EU Audit Trail
If you're building AI systems that need to meet EU AI Act or GDPR requirements, this gives you a local SQLite audit log with tamper detection via HMAC hash chains. It exposes MCP tools to log inference calls, data access events, and arbitrary audit entries, then query them back by session or time range. Built-in PII scanning uses Microsoft Presidio to catch and redact EU patterns automatically. You get compliance_check against AI Act Articles 12 and 19 plus GDPR Article 30, and execute_erasure for right-to-be-forgotten requests. Everything stays on disk in a single database file. Useful if you're shipping a desktop app with an LLM and need defensible logs before August 2026 when high-risk obligations kick in.
- tools
- 10
- transport
- STDIO
- env var
- 1
- last updated
- Feb 27, 2026
Tools
10 toolsPublic tool metadata for what this MCP can expose to an agent.
log_eventRecord an audit event with automatic PII scanning
Record an audit event with automatic PII scanning
No parameter schema in public metadata yet.
log_inferenceLog an LLM inference call (model, tokens, cost)
Log an LLM inference call (model, tokens, cost)
No parameter schema in public metadata yet.
log_data_accessLog a document/data access event
Log a document/data access event
No parameter schema in public metadata yet.
query_logSearch events by time range, type, session
Search events by time range, type, session
No parameter schema in public metadata yet.
get_session_traceFull ordered trace of a session
Full ordered trace of a session
No parameter schema in public metadata yet.
get_statsSummary statistics over a time period
Summary statistics over a time period
No parameter schema in public metadata yet.
compliance_checkCheck against EU AI Act Art. 12/19 and GDPR Art. 30
Check against EU AI Act Art. 12/19 and GDPR Art. 30
No parameter schema in public metadata yet.
execute_erasureGDPR Article 17 right-to-erasure
GDPR Article 17 right-to-erasure
No parameter schema in public metadata yet.
get_pii_summarySummary of detected PII types (counts only)
Summary of detected PII types (counts only)
No parameter schema in public metadata yet.
verify_chainVerify hash chain integrity
Verify hash chain integrity
No parameter schema in public metadata yet.
Sponsors
Agent CaffeineSponsoredClose your lid, come back to finished work
SnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthly
WaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthly
knobsSponsoredSee your site on any phone, any day, in any languageConfiguration
AUDIT_CONFIGPath to the YAML configuration file
Readme
eu-audit-mcp
Tamper-evident audit trail MCP server for EU AI Act and GDPR compliance. Designed to be integrated into a local desktop application via stdio transport.
Features
- Tamper-evident logging — HMAC-SHA256 hash chain over all events
- PII scanning — Automatic detection and redaction via Microsoft Presidio (EU patterns)
- GDPR erasure — Article 17 right-to-erasure support with audit trail
- Compliance checks — Technical checklist against EU AI Act Articles 12/19 and GDPR Article 30
- Local-first — All data stays on your machine in a single SQLite file
Regulatory context
This server implements technical measures for the following EU regulations:
Details
- Repository
- github.com/jellewas/eu-audit-mcp
- Package
eu-audit-mcp- Transport
- STDIO
- Registry
- MCP registry, active