Rubric Protocol MCP server
AI compliance attestation for EU AI Act, SR 11-7, HIPAA. Free local tier, no key required.
1 stars73 downloads/wk
Reviews
Write oneNobody has reviewed Rubric Protocol yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Rubric Protocol tools (4)
write = sends, deletes, buys or postsRead from the package source without running it. The installed server may list more.
attestAttest an AI decision to Rubric Protocol (HCS). Returns attestationId.
get_proofGenerate a ZK Merkle inclusion proof (Noir/Barretenberg) for an attestation.
register_agentRegister an agent and receive a free Rubric developer API key via email.
verifyVerify a Rubric attestation by ID. Checks Merkle inclusion and HCS anchoring.
Public scan report
scanner v0.1.9 · 2026-09-27 · same rubric, same numbers if you re-run it
- Code scan6 source files scanned25/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitystatic API keys via environment variables6/15
- Maintenancelast push 70 days ago12/15
- Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
How Rubric Protocol compares
Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 78/100
- higher than 57% of 48,243 servers
- Tools
- 4
- the typical server has 7
- Tools that change things
- 0%
- typical: 0%. Fewer write tools means less an agent can break
- GitHub stars
- 1
- more than 65% of 28,706 servers
- Downloads a week
- 73
- more than 54% of 12,306 servers with a package
What its tools let an agent do: 3 read · 1 create
Install Rubric Protocol in Claude Code, Cursor or VS Code
Runs npx -y @rubric-protocol/mcp-server on your machine. Read the scan report first; the gateway never runs local packages.
claude mcp add rubric-protocol -- npx -y @rubric-protocol/mcp-server
What the publisher says
From the Rubric Protocol repository's README, as published. We do not edit it. Read it on GitHub
Rubric Protocol MCP Server
AI compliance attestation for Claude Desktop, Cursor, Windsurf, and any MCP-compatible host.
Every AI decision PQ-signed, Merkle-chained, and anchored to Hedera mainnet. Built for EU AI Act Article 12, SR 11-7, HIPAA, and NIST AI RMF.
Quickstart
Add to your claudedesktopconfig.json:
{ "mcpServers": { "rubric": { "command": "npx", "args": ["-y", "@rubric-protocol/mcp-server@latest"], "env": { "RUBRICAPIKEY": "your-key-here" } } } }
Free local tier, no key required:
{ "mcpServers": { "rubric": { "command": "npx", "args": ["-y", "@rubric-protocol/mcp-server@latest"] } } }
Restart Claude Desktop. Rubric tools appear automatically.
Tools
47 tools across 8 modules. Default profile exposes the core 8; set RUBRICMCPMODULES=all (or a comma list, e.g. core,compliance) for more.
core (default): attest, verify, getproof, registeragent, status, frameworkdetect, costestimate, bundlequery attestation: attestbatch, attestationstatus, attestationget, pipelinetrace, bundleget verification: verifychain, verifytree, verifybatch, zkverify, zkproofget, ledgerlookup compliance: annex4generate, annex4status, c2paattest, c2paassertion, credentialissue, credentialget, compliancequery, compliancereport, filinggenerate regulatory: gpairegister, gpaidownstream, nistrmfcertify, nistrmfstatus, jurisdictionmap, jurisdictionassess, jurisdictiongap governance: incidentcreate, incidentattest, incidentresolve, humanreview, adversarialsessionstart, adversarialsessionconclude registry: agentadd, agentget, modelregister, modelget ops: usagereport, auditortokencreate
The only MCP tools whose outputs are ML-DSA-65 (FIPS 204) signed, Hedera-anchored, and exportable as EU AI Act Annex IV, OSCAL, C2PA, and W3C Verifiable Credential evidence.
Get a Free API Key
Run register_agent directly inside Claude Desktop, no browser required. Or visit https://rubric-protocol.com
Regulatory Coverage
EU AI Act | SR 11-7 | NIST AI RMF | HIPAA | NYC Local Law 144 | ECOA Reg B
Links
https://rubric-protocol.com https://www.npmjs.com/package/@rubric-protocol/mcp-server https://registry.modelcontextprotocol.io
Nothing above is checked by us. What we check is on the safety report.
Rubric Protocol: common questions
- Is Rubric Protocol MCP server safe?
- Mostly: it is graded B (78/100). Read the Rubric Protocol safety report
- How do I install Rubric Protocol?
- It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
- Does Rubric Protocol need an API key?
- Yes. The registry entry asks for
RUBRIC_API_KEY. - Is Rubric Protocol maintained?
- The last commit was 109 days ago (2026-07-19). The latest release is v2.0.2.
- What can I use instead of Rubric Protocol?
- Servers from other publishers that do the same job: EdgarTools MCP server.
- How does Rubric Protocol compare with other MCP servers?
- safety score 78/100 (higher than 57% of 48,243 servers); tools 4 (the typical server has 7); tools that change things 0% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.
Alternatives to Rubric Protocol
Same job from other publishers: the closest match first, then the best rated.
- EdgarToolsOpen-source SEC EDGAR toolkit — 13 tools, 7 prompts, every filing type. No API key required.not reviewedWidely usedA