ComplyHat MCP Server for Claude

Overview

ComplyHat is a hosted Model Context Protocol server that helps AI agents draft, test, and finalize compliance documentation across four frameworks: SR 26-2, EU AI Act, NIST AI RMF, and ISO/IEC 42001. Your host agent supplies extracted evidence; ComplyHat computes scores, tags prose as [EXTRACTED], [INFERRED], or [AMBIGUOUS], and renders regulator-ready DOCX outputs after human approval.

Install documentation is at docs.complyhat.ai/quickstart. The canonical MCP URL is https://complyhat.ai/api/mcp, registered as ai.complyhat/compliance.

Features

• Eleven entity tools plus a guidance meta-tool behind one MCP URL.
• Framework templates for Annex IV, ongoing monitoring, and management attestations.
• Bias, drift, explainability, adversarial, and data-governance workflows.
• Immutable audit events and sha256-finalized reports.
• Compliance memory wiki that compounds approved positions across filings.
• OAuth 2.1 with dynamic client registration; no API keys to paste manually.

Use Cases

• Start an EU AI Act draft report for a production model and review tagged citations.
• Run a bias test and attach results to a quarterly compliance packet.
• Check which frameworks apply to a new generative-AI use case.
• Append an approved legal position to the tenant compliance memory wiki.
• Export a finalized DOCX for counsel review before regulatory submission.

Installation

Claude Code

claude mcp add --transport http complyhat https://complyhat.ai/api/mcp

Claude Desktop

Add to claude_desktop_config.json:

{
  "mcpServers": {
    "complyhat": {
      "transport": "streamable-http",
      "url": "https://complyhat.ai/api/mcp"
    }
  }
}

Codex CLI

codex mcp add --url https://complyhat.ai/api/mcp complyhat

Restart your host after adding the connector. OAuth runs on the first tool call.

Configuration

{
  "mcpServers": {
    "complyhat": {
      "url": "https://complyhat.ai/api/mcp",
      "type": "http"
    }
  }
}

Examples

Framework status

Call the frameworks tool with mode status and summarize which templates my workspace supports.

Start a draft report

Start an EU AI Act draft report for model ID 00000000-0000-0000-0000-000000000000 named Q2 validation.

Bias test

Run a bias test for our credit model and summarize disparate impact results for counsel review.

Security

• Humans must approve reports before treating them as regulatory submissions.
• ComplyHat never marks a model compliant automatically; finalize only after review.
• Revoke OAuth access from ComplyHat or the MCP host if a connector is decommissioned.

Troubleshooting

OAuth consent loop

Sign in at complyhat.ai/login and confirm your host completed the consent screen.

Missing evidence fields

Supply predictions, labels, protected attributes, or distribution snapshots from the host; ComplyHat does not read private codebases.

409 on wiki write

Pass prev_version from the latest wiki.read response when replacing compliance memory.

Framework version drift

Use frameworks.check_freshness and verify amendments at the regulator source before submission.