75 downloads/week on PyPI

EU Cyber Resilience Act Annex IV Classifier MCP

CRA enforcement starts 11 December 2027. Know your product's security requirement category NOW. This MCP server classifies your digital product against all 9 essential cybersecurity requirement categories, assesses vulnerability handling, and identifies EU declaration of conformity gaps.

Get Pro — £79/mo →View on GitHub

Install

pip install meok-cra-annex-iv-classifier-mcp

What it does

9-category essential security requirements

Classify your product against all 9 categories of essential cybersecurity requirements in CRA Annex I, Part I — from design-by-default to incident reporting.

Vulnerability handling assessment

Evaluate your vulnerability handling processes against CRA Annex I, Part II requirements including coordinated disclosure, SBOM provision, and patch management.

EU declaration of conformity gaps

Identify missing elements in your EU Declaration of Conformity per CRA Annex IV — manufacturer details, product identification, conformity assessment procedure, standards applied.

HMAC-signed attestations

Emit cryptographically signed classification attestations that auditors and notified bodies can verify independently via the MEOK attestation API.

How it works

Install

pip install meok-cra-annex-iv-classifier-mcp — one command, zero config.

Describe

Feed your product description, SBOM, or architecture doc to the classifier tool.

Classify

Get category, matched requirements, gaps, and a signed attestation ready for compliance.

Example classification output

{
  "cert_id": "cra-cls-2026-05-b9d4e1",
  "regulation": "EU CRA Annex IV",
  "product_class": "Class I (self-assessment)",
  "essential_requirements": {
    "matched": 7,
    "total": 9,
    "categories": [
      "design_security_by_default",
      "access_control",
      "data_protection",
      "availability_resilience",
      "minimised_attack_surface",
      "incident_impact_mitigation",
      "secure_update_mechanism"
    ]
  },
  "gaps_found": [
    "vulnerability_disclosure_policy_incomplete",
    "sbom_machine_readable_format_missing"
  ],
  "conformity_declaration_status": "PARTIAL",
  "score_percent": 78,
  "signed_at": "2026-05-05T10:22:41Z",
  "verify_url": "https://meok-attestation-api.vercel.app/verify/cra-cls-2026-05-b9d4e1"
}

Pricing

Free

£0/mo

3 classifications/month. Community support. No signed attestations.

Pro

£79/mo

Unlimited classifications + HMAC-signed attestations + priority support.

Enterprise

£1,499/mo

Dedicated signing keys, custom verify domain, SLA, onboarding call.

CRA enforcement: 11 December 2027

Know your product category and close security gaps before conformity assessment begins.

Get Pro — £79/mo →

MEOK AI Labs · CSOAI LTD · UK Companies House 16939677 · 3rd Floor, 86-90 Paul Street, London EC2A 4NE · meok.ai