most common), 'processor', or 'minimal_processing'.

  Exemple d'appel

  {"name": "combined_compliance_report", "arguments": {"project_path": "texte", "risk_category": "texte", "processing_role": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• gdpr_check_compliance≈ 257 tokens

  Check whether your project passes or fails each GDPR requirement — no arguments. See pass/fail for lawful basis (Art. 6), consent (Art. 7), data subject rights (Art. 15–22), security (Art. 32), and breach notification (Art. 33–34) with fix instructions for every gap. GDPR fines reach 20M EUR or 4% turnover. For EU AI Act + GDPR together, call combined_compliance_report().

  Paramètres, retour & exemple (2)

  Paramètres

  • project_path · string · optionnel
    Path to the project root. Leave empty or pass '.' to check the current directory.
  • processing_role · ? · optionnel
    GDPR role: controller, processor, or minimal_processing.

  Exemple d'appel

  {"name": "gdpr_check_compliance", "arguments": {"project_path": "texte", "processing_role": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• gdpr_generate_report≈ 230 tokens

  Generate the GDPR report your DPO needs — no arguments. Combines personal data inventory, gap analysis, and remediation steps in one structured document for DPO review, audit prep, or regulatory response. For EU AI Act + GDPR together, call combined_compliance_report().

  Paramètres, retour & exemple (2)

  Paramètres

  • project_path · string · optionnel
    Path to the project root. Leave empty or pass '.' to scan the current directory.
  • processing_role · ? · optionnel
    GDPR role: controller, processor, or minimal_processing.

  Exemple d'appel

  {"name": "gdpr_generate_report", "arguments": {"project_path": "texte", "processing_role": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• gdpr_generate_templates≈ 196 tokens

  Get pre-filled GDPR templates your organization actually needs — no arguments. Privacy Policy, DPIA, Records of Processing Activities (ROPA), and Data Breach Procedure tailored to your processing role. Fill in [bracketed] sections. Run gdpr_check_compliance() first to see which documents you're missing.

  Paramètres, retour & exemple (1)

  Paramètres

  • processing_role · ? · optionnel
    GDPR role: controller, processor, or minimal_processing.

  Exemple d'appel

  {"name": "gdpr_generate_templates", "arguments": {"processing_role": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• gdpr_scan_project≈ 166 tokens

  Find every file in your project that touches personal data — no arguments, 5 seconds, free. Detects PII fields, cookies, tracking pixels, analytics SDKs, and consent flows. Returns flagged files with data categories and applicable GDPR articles. GDPR fines reach 20M EUR or 4% turnover. For EU AI Act + GDPR together, call combined_compliance_report().

  Paramètres, retour & exemple (1)

  Paramètres

  • project_path · string · optionnel
    Path to the project root. Leave empty or pass '.' to scan the current directory.

  Exemple d'appel

  {"name": "gdpr_scan_project", "arguments": {"project_path": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• generate_annex4_package≈ 228 tokens

  Build the Annex IV evidence package your auditor needs for high-risk AI — no arguments. All 8 mandatory sections auto-populated from your project scan, SHA-256 integrity hash included. High-risk rules apply Aug 2026. Pro plan required.

  Paramètres, retour & exemple (3)

  Paramètres

  • project_path · string · optionnel
    Path to the project root. Leave empty or pass '.' to scan the current directory.
  • trust_layer_key · string · optionnel
    ArkForge Trust Layer API key. Required if sign_with_trust_layer is True.
  • sign_with_trust_layer · boolean · optionnel
    Certify the package via Trust Layer for Art. 12 audit trail.

  Exemple d'appel

  {"name": "generate_annex4_package", "arguments": {"project_path": "texte", "trust_layer_key": "texte", "sign_with_trust_layer": true}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• generate_compliance_roadmap≈ 261 tokens

  Get a prioritized, week-by-week plan to close every compliance gap before Aug 2027 — no arguments. Auto-scans your project, ranks fixes by impact, sequences quick wins first, tells you whether your deadline is achievable. Pro plan required — run check_compliance() for a free gap summary.

  Paramètres, retour & exemple (3)

  Paramètres

  • deadline · string · optionnel
    Target compliance deadline in ISO format.
  • project_path · string · optionnel
    Path to the project root. Leave empty or pass '.' to scan the current directory.
  • risk_category · ? · optionnel
    EU AI Act risk category.

  Exemple d'appel

  {"name": "generate_compliance_roadmap", "arguments": {"deadline": "texte", "project_path": "texte", "risk_category": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• generate_compliance_templates≈ 212 tokens

  Stop writing compliance docs from scratch — get pre-filled templates for risk management, technical documentation, transparency notice, and human oversight policy tailored to your risk category. High-risk systems get all 6 mandatory documents. Save to docs/, fill in [bracketed] sections. Run check_compliance() first to see which documents you're missing.

  Paramètres, retour & exemple (1)

  Paramètres

  • risk_category · ? · optionnel
    EU AI Act risk category. Templates are most useful for 'high' risk.

  Exemple d'appel

  {"name": "generate_compliance_templates", "arguments": {"risk_category": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• generate_report≈ 226 tokens

  Generate the compliance report your legal team is asking for — no arguments. One call auto-detects AI frameworks, runs gap analysis, and produces a structured remediation plan ready for legal review or DPIA attachment. No API key needed.

  Paramètres, retour & exemple (2)

  Paramètres

  • project_path · string · optionnel
    Path to the project root. Omit entirely or pass '.' to scan the current working directory.
  • risk_category · ? · optionnel
    EU AI Act risk category: 'minimal', 'limited' (default), 'high', or 'unacceptable'.

  Exemple d'appel

  {"name": "generate_report", "arguments": {"project_path": "texte", "risk_category": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• get_pricing≈ 87 tokens

  See pricing and features for every plan — Free (10 scans/day, full reports), Pro (29 EUR/mo, unlimited + CI/CD), Certified (cryptographic audit trail). No arguments. Call register_free_key() to activate your free API key.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "get_pricing", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• register_free_key≈ 151 tokens

  Activate a free API key — unlocks scan history and CI/CD integration. Pass the user's email, no password or credit card. IMPORTANT: ask the user to type their email first, wait for their reply, then call this with the exact email they typed. Do NOT pass a placeholder or fabricated email.

  Paramètres, retour & exemple (1)

  Paramètres

  • email · string · requis
    The user's email address. MUST come from the user's message, not generated by the agent.

  Exemple d'appel

  {"name": "register_free_key", "arguments": {"email": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• scan_project≈ 241 tokens

  Find out in 5 seconds if your project triggers EU AI Act obligations — no arguments, no setup. Scans for 22 AI/ML frameworks (OpenAI, Anthropic, LangChain, HuggingFace, PyTorch, TensorFlow, scikit-learn…), returns your risk category and the legal actions required before you ship. Enforcement live since Feb 2025 — fines up to 35M EUR. For EU AI Act + GDPR together, call combined_compliance_report() instead.

  Paramètres, retour & exemple (2)

  Paramètres

  • project_path · string · optionnel
    Path to the project root. Omit entirely or pass '.' to scan the current working directory — no path discovery needed.
  • follow_imports · boolean · optionnel
    When true, also flag files that transitively import AI-flagged modules. Default false is fine for most projects.

  Exemple d'appel

  {"name": "scan_project", "arguments": {"project_path": "texte", "follow_imports": true}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• suggest_risk_category≈ 173 tokens

  Describe what your AI system does in plain language — get back your EU AI Act risk tier, the articles that apply, and your first compliance step. Returns matched category (minimal/limited/high/unacceptable) with confidence level and triggering risk indicators. No project scan needed, no API key.

  Paramètres, retour & exemple (1)

  Paramètres

  • system_description · string · requis
    Short description of what the AI system does, e.g. 'chatbot for customer support' or 'CV screening tool for recruitment'.

  Exemple d'appel

  {"name": "suggest_risk_category", "arguments": {"system_description": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• validate_api_key≈ 94 tokens

  Check your API key status — returns plan tier (free/pro/certified), email, and usage stats (total scans, last scan date).

  Paramètres, retour & exemple (1)

  Paramètres

  • api_key · string · requis
    The API key to validate.

  Exemple d'appel

  {"name": "validate_api_key", "arguments": {"api_key": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

C'est votre serveur ?

Revendiquez-le sur l'espace créateur (preuve GitHub, domaine ou npm) pour afficher le badge « propriétaire vérifié » et lancer un pentest comportemental à la demande afin d'obtenir le badge « Vérifié ».

Créer un compte / revendiquer →

Source

https://mcp.arkforge.tech/mcp