Labsco
MCP SERVER

NIS2 Compliance MCP

by CSOAI-ORG

Classify your entity under NIS2, audit the ten Article 21 measures, and handle Article 23 incident reporting.

Regulatory Compliance & AI Governance
Summary
Entity class first, because everything else depends on it.

NIS2 obligations scale with whether you are essential or important, so classification is not a formality — it decides how much of Article 21 lands on you. Having the ten measures enumerable as a tool call means the audit and the checklist stay in step instead of drifting apart in a spreadsheet.

What it is

A Python server for NIS2, Directive EU 2022/2555, covering Articles 21 and 23. It does the three things that regime asks of you in order: work out what kind of entity you are, audit the security measures, and report incidents.

What you get

Three tools, named in the repository's own examples: `classify_entity`, `list_article_21_measures` for the 10 measures the article requires, and `audit_article_21` for the audit against them.

Requirements

`pip install nis2_compliance_mcp`, or point your client at `uvx` with the argument `nis2-compliance-mcp` (package version 1.3.10, stdio transport). The free tier is 50 calls a day. For pay-per-call, set `MEOK_PAYG_KEY` to a top-up token — each call deducts £0.05 by default, and `MEOK_PAYG_RATE_GBP` changes the rate.

Setup effort

One command — pip install nis2-compliance-mcp