← Back to search

io.github.CSOAI-ORG/coppa-ferpa-mcp

CSOAI-ORG Scanned 17d ago

Children's privacy compliance: COPPA (US), FERPA (US edu), EU AI Act children's provisions, UK A...

MCP Registry ↗
C
74.2 / 100

Versions

1.0.6latest
first seen Jun 30, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 7

list_regulations_in_db
annotations: none low

List all regulations in the local EUR-Lex FTS5 database.

check_under_13_processing
annotations: none low

COPPA Section 312 verifiable parental consent requirements Args: query: Optional query parameter (regulation ref, identifier, or input data). api_key: Optional MEOK API key for Pro+ tier features. Returns: JSON with structured assessment, regulation refs, and recommended actions.

query str api_key str
ferpa_audit
annotations: none low

FERPA education records protection check Args: query: Optional query parameter (regulation ref, identifier, or input data). api_key: Optional MEOK API key for Pro+ tier features. Returns: JSON with structured assessment, regulation refs, and recommended actions.

query str api_key str
aadc_uk_check
annotations: none low

UK ICO Age Appropriate Design Code 15 standards Args: query: Optional query parameter (regulation ref, identifier, or input data). api_key: Optional MEOK API key for Pro+ tier features. Returns: JSON with structured assessment, regulation refs, and recommended actions.

query str api_key str
eu_ai_act_minors
annotations: none low

EU AI Act Article 5(1)(b) exploitation of minors prohibition Args: query: Optional query parameter (regulation ref, identifier, or input data). api_key: Optional MEOK API key for Pro+ tier features. Returns: JSON with structured assessment, regulation refs, and recommended actions.

query str api_key str
kids_data_flow_map
annotations: none low

Map data flows that touch minors with risk scoring Args: query: Optional query parameter (regulation ref, identifier, or input data). api_key: Optional MEOK API key for Pro+ tier features. Returns: JSON with structured assessment, regulation refs, and recommended actions.

query str api_key str
search_regulation
annotations: none low

Full-text search across 410+ articles of real EU regulation text (EUR-Lex verified). Args: query: Search terms. FTS5 syntax supported (AND, OR, NEAR, phrase quoting). regulation: Optional filter - one of: eu-ai-act, dora, nis2, cra, csrd, gdpr. limit: Max results (default 10). Returns: Snippets from matching articles with regulation + article + relevance score. Verbatim from EUR-Lex Cellar — auditor-defensible quotes with `>>>match<<<` highlights.

limit int query str regulation str

Permissions 4

network medium
Server uses network capabilities via: urllib
filesystem low
Server uses filesystem capabilities via: open(), os, pathlib
database medium
Server uses database capabilities via: sqlite3
env_vars low
Server uses env_vars capabilities via: os.environ

Scan Findings 34

info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
low
Tool 'check_under_13_processing' has no annotations annotation_checker · 100%
low
Tool 'ferpa_audit' has no annotations annotation_checker · 100%
low
Tool 'aadc_uk_check' has no annotations annotation_checker · 100%
low
Tool 'eu_ai_act_minors' has no annotations annotation_checker · 100%
low
Tool 'kids_data_flow_map' has no annotations annotation_checker · 100%
low
Tool 'search_regulation' has no annotations annotation_checker · 100%
low
Tool 'list_regulations_in_db' has no annotations annotation_checker · 100%
medium
Vulnerable dependency: mcp@1.0.0 (GHSA-3qhf-m339-9g5v) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (GHSA-9h52-p55h-vw2f) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (GHSA-j975-95f5-7wqh) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (GHSA-jpw9-pfvf-9f58) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (GHSA-vj7q-gjh5-988w) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (PYSEC-2026-1616) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (PYSEC-2026-1617) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (PYSEC-2026-1618) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (PYSEC-2026-3482) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (PYSEC-2026-3483) dependency_analyzer · 95%
info
pyproject.toml metadata manifest_parser · 100%
info
Tool: check_under_13_processing manifest_parser · 90%
info
Tool: ferpa_audit manifest_parser · 90%
info
Tool: aadc_uk_check manifest_parser · 90%
info
Tool: eu_ai_act_minors manifest_parser · 90%
info
Tool: kids_data_flow_map manifest_parser · 90%
info
Tool: search_regulation manifest_parser · 90%
info
Tool: list_regulations_in_db manifest_parser · 90%
info
Required env vars (2) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 80%
low
Permission: filesystem access detected permission_analyzer · 80%
medium
Permission: database access detected permission_analyzer · 90%
low
Permission: env_vars access detected permission_analyzer · 90%
info
No dependency files found for SBOM generation sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%