MCP.Market

Iso27001 MCP server

by Sushegaad·io.github.Sushegaad/iso27001-mcp·v0.8.4·32 stars
No reviews yet

ISO 27001 compliance workspace for Claude. Risks, policies, SoA, evidence, and audit workflows.

C68/100grade C
Write a reviewInstall
What users say
No reviews yet
Be the first
Safety scan
C68/100

full report

Adoption
Growing

32 stars94 downloads/wk

Reviews

Write one

Nobody has reviewed Iso27001 yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Iso27001 tools

No tool declarations could be read from the package source. They show once the server is installed.

Public scan report

scanner v0.1.9 · 2026-09-27 · same rubric, same numbers if you re-run it

2 medium
  • Code scan2 source files scanned15/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitystatic API keys via environment variables6/15
  • Maintenancelast push 23 days ago15/15
  • Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10

Findings (2)

  • mediumeval / new Function usedexec.eval
    dist/index.js: …ame = fn.name; var deprecatedfn = new Function( "fn", "log", "d…
  • mediumHeavily hex-escaped string (obfuscation)obf.hex-density
    dist/index.js: …2122\u0161\u203A\u0153\uFFFD\u017E\u0178\xA0\xA1\xA2\xA3\xA4\xA5\xA6\xA7\xA8\xA9\xAA\xAB\xAC\xAD\xAE\xAF\xB0\xB1\xB2\xB3\xB4\xB5\xB6\xB7\xB8\xB9\xBA\xBB\xBC\xBD\xBE\xBF\xC0\xC1\xC2\xC3\xC4\xC5\xC6\xC7\xC8\xC9\xCA\xCB\xCC\xCD\xCE\xCF\xD0\xD1\xD2\xD3\xD4\xD5\xD6\xD7\xD8\xD9\xDA\xDB\xDC\xDD\xDE\xDF\xE0\xE1\xE2\xE3\xE4\xE5\xE6\xE7\xE8\xE9\xEA\xEB\xEC\xED\xEE\xEF\xF0\xF1\xF2\xF3\xF4\xF5\xF6\xF7\xF8\xF9\xFA\xFB\xFC\xFD\xFE\xFF" }, "win1252": "windows1252…
Overall 68/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How Iso27001 compares

Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
68/100
higher than 30% of 48,255 servers
GitHub stars
32
more than 92% of 28,688 servers
Downloads a week
94
more than 61% of 12,191 servers with a package

Install Iso27001 in Claude Code, Cursor or VS Code

Runs npx -y iso27001-mcp on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add iso27001-mcp -- npx -y iso27001-mcp
Add to Cursor

What the publisher says

From the Iso27001 repository's README, as published. We do not edit it. Read it on GitHub

iso27001-mcp

Turn Claude into an ISO 27001 compliance assistant — controls, risk register, policies, evidence tracking, SoA generation, and full audit workflows in one local encrypted MCP server.

▶ Live Interactive Demo · Guided First-Run Checklist → · Roadmap →

▶ Getting Started — watch on YouTube

Why this exists

ISO 27001 compliance work is typically scattered across spreadsheets, Word docs, ticketing systems, and shared drives. Security teams and consultants spend more time chasing evidence and reformatting documents than actually improving security posture.

iso27001-mcp solves this by giving Claude a live, stateful ISMS — all 93 ISO 27001:2022 controls seeded and ready, a real risk register, policy and procedure generators, evidence tracking, audit workflows, and a Statement of Applicability, backed by an encrypted local database that never leaves your machine.

The difference from generating static documents: Claude can query, reason, and update across your entire ISMS in a single conversation. Ask it to run a gap assessment, identify which open risks are linked to unimplemented controls, generate the policies that close those gaps, and produce a remediation roadmap — all without switching tools.

Who it's for: Security teams · Compliance consultants · GRC engineers · Startups preparing for ISO 27001 · Internal audit functions

What Claude can do with it

Quick Start

Prerequisites

  • Node.js 20.11.0+ — nodejs.org or nvm / Volta

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

Iso27001: common questions

Is Iso27001 MCP server safe?
With care: it is graded C, so read the findings first (68/100). Read the Iso27001 safety report
How do I install Iso27001?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does Iso27001 need an API key?
Yes. The registry entry asks for DB_ENCRYPTION_KEY, HMAC_SECRET, MCP_API_KEY.
Is Iso27001 maintained?
The last commit was 60 days ago (2026-09-05). The latest release is v0.8.4.
How does Iso27001 compare with other MCP servers?
safety score 68/100 (higher than 30% of 48,255 servers); github stars 32 (more than 92% of 28,688 servers); downloads a week 94 (more than 61% of 12,191 servers with a package). Full comparison.