SOC 2 Compliance MCP server

Read from the package source without running it. The installed server may list more.

• assess_trust_principles

  Audit an AI system against the 5 SOC 2 Trust Service Criteria: Security (Common Criteria), Availability, Processing Integrity, Confidentiality, and Privacy. Returns compliance status per principle with AI-specific findings.

• control_gap_analysis

  Gap analysis against SOC 2 controls. Compares implemented controls to required criteria and produces a prioritized remediation plan.

• crosswalk_to_iso27001

  Map SOC 2 controls to ISO 27001 Annex A controls. Shows how SOC 2 compliance overlaps with ISO 27001 certification requirements, enabling organizations pursuing dual compliance to identify shared controls.

• generate_control_matrix

  Generate a SOC 2 control matrix with control objectives, criteria, control activities, and evidence requirements. Suitable for auditor preparation and internal control documentation.

• readiness_checklist

  SOC 2 Type I/II readiness assessment. Generates a comprehensive pre-audit checklist with timeline, resource requirements, and AI-specific considerations.

• risk_assessment

  SOC 2 risk assessment per AICPA guidelines. Identifies risks to Trust Service Criteria, assesses likelihood and impact, and maps to specific SOC 2 control requirements.

• Code scan22 source files scanned25/25
• –Live reliabilityno gateway calls yet and no remote to proben/a
• –Tool poisoningtools not inspected (local package is not executed); not countedn/a
• Auth qualitylocal package, no credentials required12/15
• Maintenancerepository not readable: repo not found3/15
• Maintainer identityno repository or website to verify2/10

SOC 2 Compliance: common questions

Is SOC 2 Compliance MCP server safe?

With care: it is graded C, so read the findings first (65/100). Read the SOC 2 Compliance safety report

How do I install SOC 2 Compliance?

It runs on your machine. Copy the Claude Code, Claude Desktop or Cursor config from the install section.

Does SOC 2 Compliance need an API key?

Not as far as the registry entry and our scan can tell: no credentials are declared or required.

Is SOC 2 Compliance maintained?

The latest release is v1.0.15.

What can I use instead of SOC 2 Compliance?

Servers from other publishers that do the same job: Feedmyagent MCP server, Passiv Web Tools MCP server and CrowdStrike Falcon MCP Server. Compare all SOC 2 Compliance alternatives.