← Back to search

io.github.CSOAI-ORG/canada-aida-ai-mcp

CSOAI-ORG Scanned 16d ago

Canada Aida Ai automation via MCP. Includes classify ai system, impact assessment, complianc...

C
72.4 / 100

Versions

1.0.14latest
first seen Jun 30, 2026
1.0.2
first seen Jun 5, 2026
1.0.5
first seen May 19, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 5

classify_ai_system
annotations: none low

Classify an AI system under AIDA as high-impact or general-purpose. Evaluates against high-impact criteria including health/safety, human rights, economic impact, vulnerable populations, and bias risk. Args: system_description: Description of the AI system system_purpose: Primary purpose of the AI system target_users: Who uses or is affected by the system (e.g. ["patients", "employees", "children"]) data_types: Types of data the system processes (e.g. ["personal", "health", "biometric"]) deployment_context: Context of deployment: "commercial", "government", "healthcare", "finance", "education" interprovincial_trade: Whether the system operates in interprovincial or international trade (AIDA scope) caller: Caller identifier for rate limiting tier: Access tier (free/pro) Behavior: This tool is read-only and stateless — it produces analysis output without modifying any external systems, databases, or files. Safe to call repeatedly with identical inputs (idempotent). Free tier: 10/day rate limit. Pro tier: unlimited. No authentication required for basic usage. When to use: Use this tool when you need structured analysis or classification of inputs against established frameworks or standards. When NOT to use: Not suitable for real-time production decision-making without human review of results.

tier str caller str api_key str data_types string target_users string system_purpose str deployment_context str system_description str interprovincial_trade bool
impact_assessment
annotations: none low

Perform an AI impact assessment per AIDA requirements (Sections 7-8). Evaluates potential harms, biased output risks, and required mitigation measures for high-impact AI systems. Args: system_name: Name of the AI system system_description: Detailed description of the system and its function affected_populations: Groups of people affected by the system risk_scenarios: Specific risk scenarios to evaluate mitigation_measures: Currently implemented mitigation measures caller: Caller identifier for rate limiting tier: Access tier (free/pro) Behavior: This tool is read-only and stateless — it produces analysis output without modifying any external systems, databases, or files. Safe to call repeatedly with identical inputs (idempotent). Free tier: 10/day rate limit. Pro tier: unlimited. No authentication required for basic usage. When to use: Use this tool when you need structured analysis or classification of inputs against established frameworks or standards. When NOT to use: Not suitable for real-time production decision-making without human review of results. Behavioral Transparency: - Side Effects: This tool is read-only and produces no side effects. It does not modify any external state, databases, or files. All output is computed in-memory and returned directly to the caller. - Authentication: No authentication required for basic usage. Pro/Enterprise tiers require a valid MEOK API key passed via the MEOK_API_KEY environment variable. - Rate Limits: Free tier: 10 calls/day. Pro tier: unlimited. Rate limit headers are included in responses (X-RateLimit-Remaining, X-RateLimit-Reset). - Error Handling: Returns structured error objects with 'error' key on failure. Never raises unhandled exceptions. Invalid inputs return descriptive validation errors. - Idempotency: Fully idempotent — calling with the same inputs always produces the same output. Safe to retry on timeout or transient failure. - Data Privacy: No input data is stored, logged, or transmitted to external services. All processing happens locally within the MCP server process.

tier str caller str api_key str system_name str risk_scenarios string system_description str mitigation_measures string affected_populations string
compliance_check
annotations: none low

Check compliance with AIDA obligations. Evaluates whether a responsible person meets all AIDA requirements for their AI system classification. Args: system_classification: Classification result: "HIGH_IMPACT" or "GENERAL" measures_in_place: List of compliance measures implemented records_maintained: Whether Section 9 records are being kept public_description_published: Whether Section 10 public description is published monitoring_active: Whether Section 8 monitoring is in place notification_procedures: Whether Sections 11-12 notification procedures exist caller: Caller identifier for rate limiting tier: Access tier (free/pro) Behavior: This tool is read-only and stateless — it produces analysis output without modifying any external systems, databases, or files. Safe to call repeatedly with identical inputs (idempotent). Free tier: 10/day rate limit. Pro tier: unlimited. No authentication required for basic usage. When to use: Use this tool when you need structured analysis or classification of inputs against established frameworks or standards. When NOT to use: Not suitable for real-time production decision-making without human review of results.

tier str caller str api_key str measures_in_place string monitoring_active bool records_maintained bool system_classification str notification_procedures bool public_description_published bool
crosswalk_to_eu_ai_act
annotations: none low

Map AIDA requirements to EU AI Act obligations. Essential for organizations operating in both Canadian and European markets, showing where compliance overlaps and where additional measures are needed. Args: focus_area: Focus on "all", "classification", "transparency", "enforcement", or "risk_management" caller: Caller identifier for rate limiting tier: Access tier (free/pro) Behavior: This tool is read-only and stateless — it produces analysis output without modifying any external systems, databases, or files. Safe to call repeatedly with identical inputs (idempotent). Free tier: 10/day rate limit. Pro tier: unlimited. No authentication required for basic usage. When to use: Use this tool when you need structured analysis or classification of inputs against established frameworks or standards. When NOT to use: Not suitable for real-time production decision-making without human review of results.

tier str caller str api_key str focus_area str
generate_documentation
annotations: none low

Generate AIDA compliance documentation including public system descriptions (Section 10), compliance records (Section 9), and notification templates (Sections 11-12). Args: system_name: Name of the AI system system_description: Description of the AI system classification: AIDA classification: "HIGH_IMPACT" or "GENERAL" responsible_person: Name/org of the responsible person under AIDA document_type: Type of document: "public_description", "compliance_record", "notification_affected", "notification_minister" caller: Caller identifier for rate limiting tier: Access tier (free/pro) Behavior: This tool generates structured output without modifying external systems. Output is deterministic for identical inputs. No side effects. Free tier: 10/day rate limit. Pro tier: unlimited. No authentication required for basic usage. When to use: Use this tool when you need structured analysis or classification of inputs against established frameworks or standards. When NOT to use: Not suitable for real-time production decision-making without human review of results.

tier str caller str api_key str system_name str document_type str classification str responsible_person str system_description str

Permissions 3

network medium
Server uses network capabilities via: urllib
filesystem low
Server uses filesystem capabilities via: os
env_vars low
Server uses env_vars capabilities via: os.environ

Scan Findings 32

low
Tool 'classify_ai_system' has no annotations annotation_checker · 100%
low
Tool 'impact_assessment' has no annotations annotation_checker · 100%
low
Tool 'compliance_check' has no annotations annotation_checker · 100%
low
Tool 'crosswalk_to_eu_ai_act' has no annotations annotation_checker · 100%
low
Tool 'generate_documentation' has no annotations annotation_checker · 100%
high
Remote transport without authentication auth_checker · 70%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: mcp@1.0.0 (GHSA-3qhf-m339-9g5v) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (GHSA-9h52-p55h-vw2f) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (GHSA-j975-95f5-7wqh) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (GHSA-jpw9-pfvf-9f58) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (GHSA-vj7q-gjh5-988w) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (PYSEC-2026-1616) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (PYSEC-2026-1617) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (PYSEC-2026-1618) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (PYSEC-2026-3482) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (PYSEC-2026-3483) dependency_analyzer · 95%
info
package.json metadata manifest_parser · 100%
info
pyproject.toml metadata manifest_parser · 100%
info
Tool: classify_ai_system manifest_parser · 90%
info
Tool: impact_assessment manifest_parser · 90%
info
Tool: compliance_check manifest_parser · 90%
info
Tool: crosswalk_to_eu_ai_act manifest_parser · 90%
info
Tool: generate_documentation manifest_parser · 90%
info
Transport: streamable-http manifest_parser · 80%
info
Required env vars (5) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 80%
low
Permission: filesystem access detected permission_analyzer · 70%
low
Permission: env_vars access detected permission_analyzer · 90%
info
No dependency files found for SBOM generation sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%