Add MEOK AI Labs — 16 EU compliance + A2A governance MCPs (signed attestations)

[CSOAI-ORG]

What

Adding the MEOK AI Labs catalogue — 16 production Python MCP servers for EU AI compliance + A2A governance, all with cryptographically signed (HMAC-SHA256) attestations and public verify URLs.

Servers

Compliance (regulatory frameworks)

• eu-ai-act-compliance-mcp — EU AI Act (Regulation 2024/1689)
• dora-compliance-mcp — DORA (Regulation 2022/2554, live)
• nis2-compliance-mcp — NIS2 (Directive 2022/2555)
• cra-compliance-mcp — EU Cyber Resilience Act
• csrd-compliance-mcp — EU CSRD
• gdpr-compliance-mcp — GDPR
• uk-ai-bill-compliance-mcp — UK AI Regulation
• ai-bom-mcp — AI Bill of Materials (CycloneDX ML-BOM 1.6 + SPDX 3.0 AI)
• hipaa-compliance-mcp — HIPAA
• iso-42001-compliance-mcp — ISO/IEC 42001 AI Management System
• nist-rmf-ai-mcp — NIST AI RMF

Specialty

• dora-nis2-crosswalk-mcp — Dual-compliance for EU banks
• ai-incident-reporting-mcp — Multi-regime incident clocks
• gods-eye-geospatial-mcp — Civilian open-source geospatial + Care Membrane

A2A Agent Governance

• agent-rate-limiter-mcp — Fleet-wide shared quota
• agent-audit-logger-mcp — Hash-chained signed A2A log
• agent-policy-enforcement-mcp — Per-pair IAM
• agent-handoff-certified-mcp — Signed delegation chain
• agent-prompt-injection-firewall-mcp — OWASP LLM01 WAF

Verification tool

• meok-attestation-verify — Zero-dep CLI to verify any MEOK signed cert

Differentiator

Every Pro-tier audit emits a HMAC-SHA256 signed JSON attestation with a public verify URL (https://meok-attestation-api.vercel.app/verify/<cert_id>). Auditors validate without an account. Published verifier: pip install meok-attestation-verify.

Live infrastructure

• Catalogue: https://meok-attestation-api.vercel.app/catalogue
• Storefront: https://councilof.ai
• All packages: https://pypi.org/user/MEOK_AI_Labs/

Happy to submit per-server PRs if needed. Maintainer: nicholas@csoai.org