← Back to search

io.github.CSOAI-ORG/uk-ai-bill-compliance-mcp

CSOAI-ORG Scanned 25d ago

UK AI Regulation Compliance MCP. Automates audits against the UK AI White Paper five principles ...

B
77.9 / 100

Versions

1.0.2latest
first seen May 19, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 6

classify_system
annotations: none low

Classify a UK AI system against sector regulator + signalled AI Bill scope. - sector: finance | healthcare | employment | public_sector | consumer_online | education | transport | defence_security - system_type: plain description (e.g. 'credit scoring', 'clinical triage') - is_frontier_model: True for the most capable general-purpose foundation models

sector str api_key str system_type str public_sector bool is_frontier_model bool
audit_principle
annotations: none low

Audit the entity's current controls against one of the 5 UK AI principles. - principle: safety | transparency | fairness | accountability | contestability - current_controls_csv: comma-separated keywords describing what you have in place

api_key str principle str current_controls_csv str
audit_sector_regulator
annotations: none low

Surface the primary sector regulator + key guidance for an AI system in that sector.

sector str api_key str
ai_bill_readiness
annotations: none low

Score readiness against anticipated AI (Regulation) Bill obligations.

api_key str entity_name str is_frontier_model bool has_aisi_engagement bool has_incident_reporting bool has_pre_deployment_eval bool has_misuse_mitigation_plan bool has_senior_accountable_person bool
sign_uk_ai_readiness_attestation
annotations: none low

Generate a cryptographically signed UK AI readiness attestation (Pro/Enterprise). HMAC-SHA256 signed JSON + public verify URL + optional PDF. Auditors / boards / procurement validate via verify_url without MEOK backend access. Expires 365d.

api_key str entity_name str findings_csv str overall_score float include_pdf_base64 bool principles_audited_csv str
enforcement_status
annotations: none low

Current UK AI regulation status + upcoming AI (Regulation) Bill timeline.

api_key str

Permissions 3

network medium
Server uses network capabilities via: urllib
filesystem low
Server uses filesystem capabilities via: open(), os
env_vars low
Server uses env_vars capabilities via: os.environ

Scan Findings 31

low
Tool 'ai_bill_readiness' has no annotations annotation_checker · 100%
low
Tool 'sign_uk_ai_readiness_attestation' has no annotations annotation_checker · 100%
low
Tool 'enforcement_status' has no annotations annotation_checker · 100%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: mcp@1.0.0 (GHSA-3qhf-m339-9g5v) dependency_analyzer · 95%
low
Tool 'classify_system' has no annotations annotation_checker · 100%
low
Tool 'audit_principle' has no annotations annotation_checker · 100%
low
Tool 'audit_sector_regulator' has no annotations annotation_checker · 100%
medium
Vulnerable dependency: mcp@1.0.0 (GHSA-9h52-p55h-vw2f) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (GHSA-j975-95f5-7wqh) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (GHSA-jpw9-pfvf-9f58) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (GHSA-vj7q-gjh5-988w) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (PYSEC-2026-1616) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (PYSEC-2026-1617) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (PYSEC-2026-1618) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (PYSEC-2026-3482) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (PYSEC-2026-3483) dependency_analyzer · 95%
info
pyproject.toml metadata manifest_parser · 100%
info
Tool: classify_system manifest_parser · 90%
info
Tool: audit_principle manifest_parser · 90%
info
Tool: audit_sector_regulator manifest_parser · 90%
info
Tool: ai_bill_readiness manifest_parser · 90%
info
Tool: sign_uk_ai_readiness_attestation manifest_parser · 90%
info
Tool: enforcement_status manifest_parser · 90%
info
Required env vars (7) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 80%
low
Permission: filesystem access detected permission_analyzer · 80%
low
Permission: env_vars access detected permission_analyzer · 90%
info
No dependency files found for SBOM generation sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%