LabscoMCP early access ↗
CSOAI-ORGMCP SERVER

NIS2 Compliance MCP

Classify your entity under NIS2, audit the ten Article 21 measures, and handle Article 23 incident reporting.

by CSOAI-ORG ↗Regulatory Compliance & AI GovernanceCommunity

LABSCO SUMMARY

Entity class first, because everything else depends on it.

NIS2 obligations scale with whether you are essential or important, so classification is not a formality — it decides how much of Article 21 lands on you. Having the ten measures enumerable as a tool call means the audit and the checklist stay in step instead of drifting apart in a spreadsheet.

What it is

A Python server for NIS2, Directive EU 2022/2555, covering Articles 21 and 23. It does the three things that regime asks of you in order: work out what kind of entity you are, audit the security measures, and report incidents.

What you get

Three tools, named in the repository's own examples: classify_entity, list_article_21_measures for the 10 measures the article requires, and audit_article_21 for the audit against them.

Requirements

pip install nis2_compliance_mcp, or point your client at uvx with the argument nis2-compliance-mcp (package version 1.3.10, stdio transport). The free tier is 50 calls a day. For pay-per-call, set MEOK_PAYG_KEY to a top-up token — each call deducts £0.05 by default, and MEOK_PAYG_RATE_GBP changes the rate.

Setup effort

One command — pip install nis2-compliance-mcp