# eu.velvoite/compliance EU financial regulatory monitoring: DORA, MiCA, MiFID II, AML, Solvency II and more. - **Type:** MCP server - **Trust:** 60/100 (B), scored on the content rubric - **Verification:** community-indexed — nobody has claimed this listing - **Version:** 1.0.0 - **Author:** eu.velvoite - **License:** Unknown - **Endpoints:** streamable-http https://mcp.velvoite.eu/mcp - **Source:** https://mcp.velvoite.eu/mcp - **Endpoint health:** degraded (last checked 2026-10-04T02:34:20.736Z, 6 samples) — uptime is not a security property and is not part of the trust score - **Compatible clients:** claude-code, cursor, copilot, chatgpt, gemini (basis: transport) ## Trust 60/100 (B), scored on the content rubric - Publisher verified: no - Install scripts: nothing suspicious found - Prompt-injection scan: clean - Obfuscation scan: clean - Evidence age: 36 days ## Security scan - **Status:** clean - **Scanned:** 2026-08-30T05:50:49.203Z - **Version scanned:** live - **CVEs:** no coverage — this entry has no package coordinates to query OSV against, so "no known CVEs" is NOT asserted for it. ## Tools 26 declared. Observed from a live `tools/list` probe. - `get_stats` — Get an overview of the Velvoite regulatory corpus. Returns document counts by source, regulation family, entity type, urgency distribution, obligation summary, - `search_regulations` — Search the regulatory corpus using keyword / trigram matching. Uses PostgreSQL trigram similarity on document titles and summaries. Returns documents ranked by - `list_documents` — Browse regulatory documents with filters and pagination. Returns a paginated list of documents with summaries, tags, doc_purpose (regulation_text, enforcement, - `get_document` — Get full details of a specific regulatory document by its ID. Returns the document metadata, AI summary, all classification tags, inline obligations (up to 50 w - `get_obligations` — Get regulatory obligations - specific requirements extracted from regulations. Each obligation includes the requirement text, applicable article reference, dead - `get_canonical_obligations` — Get deduplicated canonical obligations with enforcement intelligence. Returns one obligation per unique legal requirement per actor role. Each includes complian - `get_enforcement_intelligence` — Get top enforced canonical obligations. Returns obligations ranked by enforcement activity for risk prioritization. This is a focused view of canonical obligati - `get_deadlines` — Get upcoming regulatory deadlines for compliance calendar tracking. Returns obligations with deadlines in chronological order, annotated with days remaining or - `get_obligation_summary` — Get obligation counts grouped by regulation_code. Returns total count and per-regulation breakdown with status counts (active, upcoming, overdue, expired) plus - `get_recent_changes` — Get recently published or updated regulatory documents. Shortcut for 'what is new this week' - returns documents from the last N days, sorted by publication dat - `get_verification_stats` — Get verification progress for obligations across all regulations. Returns total, verified, unverified counts overall and per regulation, with percentage verifie - `get_actor_roles` — Get available actor roles per regulation with obligation counts. Actor roles define WHO an obligation applies to within a specific regulation (e.g. 'credit_inst - `get_company_profile` — Get the calling company's regulatory posture — saved entity types, actor roles per regulation, and active conditions. The profile defines WHICH regulations and - `get_enforcement_decisions` — Get enforcement decisions with structured penalty data. Returns enforcement actions (fines, warnings, license withdrawals) imposed by regulators. Each action in - `audit_taxonomy` — Audit the actor role taxonomy: compare model-defined roles vs deployed roles in the database. Returns per-regulation analysis showing: - model_only: roles the e - `get_feedback` — Get user feedback for QA review. Requires admin API key. Filters: status (new/reviewed/resolved/dismissed), feedback_type (data_quality/bug/feature_request/othe - `get_finnish_statute` — Return the canonical Finlex URL for a Finnish statute so Claude can fetch its text. Finlex (finlex.fi) is the official Finnish statute database — no public JSON - `search_finnish_statutes` — Return Finlex search URL for Finnish statute keyword search. Finlex has no public JSON search API — returns the search URL for Claude to fetch. Args: query: Sea - `get_finnish_company` — Look up a Finnish company in the PRH Trade Register by business ID (Y-tunnus). Returns company name, status, registered address, company form, registration date - `search_finnish_companies` — Search Finnish companies by name in the PRH Trade Register. Use to find a business ID when you only know the company name, or to check whether a company name is - `get_eu_regulation_article` — Return verbatim obligation text from the Velvoite corpus for an EU regulation article, plus the canonical EUR-Lex URL for reference. Queries the Velvoite corpus - `search_eu_regulation_text` — Return EUR-Lex search URL for finding regulation provisions by keyword. Use when you don't know the exact article number but need to find relevant provisions. R - `search_cjeu_cases` — Search CJEU case law via EUR-Lex CELLAR SPARQL (live — not limited to Velvoite corpus). Returns cases matching keywords in the case title. Use to find court dec - `get_eurlex_document` — Look up any EUR-Lex document by CELEX number via CELLAR SPARQL (live). Returns title, date, and URLs for the full text. For CJEU case law (CELEX starting with 6 - `get_kho_decision` — Return access details for a Finnish Supreme Administrative Court (KHO) precedent decision. Requires Velvoite Premium API key. KHO decisions are cited as KHO:YYY - `search_kho_decisions` — Return a search query to discover KHO (Finnish Supreme Administrative Court) precedent decisions for a given year. Requires Velvoite Premium API key. NOTE: The ## Install **Verdict: review** — Installable, but 2 things to check first: No CVE coverage: this entry has no npm/PyPI coordinates to query OSV against, so "no known vulnerabilities" is not a claim that can be made about it. **Cautions** (coverage gaps and advisories — never blocking) - No CVE coverage: this entry has no npm/PyPI coordinates to query OSV against, so "no known vulnerabilities" is not a claim that can be made about it. - No publisher has proved control of this listing; it is indexed, not vouched for. **Config** (claude-code): ```json "{\n \"mcpServers\": {\n \"compliance\": {\n \"type\": \"http\",\n \"url\": \"https://mcp.velvoite.eu/mcp\"\n }\n }\n}" ``` ## Blast radius Contained to moderate — no credential declaration found, from the publisher, the upstream registry, or the README. Known so far: runs on someone else's infrastructure; read-only tool surface. - Floor 9, ceiling 27 (tier: unknown) - `unknown` means the floor and ceiling land in different bands — not measured enough to name one. It does not mean low. - This is impact, not likelihood. A high radius is not a defect: a filesystem server is supposed to write files. It is never part of the trust score. ## Machine-readable views of this entry - Signed JSON: https://forgeregistry.com/api/v1/packages/eu.velvoite%2Fcompliance - Install plan: https://forgeregistry.com/api/v1/packages/eu.velvoite%2Fcompliance/install-plan - Alternatives: https://forgeregistry.com/api/v1/alternatives/eu.velvoite%2Fcompliance - HTML page: https://forgeregistry.com/registry/eu.velvoite%2Fcompliance - MCP: POST https://forgeregistry.com/api/mcp → `forge_get_package` / `forge_install_plan` ## About this document Generated by Forge (https://forgeregistry.com) — a compact rendering of the same record served, signed, at the JSON URL above. Trust and scan facts are the registry's own measurements; anything Forge did not measure is named as unmeasured rather than omitted.