Governmyai MCP server
io.github.governmyai/mcp-server·v0.1.4AI compliance obligations across EU AI Act, ISO 42001, Colorado AI Act, NIST, HIPAA, SOX, FTC
0 stars30 downloads/wk
Reviews
Write oneNobody has reviewed Governmyai yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Governmyai tools (6)
write = sends, deletes, buys or postsRead from the package source without running it. The installed server may list more.
classify_risk_tierClassify an AI system's EU AI Act risk tier (unacceptable / high / limited / minimal) given its use cases, industry, and Annex III category context. Returns the tier, rationale, and humanReviewRequired flag. Use this before get_obligations if the risk tier is not known.
get_cross_referencesFetch the cross-framework mappings for a specific obligation — i.e., which ISO 42001 clauses, NIST AI RMF dimensions, or other framework obligations are satisfied by the same work. Useful for reducing duplicate compliance effort across frameworks.
get_evidence_requirementsFetch the required evidence artifacts for one or more obligations. Useful when planning what documentation or records need to be produced to demonstrate compliance with a set of obligations.
get_obligationsQuery the GovernMy rules engine for regulatory obligations that apply to an AI system given its context (risk tier, role, industry, use cases, lifecycle phase, etc.). Returns a list of applicable obligations across EU AI Act, ISO 42001, Colorado AI Act, NIST AI RMF, HIPAA, SOX, and FTC frameworks, plus a humanReviewRequired flag.
get_ruleFetch the full canonical payload for a single obligation by its ID (e.g. "eu-ai-act.art-10.data-governance"). Returns source text, required controls, required evidence, human review rules, cross-framework mappings, and GovernMy interpretation guidance.
list_frameworksList the regulatory frameworks the GovernMy rules engine covers, with metadata (jurisdiction, content tier, rule count). Use to orient before diving into obligations.
Public scan report
scanner v0.1.9 · 2026-09-27 · same rubric, same numbers if you re-run it
- Code scan6 source files scanned25/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitystatic API keys via environment variables6/15
- Maintenancelast push 155 days ago8/15
- Maintainer identityregistry namespace matches repository owner7/10
How Governmyai compares
Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 71/100
- higher than 36% of 48,255 servers
- Tools
- 6
- the typical server has 7
- Tools that change things
- 0%
- typical: 0%. Fewer write tools means less an agent can break
- Downloads a week
- 30
- more than 18% of 12,191 servers with a package
What its tools let an agent do: 6 read
Install Governmyai in Claude Code, Cursor or VS Code
Runs npx -y @governmyai/mcp-server on your machine. Read the scan report first; the gateway never runs local packages.
claude mcp add mcp-server -- npx -y @governmyai/mcp-server
What the publisher says
From the Governmyai repository's README, as published. We do not edit it. Read it on GitHub
@governmyai/mcp-server
GovernMy.ai MCP server — query AI governance obligations from Claude Desktop, Cursor, or any MCP-compatible client.
Covers EU AI Act, ISO 42001, Colorado AI Act, NIST AI RMF, HIPAA (AI provisions), SOX (AI provisions), and FTC AI guidance.
What this does
This MCP server gives an AI assistant (like Claude) the ability to query GovernMy's rules engine directly while you're working. You can ask questions like:
- "What EU AI Act obligations apply if I build a hiring AI for the EU?"
- "Which frameworks does this cover?"
- "What evidence do I need for EU AI Act Article 10 data governance?"
- "Does my ISO 42001 Clause 6 work also cover any NIST AI RMF functions?"
...and get structured regulatory obligations back as part of the conversation.
Important: this tool returns obligations, not verdicts. It never tells you "you're compliant" or "you're not compliant" — those are determinations only a human reviewer can make. Every response includes a humanReviewRequired flag where applicable.
Copy-paste into Claude
After installing + restarting, try one of these:
- "What are the mandatory-review obligations for a high-risk hiring AI deployed in the EU?"
- "Show me the evidence requirements for EU AI Act Articles 11 and 14."
- "Compare EU AI Act and Colorado AI Act obligations for a credit-scoring AI."
- "Does my HR chatbot trigger any regulatory obligations? It does resume screening."
- "What ISO 42001 Annex A controls do I need for a generative AI system?"
- "Which NIST AI RMF dimensions does EU AI Act Art. 10 data governance also satisfy?"
- "I'm building a medical imaging AI — what obligations apply under HIPAA AI provisions?"
- "List every obligation flagged as cannotBeAutoSatisfied across all frameworks."
Install + configure (Claude Desktop)
- Register for an API key at https://governmy.ai/developers (free tier available)
- Open your Claude Desktop config file:
- macOS: ~/Library/Application Support/Claude/claudedesktopconfig.json
- Windows: %APPDATA%\Claude\claudedesktopconfig.json
- Add the GovernMy server to your mcpServers object:
{
"mcpServers": {
"governmy": {
"command": "npx",
"args": ["-y", "@governmyai/mcp-server"],
"env": {
"GOVERNMY_API_KEY": "ooa_live_your_key_here"
}
}
}
}- Restart Claude Desktop. Ask Claude: "What governance frameworks does GovernMy cover?" — it should call the list_frameworks tool.
Install + configure (Cursor)
Add the server to your Cursor MCP settings (Settings → MCP Servers):
- Command: npx
- Args: -y @governmyai/mcp-server
- Environment: GOVERNMYAPIKEY=ooaliveyourkeyhere
Configure (other MCP clients)
Any client that speaks stdio MCP can run this server. Set GOVERNMYAPIKEY in the client's env for the server process.
Environment variables
Tools exposed
- getobligations** — query obligations that apply to an AI system given context (risk tier, role, industry, etc.)
- classifyrisktier — classify an AI system's EU AI Act risk tier (unacceptable / high / limited / minimal)
- listframeworks** — list the frameworks the engine covers with metadata
- getrule** — fetch the full payload for a single obligation by id
- getevidencerequirements — fetch required evidence artifacts for a set of obligations
- getcrossreferences — fetch cross-framework mappings for an obligation
Every tool response includes a notAVerdict notice reminding the AI assistant that obligations are not compliance verdicts.
What this is not
Shortened. The full README is on GitHub.
Nothing above is checked by us. What we check is on the safety report.
Governmyai: common questions
- Is Governmyai MCP server safe?
- Mostly: it is graded B (71/100). Read the Governmyai safety report
- How do I install Governmyai?
- It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
- Does Governmyai need an API key?
- Yes. The registry entry asks for
GOVERNMY_API_KEY. - Is Governmyai maintained?
- The last commit was 193 days ago (2026-04-25). The latest release is v0.1.4.
- How does Governmyai compare with other MCP servers?
- safety score 71/100 (higher than 36% of 48,255 servers); tools 6 (the typical server has 7); tools that change things 0% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.