kajaril avatar

Sovereignty Scan

kajaril/sovereignty-scan-mcp

Scans cloud vendor sovereignty profiles against EU AI Act compliance requirements. Exposes four tools: scan_provider returns jurisdiction, data residency regions, CLOUD Act exposure, and GDPR DPA status for 55 tracked services across 12 categories. scan_stack aggregates risk across your entire dependency list. get_us_cloud_act_providers filters by compelled disclosure risk, and suggest_eu_alternatives surfaces EEA/UK/CH alternatives in the same category. Built on Cloudflare Workers with D1 and KV, MIT licensed with a free tier at 100 requests per day. Useful when you need to document data processor locations, generate DPA checklists, or spot CLOUD Act exposure before a regulator does.

GitHub stars
1
tools
5
transport
HTTP
last updated
May 11, 2026

Tools

5 tools

Public tool metadata for what this MCP can expose to an agent.

scan_providerFull jurisdictional profile for a single vendor: headquarters country, data residency regions, EU residency option, US CLOUD Act exposure, GDPR DPA availability, and legal framework.

Full jurisdictional profile for a single vendor: headquarters country, data residency regions, EU residency option, US CLOUD Act exposure, GDPR DPA availability, and legal framework.

No parameter schema in public metadata yet.

scan_stackAggregate jurisdictional summary for a list of vendors: CLOUD Act exposure count, EU residency coverage, missing DPAs. Maximum 50 providers per call.

Aggregate jurisdictional summary for a list of vendors: CLOUD Act exposure count, EU residency coverage, missing DPAs. Maximum 50 providers per call.

No parameter schema in public metadata yet.

list_providersList all tracked providers. Optional category filter.

List all tracked providers. Optional category filter.

No parameter schema in public metadata yet.

get_us_cloud_act_providersAll providers subject to US CLOUD Act compelled disclosure (18 U.S.C. § 2713). No parameters.

All providers subject to US CLOUD Act compelled disclosure (18 U.S.C. § 2713). No parameters.

No parameter schema in public metadata yet.

suggest_eu_alternativesEU/EEA/UK/CH-based alternatives in the same category as a given provider. Deterministic ordering: EU/EEA first, then UK/CH. Capped at 10.

EU/EEA/UK/CH-based alternatives in the same category as a given provider. Deterministic ordering: EU/EEA first, then UK/CH. Capped at 10.

No parameter schema in public metadata yet.

Sponsors

Readme

@kajaril/sovereignty-scan-mcp

MCP server for EU AI Act vendor sovereignty scanning. MIT-licensed free tier.

npm npm downloads License: MIT sovereignty-scan-mcp MCP server

Know where your stack processes data before the enforcer does. Covers 55 providers across 12 categories.

Install

1. Get a free API key

curl -s -X POST https://sovereignty-scan.kajaril.com/register \
  -H "Content-Type: application/json" \
  -d '{"email":"you@example.com"}' | jq .api_key

Save the returned key — it cannot be recovered.

2. Add to claude_desktop_config.json


View the full README on GitHub

Details

Repository
github.com/kajaril/sovereignty-scan-mcp
Website
kajaril.com/sovereignty-scan
Transport
HTTP
Registry
MCP registry, active