MCP.Market

Governmyai MCP server

by governmyai·io.github.governmyai/mcp-server·v0.1.4

AI compliance obligations across EU AI Act, ISO 42001, Colorado AI Act, NIST, HIPAA, SOX, FTC

B71/100grade B
What users say
No reviews yet
Be the first
Safety scan
B71/100

full report

Adoption
New

0 stars30 downloads/wk

Reviews

Write one

Nobody has reviewed Governmyai yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Governmyai tools (6)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

  • classify_risk_tier

    Classify an AI system's EU AI Act risk tier (unacceptable / high / limited / minimal) given its use cases, industry, and Annex III category context. Returns the tier, rationale, and humanReviewRequired flag. Use this before get_obligations if the risk tier is not known.

  • get_cross_references

    Fetch the cross-framework mappings for a specific obligation — i.e., which ISO 42001 clauses, NIST AI RMF dimensions, or other framework obligations are satisfied by the same work. Useful for reducing duplicate compliance effort across frameworks.

  • get_evidence_requirements

    Fetch the required evidence artifacts for one or more obligations. Useful when planning what documentation or records need to be produced to demonstrate compliance with a set of obligations.

  • get_obligations

    Query the GovernMy rules engine for regulatory obligations that apply to an AI system given its context (risk tier, role, industry, use cases, lifecycle phase, etc.). Returns a list of applicable obligations across EU AI Act, ISO 42001, Colorado AI Act, NIST AI RMF, HIPAA, SOX, and FTC frameworks, plus a humanReviewRequired flag.

  • get_rule

    Fetch the full canonical payload for a single obligation by its ID (e.g. "eu-ai-act.art-10.data-governance"). Returns source text, required controls, required evidence, human review rules, cross-framework mappings, and GovernMy interpretation guidance.

  • list_frameworks

    List the regulatory frameworks the GovernMy rules engine covers, with metadata (jurisdiction, content tier, rule count). Use to orient before diving into obligations.

Public scan report

scanner v0.1.9 · 2026-09-27 · same rubric, same numbers if you re-run it

no findings
  • Code scan6 source files scanned25/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitystatic API keys via environment variables6/15
  • Maintenancelast push 155 days ago8/15
  • Maintainer identityregistry namespace matches repository owner7/10
Overall 71/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How Governmyai compares

Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
71/100
higher than 36% of 48,255 servers
Tools
6
the typical server has 7
Tools that change things
0%
typical: 0%. Fewer write tools means less an agent can break
Downloads a week
30
more than 18% of 12,191 servers with a package

What its tools let an agent do: 6 read

Install Governmyai in Claude Code, Cursor or VS Code

Runs npx -y @governmyai/mcp-server on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add mcp-server -- npx -y @governmyai/mcp-server
Add to Cursor

What the publisher says

From the Governmyai repository's README, as published. We do not edit it. Read it on GitHub

@governmyai/mcp-server

GovernMy.ai MCP server — query AI governance obligations from Claude Desktop, Cursor, or any MCP-compatible client.

Covers EU AI Act, ISO 42001, Colorado AI Act, NIST AI RMF, HIPAA (AI provisions), SOX (AI provisions), and FTC AI guidance.

What this does

This MCP server gives an AI assistant (like Claude) the ability to query GovernMy's rules engine directly while you're working. You can ask questions like:

  • "What EU AI Act obligations apply if I build a hiring AI for the EU?"
  • "Which frameworks does this cover?"
  • "What evidence do I need for EU AI Act Article 10 data governance?"
  • "Does my ISO 42001 Clause 6 work also cover any NIST AI RMF functions?"

...and get structured regulatory obligations back as part of the conversation.

Important: this tool returns obligations, not verdicts. It never tells you "you're compliant" or "you're not compliant" — those are determinations only a human reviewer can make. Every response includes a humanReviewRequired flag where applicable.

Copy-paste into Claude

After installing + restarting, try one of these:

  • "What are the mandatory-review obligations for a high-risk hiring AI deployed in the EU?"
  • "Show me the evidence requirements for EU AI Act Articles 11 and 14."
  • "Compare EU AI Act and Colorado AI Act obligations for a credit-scoring AI."
  • "Does my HR chatbot trigger any regulatory obligations? It does resume screening."
  • "What ISO 42001 Annex A controls do I need for a generative AI system?"
  • "Which NIST AI RMF dimensions does EU AI Act Art. 10 data governance also satisfy?"
  • "I'm building a medical imaging AI — what obligations apply under HIPAA AI provisions?"
  • "List every obligation flagged as cannotBeAutoSatisfied across all frameworks."

Install + configure (Claude Desktop)

  1. Register for an API key at https://governmy.ai/developers (free tier available)
  2. Open your Claude Desktop config file:
  • macOS: ~/Library/Application Support/Claude/claudedesktopconfig.json
  • Windows: %APPDATA%\Claude\claudedesktopconfig.json
  1. Add the GovernMy server to your mcpServers object:
{
  "mcpServers": {
    "governmy": {
      "command": "npx",
      "args": ["-y", "@governmyai/mcp-server"],
      "env": {
        "GOVERNMY_API_KEY": "ooa_live_your_key_here"
      }
    }
  }
}
  1. Restart Claude Desktop. Ask Claude: "What governance frameworks does GovernMy cover?" — it should call the list_frameworks tool.

Install + configure (Cursor)

Add the server to your Cursor MCP settings (Settings → MCP Servers):

  • Command: npx
  • Args: -y @governmyai/mcp-server
  • Environment: GOVERNMYAPIKEY=ooaliveyourkeyhere

Configure (other MCP clients)

Any client that speaks stdio MCP can run this server. Set GOVERNMYAPIKEY in the client's env for the server process.

Environment variables

Tools exposed

  • getobligations** — query obligations that apply to an AI system given context (risk tier, role, industry, etc.)
  • classifyrisktier — classify an AI system's EU AI Act risk tier (unacceptable / high / limited / minimal)
  • listframeworks** — list the frameworks the engine covers with metadata
  • getrule** — fetch the full payload for a single obligation by id
  • getevidencerequirements — fetch required evidence artifacts for a set of obligations
  • getcrossreferences — fetch cross-framework mappings for an obligation

Every tool response includes a notAVerdict notice reminding the AI assistant that obligations are not compliance verdicts.

What this is not

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

Governmyai: common questions

Is Governmyai MCP server safe?
Mostly: it is graded B (71/100). Read the Governmyai safety report
How do I install Governmyai?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does Governmyai need an API key?
Yes. The registry entry asks for GOVERNMY_API_KEY.
Is Governmyai maintained?
The last commit was 193 days ago (2026-04-25). The latest release is v0.1.4.
How does Governmyai compare with other MCP servers?
safety score 71/100 (higher than 36% of 48,255 servers); tools 6 (the typical server has 7); tools that change things 0% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.