Rekvira: EU regulation pinpoints for compliance AI MCP server

• connectFree

  Connect keylessly — no email, no API key. Returns trial_id for record_assessment / list_assessments and private workflow tools in this client. Call this first, then start_here or list_regulations.

• delete_workflowwrite actionFree

  Delete one private workflow for this trial_id. It cannot delete a shipped playbook or a draft owned by another trial.

• get_workflowFree

  Full step-by-step playbook for one workflow id from list_workflows. Follow the named tools (search_regulation, read_unit, verify_citation, …) rather than summarising the playbook.

• list_assessmentsFree

  List this trial_id's recorded assessments, newest first. Pass the trial_id from connect(). Use when resuming a multi-week DPIA or applicability review. Never invent rows for another trial.

• list_regulationsFree

  List regulations in the registry and whether corpus JSON is loaded. Then search_regulation, search_regulations, or list_workflows for a named process.

• list_workflowsFree

  Playbook library for compliance-officer workflows — high-risk triage, DORA ICT review, cross-reg scans, vendor questionnaires. Read a playbook before improvising a process. Pass trial_id from connect to list your own private drafts beside the shipped library. Then call get_workflow with workflow_id from this list.

• lookup_obligationsFree

  Articles whose official title names a role as an obligation addressee (e.g. role='deployer', optional system_class='high-risk'). Heading index, not annotated metadata — then read_unit the article. role accepts the word a title uses (deployer, provider, importer, operator, authorised representative, controller, processor, joint controller, data subject, or supervisory authority on gdpr). notified body on eu-ai-act returns Arts 34/45. Read also_named (Arts 31 through 38) for related titles without 'obligation'. When result_count is 0, read also_named before concluding none match (e.g. Arts 22/54 on eu-ai-act authorised representative; Arts 63/94 on eu-ai-act operator; Arts 29/39 on eu-ai-act conformity assessment body; Arts 76/85 on eu-ai-act market surveillance authority; Art 100 on eu-ai-act union institution; Arts 53/55/88 on eu-ai-act GPAI provider / general-purpose AI provider / provider of general-purpose AI models; Arts 13/14/21/22 on cra manufacturer / manufacturer of products with digital elements; when also_named is empty read heading_note and use search_regulation; Arts 24/26/27/29/79 on gdpr controller; Arts 27/28/29/79 on gdpr processor; Art 26 on gdpr joint controller; Arts 12/13/14/15/34/80 on gdpr data subject; Arts 31/33/51/53/54/56/60/62/77/78 on gdpr supervisory authority; Art 32 on nis2 essential entity; Arts 3/33/34 on nis2 important entity; Arts 23/31 on dora provider; Art 31 on dora ict third-party service provider; on dora financial entity or operator also_named is empty — read heading_note and use search_regulation for body mentions (Arts 28/30 for ICT third-party context); Art 18 on cra authorised representative). Then read_unit each article — the index is not a complete duty set.

• publish_workflowwrite actionFree

  Mark one of this trial_id private playbooks ready or draft. Publishing is private state only; it never adds content to the shipped library or another trial.

• read_unitFree

  Read one citable unit by kind and number or label. Articles return aggregated paragraph text. Paragraphs repeat across articles — pass article= (e.g. 6 or '6') to disambiguate. number, label and article accept JSON numbers or strings. read_unit also takes a result row's pinpoint verbatim: pinpoint='Article 6(1)' resolves kind and number for you. Then verify_citation if checking someone else's pinpoint.

• record_assessmentFree

  Record one structured applicability verdict on a regulation pinpoint for this keyless trial_id (from connect). Verdicts: applicable | not_applicable | needs_review | deferred. Optional reason codes only — never free-text notes. Re-recording the same regulation+pinpoint overwrites. Assessments annotate; they never hide search or read results. Call after the officer states applicability.

• save_workflowFree

  Save or update one private compliance playbook for this keyless trial. It stays inside this trial_id; call publish_workflow only to mark it ready here, never to share it with another user.

• search_regulationFree

  Search held regulation text. Returns pinpoints and excerpts, not summaries. Requires regulation id (e.g. eu-ai-act) and query string. Then read_unit on the best pinpoints; verify_citation if checking someone else's cite.

• search_regulationsFree

  Search all loaded regulation modules in one call. Use when the question names more than one act (e.g. DORA and the AI Act) or spans ICT risk and AI rules. Each hit carries its regulation id — then read_unit per regulation.

• start_hereFree

  Orientation for this corpus right now — which regulations are loaded, unit counts, data_as_of, what is not held, and first-call hints per module. Generated from list_loaded(), not static prose. Cheap: one call, no quota. Then list_regulations, search_regulation, or list_workflows.

• submit_feedbackwrite actionFree

  Send feedback about REKVIRA ITSELF to the operator: a bug, feature request, friction, or praise. **ASK FIRST, EVERY TIME.** You may offer to send feedback, but only the user may decide to send it. Say what you would write and set confirmed=true only after they explicitly approve it. The moment something fails is when an agent is least neutral, so never file an opinion on the user's behalf. Set authored_by='user' for their own words and 'agent_drafted' only when you wrote the draft and they approved it. Keyless trial has no account or usage history: no prior-call context is attached. Never paste query text into message.

• verify_citationFree

  Verify a citation someone else produced — does the pinpoint exist in held text, and optionally does the quote appear. Pass the cite as written (e.g. 'Article 6(1) EU AI Act') plus optional quote=. Then read_unit for full text. regulation= disambiguates when the cite omits the act name; returns regulation_mismatch when the cite embeds YYYY/NNNN for a different act.

• whoamiFree

  Who is calling: tier, trial state, corpus load count. Pass trial_id from connect() to confirm the handle used for assessments and private workflows. After connect, call start_here or list_regulations.

• –Code scanremote-only server, no package to scann/a
• Live reliabilityremote reachable in 1955ms20/20
• Tool poisoning17 tool descriptions checked15/15
• Auth qualityopen endpoint exposes 3 write-action tools with no auth3/15
• Maintenanceno repository listed3/15
• Maintainer identityverified namespace with website, no repo4/10

Rekvira: EU regulation pinpoints for compliance AI: common questions

Is Rekvira: EU regulation pinpoints for compliance AI MCP server safe?

With care: it is graded C, so read the findings first (60/100). Read the Rekvira: EU regulation pinpoints for compliance AI safety report

How do I install Rekvira: EU regulation pinpoints for compliance AI?

It runs remotely at mcp.rekvira.com. Add it to Claude Code, Claude Desktop or Cursor with the snippets above, or call it through the mcp.market gateway without installing anything.

Does Rekvira: EU regulation pinpoints for compliance AI need an API key?

Not as far as the registry entry and our scan can tell: no credentials are declared or required.

Is Rekvira: EU regulation pinpoints for compliance AI maintained?

The latest release is v0.1.0.

Is Rekvira: EU regulation pinpoints for compliance AI up?

100% of our last 4 checks got an answer. We check remote servers about four times a day.