Regulane compliance check

Check code against secure-coding rules mapped to ISO 27001 and the DPDP Act. Free, no account.

Should I use this

Quality & Safety

A
Description quality
100%
Schema completeness
95%
Naming quality
90%
Poisoning risk
100%
Permission match
100%
Protocol compliance
100%

Based on automated analysis of tool definitions and protocol compliance.

Context Cost

~589Tokens (tool definitions)
~2.5 KBTypical response size
Minimal attention impact (0.46% of 128k context)

This is the approximate number of tokens consumed each time the server's tools are loaded into a model's context. Higher counts reduce the attention available for other tasks.

Install

One-Click Install

Add this to your `claude_desktop_config.json` file:

{
  "mcpServers": {
    "compliance": {
      "url": "https://regulane.com/api/mcp"
    }
  }
}

Remote endpoints

https://regulane.com/api/mcpstreamable-http

What it can do

Tool inventory

Tools (2)

🟢 Read-only🟡 Write🔴 Delete⚪ Unknown
🟢get_compliance_rules(areas)

Returns the workspace's secure-coding rules: what to look for, how to fix it, and the ISO 27001 Annex A controls and DPDP Act sections each rule evidences. Call this before reviewing a change, then report with report_compliance_check.

Input Schema

{
  "type": "object",
  "properties": {
    "areas": {
      "type": "array",
      "items": {
        "type": "string",
        "enum": [
          "secrets_and_auth",
          "injection",
          "cryptography",
          "personal_data",
          "logging",
          "supply_chain",
          "infrastructure",
          "change_safety"
        ]
      },
      "description": "Only the rules in these areas. Omit for all rules (recommended)."
    }
  },
  "additionalProperties": false
}
🟢report_compliance_check(repository, branch, commit, agent, scope, ...)

Turns the check you ran against the rules from get_compliance_rules into a scorecard: findings by severity, the ISO 27001 controls and DPDP Act sections affected, and the fix for each. Report a clean check too. Regulane does not store it. Send no source code, secrets or personal data.

Input Schema

{
  "type": "object",
  "properties": {
    "repository": {
      "type": "string",
      "description": "The git remote URL, or the project folder name when there is no remote."
    },
    "branch": {
      "type": "string",
      "description": "Current branch, if known."
    },
    "commit": {
      "type": "string",
      "description": "Commit SHA the check ran against, if known."
    },
    "agent": {
      "type": "string",
      "description": "Which coding agent you are, such as \"Claude Code\", \"Cursor\", \"GitHub Copilot\", \"Codex\"."
    },
    "scope": {
      "type": "string",
      "description": "One line on what was examined, such as \"staged changes, 6 files\" or \"src/payments\"."
    },
    "rules_checked": {
      "type": "array",
      "items": {
        "type": "string"
      },
      "description": "Every rule id you checked, including those with no finding."
    },
    "findings": {
      "type": "array",
      "maxItems": 200,
      "description": "One entry per problem found. Empty when the check is clean.",
      "items": {
        "type": "object",
        "properties": {
          "rule_id": {
            "type": "string",
            "description": "The rule broken, such as RG-SC-004."
          },
          "file": {
            "type": "string",
            "description": "Path relative to the repository root."
          },
          "line": {
            "type": "integer",
            "minimum": 1,
            "description": "Line number, if there is one."
          },
          "summary": {
            "type": "string",
            "description": "One sentence on the problem. No code, secrets or personal data."
          }
        },
        "required": [
          "rule_id",
          "file",
          "summary"
        ],
        "additionalProperties": false
      }
    }
  },
  "required": [
    "repository",
    "scope",
    "rules_checked",
    "findings"
  ],
  "additionalProperties": false
}

Community

Rate this Server

Evidence

Recent observations

verifiedversion not recorded2 tools