← Back to search

io.github.CSOAI-ORG/iso-42005-impact-mcp

CSOAI-ORG streamable_http Scanned 24d ago

ISO/IEC 42005:2025 AI Impact Assessment MCP — first international standard for AI impact

B
88.9 / 100

Versions

1.0.4latest
first seen Jun 30, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 7

list_phases
annotations: none low

List the 6 ISO/IEC 42005 lifecycle phases.

impact_categories
annotations: none low

List the 7 impact categories ISO/IEC 42005 evaluates.

assess_phase
annotations: none low

Structured assessment of one lifecycle phase against ISO 42005 expectations. Args: phase: One of "design", "development", "validation", "deployment", "monitoring", "decommissioning". ai_system_description: Free-text description of the AI system being assessed. Returns: {phase, checklist, gaps, next_step}

phase str ai_system_description str
run_full_impact_assessment
annotations: none low

Run a full ISO 42005 impact assessment across all phases + categories. Args: ai_system_description: Free-text description of the AI system being assessed. Returns: {phases, category_scores, overall_risk, mitigations_required, signed}

ai_system_description str
sign_attestation
annotations: none low

HMAC-sign a completed impact assessment for the audit chain. Args: assessment: Full assessment dict (typically from run_full_impact_assessment()). Returns: {assessment_id, signature, verify_url, chain_entry}

assessment dict
cross_walk_eu_ai_act
annotations: none low

Map ISO 42005 impact-assessment outputs to specific EU AI Act articles. Args: impact_assessment: Output from run_full_impact_assessment. Returns: {article_mappings: [{article, relevance, mitigation_via_mcp}]}

impact_assessment dict
cross_walk_iso_42001
annotations: none low

Map ISO 42005 outputs to ISO 42001 AIMS clauses.

impact_assessment dict

Permissions 3

network medium
Server uses network capabilities via: urllib
filesystem low
Server uses filesystem capabilities via: open(), os
env_vars low
Server uses env_vars capabilities via: os.environ

Scan Findings 23

low
Tool 'list_phases' has no annotations annotation_checker · 100%
low
Tool 'impact_categories' has no annotations annotation_checker · 100%
low
Tool 'assess_phase' has no annotations annotation_checker · 100%
low
Tool 'run_full_impact_assessment' has no annotations annotation_checker · 100%
low
Tool 'sign_attestation' has no annotations annotation_checker · 100%
low
Tool 'cross_walk_eu_ai_act' has no annotations annotation_checker · 100%
low
Tool 'cross_walk_iso_42001' has no annotations annotation_checker · 100%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
info
pyproject.toml metadata manifest_parser · 100%
info
Tool: list_phases manifest_parser · 90%
info
Tool: impact_categories manifest_parser · 90%
info
Tool: assess_phase manifest_parser · 90%
info
Tool: run_full_impact_assessment manifest_parser · 90%
info
Tool: sign_attestation manifest_parser · 90%
info
Tool: cross_walk_eu_ai_act manifest_parser · 90%
info
Tool: cross_walk_iso_42001 manifest_parser · 90%
info
Required env vars (2) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 80%
low
Permission: filesystem access detected permission_analyzer · 80%
low
Permission: env_vars access detected permission_analyzer · 90%
info
No dependency files found for SBOM generation sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%