Air Blackbox MCP server
io.github.airblackbox/air-blackbox-mcp·v0.2.0·2 starsEU AI Act compliance scanner for Python AI agents. 14 tools across 6 articles.
2 stars67 downloads/wk
Reviews
Write oneNobody has reviewed Air Blackbox yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Air Blackbox tools (14)
write = sends, deletes, buys or postsRead from the package source without running it. The installed server may list more.
add_trust_layerGenerate modified code WITH the AIR trust layer added.
analyze_with_modelAnalyze code using the local air-compliance-v2 fine-tuned model via Ollama.
check_injectionScan text for prompt injection attacks.
classify_riskClassify a tool or function by EU AI Act risk level.
compliance_historyView past scan results, trends, and compliance history.
explain_articleGet a technical explanation of a specific EU AI Act article.
generate_compliance_reportGenerate a full markdown compliance report for AI agent code.
scan_biasScan code for AI bias and fairness issues.
scan_codeScan Python AI agent code for EU AI Act compliance (Articles 9-15).
scan_fileScan a single Python file for EU AI Act compliance.
scan_gdprScan code for GDPR compliance issues (data processing, consent, etc.).
scan_projectRecursively scan all Python files in a project directory.
suggest_fixGet specific code fix suggestions for a given EU AI Act article.
validate_actionValidate an agent action before execution (Article 14 compliance).
Public scan report
scanner v0.1.9 · 2026-09-27 · same rubric, same numbers if you re-run it
- Code scan6 source files scanned25/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitylocal package, no credentials required12/15
- Maintenancelast push 27 days ago15/15
- Maintainer identityregistry namespace matches repository owner7/10
How Air Blackbox compares
Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 91/100
- higher than 85% of 48,255 servers
- Tools
- 14
- the typical server has 7
- Tools that change things
- 0%
- typical: 0%. Fewer write tools means less an agent can break
- GitHub stars
- 2
- more than 75% of 28,688 servers
- Downloads a week
- 67
- more than 52% of 12,191 servers with a package
What its tools let an agent do: 12 read · 2 create
Install Air Blackbox in Claude Code, Cursor or VS Code
claude mcp add air-blackbox-mcp -- uvx air-blackbox-mcp
What the publisher says
From the Air Blackbox repository's README, as published. We do not edit it. Read it on GitHub
<!-- mcp-name: io.github.airblackbox/air-blackbox-mcp -->
AIR Blackbox MCP Server
EU AI Act compliance scanning for Claude Desktop, Claude Code, Cursor, and any MCP-compatible client.
Unlike other compliance scanners that only report problems, AIR Blackbox also remediates - generating working code fixes, trust layer integrations, GDPR compliance checks, bias analysis, and full compliance reports. Under the hood, the scanning feeds into air-trust, a cryptographic audit chain (HMAC-SHA256) with Ed25519 signed handoffs that ensures compliance data integrity.
14 Tools (10 base + 4 SDK-powered)
Supported Frameworks
LangChain, CrewAI, AutoGen, OpenAI, Haystack, LlamaIndex, Semantic Kernel, Google ADK, Claude Agent SDK, and generic RAG pipelines.
Installation
Basic (10 tools, no SDK features)
pip install air-blackbox-mcpWorks standalone with just the lightweight built-in scanner.
Full (14 tools with GDPR, bias, validation, and history)
pip install air-blackbox-mcp[full]Installs the full air-blackbox SDK (>=1.13,<2) for advanced compliance features. The floor is the version this package is tested against, and the major cap means a 2.x SDK cannot silently change your findings.
MCP SDK compatibility (mcp 2.0)
This package supports both MCP SDK generations — mcp>=1.0, no upper bound.
mcp 2.0 removed mcp.server.fastmcp and replaced FastMCP with MCPServer. Rather than pin away from it, the server detects which generation is installed and binds to the right class, so it runs on 1.x and 2.x alike:
Both paths are covered by tests that launch python -m airblackboxmcp as a real subprocess and drive it over stdio — the same way Claude Desktop and Cursor do — and the full suite runs green on both.
If you are on 0.2.3, upgrade. That version declared an unpinned mcp>=1.0.0, so once mcp 2.0 shipped, every fresh install produced a server that died on import:
ModuleNotFoundError: No module named 'mcp.server.fastmcp'pip install --upgrade air-blackbox-mcp0.2.4 fixed it by capping at mcp<2; 0.3.0 removes the cap entirely, so this server no longer conflicts with anything built for mcp 2.x sharing the same environment.
Claude Desktop Setup
Edit ~/Library/Application Support/Claude/claudedesktopconfig.json:
{
"mcpServers": {
"air-blackbox": {
"command": "python3",
"args": ["-m", "air_blackbox_mcp"]
}
}
}Restart Claude Desktop. The 14 tools will appear automatically.
Claude Code / Cursor Setup
Shortened. The full README is on GitHub.
Nothing above is checked by us. What we check is on the safety report.
Air Blackbox: common questions
- Is Air Blackbox MCP server safe?
- Yes, by our scan: it is graded A (91/100). Read the Air Blackbox safety report
- How do I install Air Blackbox?
- It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
- Does Air Blackbox need an API key?
- Not as far as the registry entry and our scan can tell: no credentials are declared or required.
- Is Air Blackbox maintained?
- The last commit was 65 days ago (2026-08-31). The latest release is v0.2.0.
- How does Air Blackbox compare with other MCP servers?
- safety score 91/100 (higher than 85% of 48,255 servers); tools 14 (the typical server has 7); tools that change things 0% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.