Conformy
- conformy/mcp-server
Conformy is an MCP server that classifies AI systems under the EU AI Act and NIS2 and helps draft compliance documentation.
About
Conformy is an MCP server that helps developers and small teams map AI products to EU AI Act requirements and NIS2 duties, then surface obligations and draft documentation through agent tools. If you are shipping an agentic SaaS, copilot, or automated decision feature to European users, guessing risk tier and missing annex references can block launch or create rework. Registering Conformy gives your coding agent a structured compliance assistant for classification and checklist-style obligations—not a substitute for legal counsel, but a faster way to generate drafts and gap lists before release. It fits the Ship security shelf and remains relevant in Operate when rules or system scope change. Install via the published npm MCP package and use it when scoping EU exposure during validation or hardening before go-live.
- EU AI Act system classification workflows via @conformy/mcp-server npm package (v0.3.5)
- NIS2 obligation checking aligned to European cybersecurity duties
- Assisted drafting of compliance documentation from agent prompts
- stdio MCP transport for Claude Code-style governance reviews
- Targets builders shipping AI features into EU-regulated contexts
Conformy by the numbers
- Data as of Jul 7, 2026 (Skillselion catalog sync)
claude mcp add conformy -- npx -y @conformy/mcp-serverAdd your badge
Show developers this MCP server is listed on Skillselion. Paste this into your README.
| Package | @conformy/mcp-server |
|---|---|
| Transport | STDIO |
| Auth | None |
| Repository | conformy/mcp-server ↗ |
What it does
Classify your AI product under EU AI Act and NIS2, list obligations, and draft compliance documentation from the agent.
Who is it for?
Best when you're shipping AI-powered SaaS or agents with EU customers and need structured regulatory scaffolding before launch.
Skip if: US-only products with no EU AI or critical-infrastructure exposure, or teams that already retain dedicated compliance counsel and GRC tooling.
What you get
After install, your agent can run Conformy classification and obligation checks and produce draft compliance docs you refine with counsel.
- AI system classification under EU AI Act framing
- NIS2-oriented obligation summaries
- Draft compliance documentation snippets for legal review
By the numbers
- Server version 0.3.5
- npm identifier: @conformy/mcp-server
- Two regulatory frameworks in scope: EU AI Act and NIS2
Recommended MCP Servers
1Claw VaultHSM-backed vault secrets for AI agents (JIT fetch) plus prompt-injection and threat scanning.2
1passwordMCP server for 1Password service accounts — tools and resources for vaults and credentials18
402sentinel McpAssess an x402 counterparty's risk BEFORE paying: allow/review/block, scored on-chain (Base).1
A2adependencyinspector McpRemote MCP for A2A dependency inspector MCP, structured receipts, audit logs, and reviewer-ready evi
A2a Governance Bridge McpA2A Governance Bridge MCP server.A2aidentitytoll McpRemote MCP for A2A caller identity, scope policy, verdict receipts, and audit history.How it compares
Compliance-oriented MCP assistant, not a vulnerability scanner or pentest skill.
FAQ
Who is Conformy for?
Developers and small teams launching AI systems who must reason about EU AI Act and NIS2 obligations from inside their agent workflow.
When should I use Conformy?
Use it before Ship and during Operate iterations when you classify system risk, verify obligations, or need draft compliance documentation for EU markets.
How do I add Conformy to my agent?
Add the @conformy/mcp-server stdio MCP entry from npm to your host configuration, install dependencies per the repo, and expose tools to your compliance prompts.