← Back to search

io.github.CSOAI-ORG/meok-fria-generator-mcp

CSOAI-ORG Scanned 16d ago

EU AI Act Article 27 Fundamental Rights Impact Assessment generator. EDPB DPIA crosswalk, EU...

C
74.6 / 100

Versions

1.0.1latest
first seen Jun 5, 2026
1.0.3
first seen May 19, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 7

is_fria_required
annotations: none low

Determine if a FRIA is mandatory under EU AI Act Article 27 for this deployment. Args: organisation_type: One of public-authority / private-operator / SaaS-vendor / individual. is_public_law_body: True if the organisation is a body governed by Member State or EU public law. provides_public_service: True if the organisation provides services in a public-service context (recruitment for public sector, education, healthcare, social services, etc.). annex_iii_categories: List of Annex III high-risk categories the system falls under. E.g., ["employment-and-workforce", "education-and-vocational-training", "credit-scoring"]. Returns: Decision + rationale + Article 27 reference.

organisation_type str is_public_law_body bool annex_iii_categories string provides_public_service bool
generate_fria_template
annotations: none low

Generate a FRIA template structure with all 7 mandatory Article 27 fields populated as guidance. Args: deployer_name: Legal name of the deployer (e.g., "Acme Hiring Ltd"). ai_system_name: Name of the AI system being deployed. annex_iii_category: Annex III category (e.g., "employment-and-workforce"). expected_users: Estimated count of natural persons whose data will be processed. geographic_scope: List of country codes (e.g., ["DE", "FR", "IE"]). Returns: Structured FRIA template ready for completion by the deployer's compliance team.

deployer_name str ai_system_name str expected_users int geographic_scope string annex_iii_category str
map_to_edpb_dpia
annotations: none low

Map FRIA fields to EDPB harmonised DPIA template (14 April 2026) sections to avoid double work. Args: annex_iii_category: Annex III category for context. Returns: Crosswalk showing which FRIA fields satisfy which DPIA sections.

annex_iii_category str
signed_fria_attestation
annotations: none low

Produce an HMAC-signed FRIA attestation via the public meok-attestation-api. Args: deployer_name: Legal name of the deployer. ai_system_name: Name of the AI system. annex_iii_category: Annex III category. completed_sections: List of FRIA section IDs that have been completed (e.g., ["a_deployer_processes", "b_period_frequency_use"]). sign_off_role: Role of the signer. Returns: Signed attestation with verification URL.

deployer_name str sign_off_role str ai_system_name str annex_iii_category str completed_sections string
list_charter_articles
annotations: none low

List EU Charter of Fundamental Rights articles relevant to AI deployer FRIA.

list_mandatory_triggers
annotations: none low

List the conditions that make a FRIA mandatory under Article 27(1).

pricing
annotations: none low

Pricing for MEOK FRIA Generator.

Permissions 3

network medium
Server uses network capabilities via: urllib
filesystem low
Server uses filesystem capabilities via: os
env_vars low
Server uses env_vars capabilities via: os.environ

Scan Findings 33

low
Tool 'is_fria_required' has no annotations annotation_checker · 100%
low
Tool 'generate_fria_template' has no annotations annotation_checker · 100%
low
Tool 'map_to_edpb_dpia' has no annotations annotation_checker · 100%
low
Tool 'signed_fria_attestation' has no annotations annotation_checker · 100%
low
Tool 'list_charter_articles' has no annotations annotation_checker · 100%
low
Tool 'list_mandatory_triggers' has no annotations annotation_checker · 100%
low
Tool 'pricing' has no annotations annotation_checker · 100%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: mcp@1.2.0 (GHSA-3qhf-m339-9g5v) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.2.0 (GHSA-9h52-p55h-vw2f) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.2.0 (GHSA-j975-95f5-7wqh) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.2.0 (GHSA-jpw9-pfvf-9f58) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.2.0 (GHSA-vj7q-gjh5-988w) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.2.0 (PYSEC-2026-1616) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.2.0 (PYSEC-2026-1617) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.2.0 (PYSEC-2026-1618) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.2.0 (PYSEC-2026-3482) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.2.0 (PYSEC-2026-3483) dependency_analyzer · 95%
info
pyproject.toml metadata manifest_parser · 100%
info
Tool: is_fria_required manifest_parser · 90%
info
Tool: generate_fria_template manifest_parser · 90%
info
Tool: map_to_edpb_dpia manifest_parser · 90%
info
Tool: signed_fria_attestation manifest_parser · 90%
info
Tool: list_charter_articles manifest_parser · 90%
info
Tool: list_mandatory_triggers manifest_parser · 90%
info
Tool: pricing manifest_parser · 90%
info
Required env vars (1) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 80%
low
Permission: filesystem access detected permission_analyzer · 70%
low
Permission: env_vars access detected permission_analyzer · 90%
info
No dependency files found for SBOM generation sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%