Rival Regulatory Toolkit MCP server
io.github.rival-intelligence/rival-regulatory-toolkit·v0.1.5Read-only regulatory source retrieval, citation tracing, authority metadata, and recent filings.
0 stars29 downloads/wk
Reviews
Write oneNobody has reviewed Rival Regulatory Toolkit yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Rival Regulatory Toolkit tools (5)
write = sends, deletes, buys or postsRead from the package source without running it. The installed server may list more.
get_recent_filingsReturn recent indexed filings and source records for authority-aware regulatory monitoring workflows, including Federal Register style source updates.
list_authoritiesList regulatory authorities, jurisdictions, domains, and source families available through the Rival corpus, including energy, critical infrastructure, and government compliance authorities.
retrieve_source_textRetrieve full regulatory source text and metadata for a known Rival source id or exact citation, preserving citation, jurisdiction, authority, source family, and URL for reviewable agent outputs.
search_regulatory_corpusSearch Rival regulatory source material and return source-grounded excerpts for compliance, energy, critical infrastructure, CFR, Federal Register, Texas Administrative Code, PHMSA, EPA, RRC, and other authority-aware regulatory questions.
trace_citationTrace a regulatory citation such as 49 CFR 195.573 or 16 TAC § 3.8 to matching and related source records so agents can ground compliance answers in authoritative source material.
Public scan report
scanner v0.1.9 · 2026-09-27 · same rubric, same numbers if you re-run it
- Code scan24 source files scanned25/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitystatic API keys via environment variables6/15
- Maintenancelast push 80 days ago12/15
- Maintainer identityregistry namespace matches repository owner7/10
How Rival Regulatory Toolkit compares
Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 77/100
- higher than 50% of 48,255 servers
- Tools
- 5
- the typical server has 7
- Tools that change things
- 0%
- typical: 0%. Fewer write tools means less an agent can break
- Downloads a week
- 29
- more than 16% of 12,191 servers with a package
What its tools let an agent do: 5 read
Install Rival Regulatory Toolkit in Claude Code, Cursor or VS Code
Runs npx -y @tryrival/regulatory-toolkit on your machine. Read the scan report first; the gateway never runs local packages.
claude mcp add rival-regulatory-toolkit -- npx -y @tryrival/regulatory-toolkit
What the publisher says
From the Rival Regulatory Toolkit repository's README, as published. We do not edit it. Read it on GitHub
Rival Regulatory Toolkit
Open-source SDK, CLI, MCP server, and schemas for connecting AI agents to Rival's source-grounded regulatory retrieval API.
- Public site: https://tryrival.ai
- Agent access: https://tryrival.ai/for-agents
- Managed API default: https://api.tryrival.ai
This repository is the developer and agent connectivity layer for Rival. It is intentionally read-only in its first release: agents can search, retrieve source text, trace citations, list authorities, and inspect recent filings. Workspace actions, document review, evidence requests, filings, and task creation remain behind managed Rival access and human review gates.
What Is Included
- OpenAPI contract for Rival's read-only regulatory retrieval API.
- JSON Schemas for source documents, search results, citations, authorities, and recent filings.
- TypeScript client for server-side applications and internal tools.
- CLI for shell usage and automation.
- MCP server for agent clients that support Model Context Protocol.
- Fixture mode so teams can evaluate the integration without a Rival API key.
- Dockerfile for running the MCP server in controlled team environments.
Install
npm install @rival-intelligence/regulatory-toolkitFor local development from source:
npm install
npm run buildEnvironment
export RIVAL_API_KEY="rv_live_..."
export RIVAL_API_BASE_URL="https://api.tryrival.ai"For local evaluation without API access:
export RIVAL_FIXTURE_MODE=trueTypeScript Client
import { RivalRegulatoryClient } from '@rival-intelligence/regulatory-toolkit';
const rival = new RivalRegulatoryClient({
apiKey: process.env.RIVAL_API_KEY,
});
const results = await rival.searchRegulatoryCorpus({
query: '49 CFR 195.573',
limit: 5,
});
console.log(results.results[0]?.source.citation);CLI
rival-regulatory search "49 CFR 195.573"
rival-regulatory source "cfr-49-195-573"
rival-regulatory trace "49 CFR 195.573"
rival-regulatory authoritiesFixture mode:
rival-regulatory search "pipeline corrosion" --fixtureMCP Server
Run directly:
npx @rival-intelligence/regulatory-toolkit mcpMCP client example:
{
"mcpServers": {
"rival-regulatory": {
"command": "npx",
"args": ["-y", "@rival-intelligence/regulatory-toolkit", "mcp"],
"env": {
"RIVAL_API_KEY": "rv_live_...",
"RIVAL_API_BASE_URL": "https://api.tryrival.ai"
}
}
}
}Available MCP tools:
- searchregulatorycorpus
- retrievesourcetext
- trace_citation
- list_authorities
- getrecentfilings
Docker
Docker belongs in this repository because many compliance, legal, consulting, energy, and infrastructure teams will run agent tools inside controlled environments. The image runs the MCP server and reads credentials from environment variables.
docker build -t rival-regulatory-toolkit .
docker run --rm -i \
-e RIVAL_API_KEY="$RIVAL_API_KEY" \
-e RIVAL_API_BASE_URL="https://api.tryrival.ai" \
rival-regulatory-toolkitFixture mode:
docker run --rm -i -e RIVAL_FIXTURE_MODE=true rival-regulatory-toolkitSee docs/self-hosting.md for deployment notes.
API Contract
The API contract starts with five read-only endpoints:
- GET /api/v1/search
- GET /api/v1/sources/{source_id}
- GET /api/v1/citations/trace
- GET /api/v1/authorities
- GET /api/v1/filings/recent
The contract lives in openapi/rival-regulatory-api.yaml.
Safety Boundary
This toolkit does not submit filings, alter compliance records, close corrective actions, delete evidence, or take workspace actions. It is a source retrieval and citation layer for agents and developer systems. Regulated work still requires qualified human review.
Shortened. The full README is on GitHub.
Nothing above is checked by us. What we check is on the safety report.
Rival Regulatory Toolkit: common questions
- Is Rival Regulatory Toolkit MCP server safe?
- Mostly: it is graded B (77/100). Read the Rival Regulatory Toolkit safety report
- How do I install Rival Regulatory Toolkit?
- It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
- Does Rival Regulatory Toolkit need an API key?
- Yes. The registry entry asks for
RIVAL_API_KEY. - Is Rival Regulatory Toolkit maintained?
- The last commit was 118 days ago (2026-07-09). The latest release is v0.1.5.
- What can I use instead of Rival Regulatory Toolkit?
- Servers from other publishers that do the same job: EdgarTools MCP server.
- How does Rival Regulatory Toolkit compare with other MCP servers?
- safety score 77/100 (higher than 50% of 48,255 servers); tools 5 (the typical server has 7); tools that change things 0% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.
Alternatives to Rival Regulatory Toolkit
Same job from other publishers: the closest match first, then the best rated.
- EdgarToolsOpen-source SEC EDGAR toolkit — 13 tools, 7 prompts, every filing type. No API key required.not reviewedWidely usedA