Best compliance MCP servers

The Model Context Protocol (MCP) is an open standard for exposing tools and data to AI agents over a defined interface, so a coding or compliance agent can call structured GRC functions instead of scraping a web app. A compliance MCP server typically surfaces controls, evidence, framework mappings, or policy context as callable tools. This shortlist shows live listings whose integrations field includes MCP, and that tag spans two roles: some products publish an MCP server you connect an agent to, while others are agents that consume MCP from elsewhere. It is still an early category, so the matched set is deliberately small and only some rows ship a published package today. Before treating a row as a server you can wire up, check its mcp_package and docs_url for a real npm package or endpoint, the transport and auth it expects, and which frameworks or data it exposes.

Who this is for. Agent builders, platform engineers, and GRC teams wiring compliance context into developer agents.

Eligibility. Included solely when a live listing tags integrations with MCP. Listings without that tag stay on other shortlists or the main directory. The tag does not guarantee a published npm MCP package or server vs client role.

How order works. Matched agents are filtered from the live catalog, then sorted by date_added (newest first) and name. Paid skip-the-queue fees buy publish timing, never rank or praise on this page. House products (Better ISMS) appear under the same rules with an ownership note. See /transparency.

Target query: best compliance MCP servers. Parent hub: /best. Full catalog: /directory.