Local MCP capabilities provider for Expo
Compliance Intelligence is installed from its publisher's own source and answers where it runs, so this marketplace is not in the path of a single call. There is no address here to send one to, and a panel that pretended otherwise would be showing you an answer we made up. Install it and call it from your own client — the Installation tab has the entry for each one.
What it does
What one compliance standard already evidences of another, with the reasoning and the rejections.
Quickstart
# 1 — add it to Claude Code
claude mcp add --scope user --transport http compliance-intelligence-mcp https://api.theartofservice.com/mcp
# 2 — ask your agent for something these tools do
# agent_search_courses, agent_get_course, agent_courses_for_frameworks and 30 more
Compliance Intelligence costs nothing on mcprush: there is no plan to choose here, no cap to set and nothing mcprush can bill you for.
Collected from a public index. Nobody has claimed this account, so nothing here was written by its author — claim it if it is yours.
Where are you running it?
Every route below installs the same thing and ends at the same approval screen. Nothing here runs on your machine and nothing runs on ours: this server answers at its publisher’s own address, and what you install is the connection straight to it.
This is a public server: it answers at its publisher’s own address and this marketplace is not in the path. Claude Code registers it in one command; --scope user makes it available in every project. The transport below is http, as the publisher's own manifest declares it.
claude mcp add --scope user --transport http compliance-intelligence-mcp https://api.theartofservice.com/mcpReconnect, or start a new session, and the tools appear in the model’s tool list.
One config entry pointing straight at the publisher’s own address — this marketplace is not in the path, and nothing from this listing executes on your machine.
33 tools, with what each one reads, writes and reaches shown before you agree — the same list on every route above. Read the tool surface.
Tool surface
What the model actually sees. Descriptions are diffed on every release — see version history.
Search the course catalogue Find courses by need, framework, role or industry. Free-text search over the catalogue, optionally narrowed to a named standard. Examples: q='soc 2 evidence collection', q='first 90 days as CISO', q='data governance healthcare', or q='audit preparation' with framework='ISO 27001'. Returns up to 25 courses with a direct purchase URL. No authentication required. ### R
| Parameter | Type | Required | Notes |
|---|---|---|---|
| q | string | yes | What the buyer needs to do |
| framework | string | no | Narrow to a standard, e.g. 'SOC 2' |
| limit | integer | no | — |
Get one course Full detail for a single course by product id, including every standard it covers and its purchase URL. Use after agent_search_courses to justify a recommendation. No authentication required. ### Responses: 200: Successful Response (Success Response) Content-Type: application/json
| Parameter | Type | Required | Notes |
|---|---|---|---|
| product_id | integer | yes | — |
Find courses covering several standards at once Given two or more standards, returns courses that address ALL of them together, which is what an organisation running overlapping programmes actually needs. Example: frameworks='SOC 2,ISO 27001' returns courses on running both from one evidence set, rather than one course per standard. Falls back to reporting which standards have coverage if no si
| Parameter | Type | Required | Notes |
|---|---|---|---|
| frameworks | string | yes | Comma-separated, e.g. 'SOC 2,ISO 27001' |
| limit | integer | no | — |
List standards the catalogue covers Every standard that has courses, with a course count each. Use this to discover valid values for the framework filter before searching. No authentication required. ### Responses: 200: Successful Response (Success Response) Content-Type: application/json
No parameter schema on file.
Build a checkout for one or more courses Turn a course into a purchase. Give one or more product ids and this creates a real cart on the store and returns a checkout link that completes the sale. Free to call; the course price is paid at checkout. Use agent_search_courses to find the product id first. Multiple ids go in one cart, so a recommended set can be bought together in a single transaction
| Parameter | Type | Required | Notes |
|---|---|---|---|
| product_ids | string | yes | — |
| store | string | no | — |
What a course actually teaches, module by module FREE, no API key, no payment. The full teaching structure of one course: every module with its summary and every chapter inside it. Use it to confirm a course genuinely covers a requirement before recommending it to someone. The response carries buy_url, a direct purchase link for the course. Get product_id from agent_search_course_content or agent
| Parameter | Type | Required | Notes |
|---|---|---|---|
| product_id | integer | yes | — |
Search what courses teach, across the whole catalogue FREE, no API key, no payment. Full-text search over the TEACHING CONTENT of 126,803 professional courses: module titles, module summaries and every chapter title. Ask for a CAPABILITY rather than a product name, for example 'evidence for access reviews' or 'segregation of duties in SAP', and get the courses that actually teach it, the chapter
| Parameter | Type | Required | Notes |
|---|---|---|---|
| q | string | yes | — |
| limit | integer | no | — |
Funded rounds in the current window, filtered The genuine funded rounds, each with its source. Rows are already filtered: rate decisions, analyst price targets, bond issues, buybacks, parked domains, rumoured rounds and figures that were actually valuations are all excluded. The count of what was rejected is returned alongside, so the filtering can be argued with. ### Responses: 200: Succe
| Parameter | Type | Required | Notes |
|---|---|---|---|
| function | string | no | Business function or sector, e.g. 'AI and automation' |
| instrument | string | no | equity, debt, grant, secondary or form_d |
| min_usd | number | no | Ignore rounds smaller than this |
| limit | integer | no | — |
Capital by the business function it targets Where the money went, classified by whose job it changes. Sector labels describe the company; function labels describe the buyer. The second is the only one a reader can act on, which is why the classification is by function throughout. Concentration is reported when one deal carries a bucket, because a total can be arithmetically true and still misle
No parameter schema on file.
Controls a funded capability actually touches The join. A capability, and the controls whose own text concerns it. Matched against the control's requirement text, never against its title alone: a title that reads like a familiar control is the most expensive kind of wrong match. Returns nothing rather than something strained when the capability finds no purchase, because a join that always finds
| Parameter | Type | Required | Notes |
|---|---|---|---|
| capability | string | yes | What is being funded, e.g. 'agents that act across systems' |
| framework | string | no | Restrict to one framework by name |
| limit | integer | no | — |
| min_hits | integer | no | Distinctive terms a control must contain. 0 chooses for you. |
Where a framework meets where the money is going A framework, a function, and the controls where the two meet. This answers the question the brief cannot answer for a reader, because it does not know who they are: money is moving into this capability, and here is what my own standard already asks of me about it. ### Responses: 200: Successful Response (Success Response) Content-Type: appli
| Parameter | Type | Required | Notes |
|---|---|---|---|
| framework | string | yes | The standard you are held to |
| function | string | no | Your function, e.g. 'AI and automation' |
| limit | integer | no | — |
Search and list compliance frameworks Search the compliance knowledge graph for frameworks by name, keyword, or jurisdiction. Returns framework metadata including name, description, jurisdiction, domain count, control count, and mapping-partner count. Without a query, returns all frameworks. Use this as the starting point to discover available frameworks. ### Responses: 200: Successful R
| Parameter | Type | Required | Notes |
|---|---|---|---|
| q | string | no | Search query to filter by name or keyword (e.g. 'ISO 27001', 'privacy', 'Australian') |
| jurisdiction | string | no | Filter by jurisdiction (e.g. 'International', 'Australia', 'United States', 'European Union') |
| limit | integer | no | Maximum frameworks to return |
| offset | integer | no | How many to skip, for paging through the whole catalogue. The limit caps at 200, so an agent that wants every framework pages with offset=0, 200, 400 until it gets fewer than it asked for. |
Get detailed information about a compliance framework Returns comprehensive details about a specific compliance framework: description, jurisdiction, version, domains with control counts, and cross-framework mapping statistics. Use the exact framework name as returned by agent_search_frameworks. ### Responses: 200: Successful Response (Success Response) Content-Type: application/json
| Parameter | Type | Required | Notes |
|---|---|---|---|
| name | string | yes | — |
Get all controls for a compliance framework Returns all controls belonging to a framework, optionally filtered by domain. Each control includes: code, title, description, and domain. For large frameworks (e.g. NIST SP 800-53 Rev 5), use the domain filter to narrow results. ### Responses: 200: Successful Response (Success Response) Content-Type: application/json
| Parameter | Type | Required | Notes |
|---|---|---|---|
| name | string | yes | — |
| domain | string | no | Filter controls by domain name |
Get all controls for a framework, naming it as a query parameter Identical to agent_get_framework_controls, taking the framework name as a query parameter instead of a path segment. Use this whenever the framework name contains a forward slash. 84 of the frameworks in the graph do, including CCPA/CPRA, AML/CTF Act 2006 and BSA/AML, and the path form cannot reach any of them: the server decodes %
| Parameter | Type | Required | Notes |
|---|---|---|---|
| name | string | yes | Exact framework name, e.g. 'CCPA/CPRA' |
| domain | string | no | Filter controls by domain name |
Get detailed information about a specific control Returns full details for a single control by its code identifier: title, description, domain, and framework. Control codes are framework-specific (e.g. 'A.5.1' for ISO 27001, 'AC-1' for NIST 800-53). ### Responses: 200: Successful Response (Success Response) Content-Type: application/json
| Parameter | Type | Required | Notes |
|---|---|---|---|
| code | string | yes | — |
Get cross-framework mappings for a control Returns all controls in other frameworks that map to the given control via MAPS_TO relationships. This is the core cross-framework mapping capability: use it to find equivalent controls across different compliance frameworks (e.g. NIST 800-53 equivalents of ISO 27001 controls). ### Responses: 200: Successful Response (Success Response) Content-Typ
| Parameter | Type | Required | Notes |
|---|---|---|---|
| code | string | yes | — |
Map controls between two compliance frameworks PAID PER CALL, $0.015 over x402 (USDC on Base); a Professional API key is served free instead. Free without payment or key: agent_crosswalk_pairs, agent_search_frameworks. Returns the complete control-to-control mapping between a source and target framework. Each mapping shows which source control maps to which target control(s). This enables multi
| Parameter | Type | Required | Notes |
|---|---|---|---|
| source | string | yes | Source framework name (e.g. 'ISO 27001:2022') |
| target | string | yes | Target framework name (e.g. 'NIST Cybersecurity Framework 2.0') |
Get cross-framework coverage report for a framework PAID PER CALL, $0.015 over x402 (USDC on Base); a Professional API key is served free instead. Free without payment or key: agent_crosswalk_pairs, agent_search_frameworks. Returns a coverage analysis showing how many controls in the given framework map to controls in every other framework. Includes total controls, mapped control counts, and cov
| Parameter | Type | Required | Notes |
|---|---|---|---|
| name | string | yes | — |
Full-text search across controls and frameworks Search the compliance knowledge graph using full-text search. Type 'controls' searches control titles and descriptions. Type 'frameworks' searches framework names and descriptions. Use specific compliance terms for best results (e.g. 'access control', 'encryption at rest', 'data breach notification'). ### Responses: 200: Successful Response
| Parameter | Type | Required | Notes |
|---|---|---|---|
| query | string | yes | Search query (e.g. 'access control', 'encryption at rest') |
| type | string | no | Search type: 'controls' for control titles/descriptions, 'frameworks' for framework names/descriptions |
| limit | integer | no | Maximum results to return |
Get platform statistics Returns current platform statistics: total framework count, control count, cross-framework mapping count, and domain count. No authentication required. ### Responses: 200: Successful Response (Success Response) Content-Type: application/json
No parameter schema on file.
Get API pricing and rate limit information Returns current API pricing tiers, monthly call limits, and (if authenticated) your current month's usage. Use this to understand costs before making API calls. ### Responses: 200: Successful Response (Success Response) Content-Type: application/json
No parameter schema on file.
What one framework already evidences of another Given a framework you already hold and one you are working toward, returns which of the target's controls your existing evidence already covers, which remain as gaps, and the reasoning for every claim. Example: source='SOC 2', target='ISO 27001:2022'. Mappings are derived judgements, not text lifted from either standard, and each has survived an a
| Parameter | Type | Required | Notes |
|---|---|---|---|
| source | string | yes | Framework you already hold, e.g. 'SOC 2' |
| target | string | yes | Framework you are working toward, e.g. 'ISO 27001:2022' |
| min_confidence | string | no | high, medium or low |
How do you know this: the grounding behind a crosswalk's claims For any released framework pair, return the reasoning and the provenance behind its mappings: what document each control was verified against, when, who judged the mapping, on what date, and whether it survived an adversarial pass that argued against it. PAID PER CALL, $0.015 over x402 (USDC on Base); a Professional API key is serve
| Parameter | Type | Required | Notes |
|---|---|---|---|
| source | string | yes | — |
| target | string | yes | — |
| limit | integer | no | — |
Everything about one crosswalk pair, including what was rejected One framework pair in full: the coverage percentage and how it was arrived at, a sample of the claims that held with the reasoning behind each, and a sample of the claims that were proposed and refuted with the reason each failed. The rejected claims are part of the answer, not an appendix. A coverage number quoted without them is
| Parameter | Type | Required | Notes |
|---|---|---|---|
| source | string | yes | — |
| target | string | yes | — |
| limit | integer | no | — |
What was claimed and did not hold, with the reason PAID PER CALL, $0.015 over x402 (USDC on Base); a Professional API key is served free instead. Free without payment or key: agent_crosswalk_pairs, agent_search_frameworks. The mappings that were proposed for a pair and then refuted, each with why it failed. Refuted mappings are kept in the graph rather than deleted, so what was rejected is as ins
| Parameter | Type | Required | Notes |
|---|---|---|---|
| source | string | yes | — |
| target | string | yes | — |
| limit | integer | no | — |
What everything you already hold covers, together PAID PER CALL, $0.015 over x402 (USDC on Base); a Professional API key is served free instead. Free without payment or key: agent_crosswalk_pairs, agent_search_frameworks. Give the frameworks an organisation already holds and one it needs. Returns what they cover TOGETHER, what each one adds that the others do not, and what none of them reaches.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| holds | string | yes | — |
| target | string | yes | — |
Get a checkout link for a crosswalk report Returns a payment link for the crosswalk between two frameworks. Released pairs are delivered immediately on payment; any other pair is built to order at the same price. This returns a LINK, it does not take payment. An agent hands the link to whoever it is acting for. No card details pass through the agent. ### Responses: 200: Successful Response
No parameter schema on file.
Get a checkout link for a single document compliance review Returns a payment link for a Single Document Compliance Review against one framework. On payment the buyer is emailed a single-use link that opens the same automated pipeline a Professional subscriber uses: upload one PDF or Word document, get back a gap analysis naming every control the document addresses and every one it does not, and
No parameter schema on file.
Framework pairs with a released coverage crosswalk Lists the framework pairs that have a reviewed, signed-off coverage crosswalk, with the coverage figure for each. Call this before agent_coverage_crosswalk to find out which pairs return a number. A pair that is not listed here has not been through review. Asking for it returns an honest 'not released' rather than an unreviewed percentage. Any p
No parameter schema on file.
List Engagements Every adoption engagement the signed in consultant runs, with its current state. ### Responses: 200: Successful Response (Success Response) Content-Type: application/json
No parameter schema on file.
Adoption Summary Adoption against baseline for one engagement: overall, by process area, and movement. Says whether the baseline was measured or reconstructed from artefacts, and whether the two waves are comparable at all. A pulse that used a different question set is reported as not comparable rather than differenced, because the difference would be between two rulers rather than two measureme
| Parameter | Type | Required | Notes |
|---|---|---|---|
| engagement_id | integer | yes | — |
Get Report The latest management report as facts plus the evidence behind each one. Returns the fact sheet, not the rendered page. Every figure carries the responses or the uploaded file it came from, so a claim can be checked rather than repeated. ### Responses: 200: Successful Response (Success Response) Content-Type: application/json
| Parameter | Type | Required | Notes |
|---|---|---|---|
| engagement_id | integer | yes | — |
- Every tool — any call limit is its publisher’s, not ours
- No card, and mcprush charges nothing for it
- Runs at its publisher’s own address — this marketplace is not in the path
- Nothing to cap, because mcprush bills nothing
What counts against your monthly calls
| Tool | Unit | Calls used | Out of the allowance |
|---|
Nothing here is billable: mcprush charges nothing to install Compliance Intelligence or to call it, at any volume.
Two independent axes, because powerful and malicious are different questions. The grade is threat only. The capability level is blast radius, and it is never a penalty on the grade — it is priced as one subtract-only term in the score, where you can see it.
This listing is an address its publisher runs, and you connect to it directly — this marketplace is not in the path. The scanner reads packages and public source, and an address is neither: the repository linked on this page is where this record was collected from, not a copy of what the address serves, so it is not graded in its place. So there is no grade — not a withheld one, an unmeasured one.
Release history
This is an address its publisher runs: which release it serves is theirs to choose, so there is nothing here to pin. The history below is for reading; the current release on file is 1.1.0.
No release note was published with this version.
One review per account, from a signed-in account that does not publish this listing. Nothing else is asked — you can say what you think before you install it. Publishers can reply once per review, and a review can be edited or deleted by whoever wrote it.
Any signed-in account that does not publish Compliance Intelligence can review it, once — before installing it or after. A review from an account that has installed it is marked as one.
Nobody has reviewed this listing. The rating on the card is the mean of the reviews written here and nothing else, so there is no rating until somebody writes the first — which takes a signed-in account that does not publish it, and nothing else.