com.aiactradar/ai-act-radar MCP Server

The com.aiactradar/ai-act-radar MCP server provides EU AI Act obligations and updates compiled from ten official sources, including a national layer. It is intended to surface structured information about requirements and changes related to the AI Act, drawing specifically from those referenced official materials.

🛠️ Key Features

EU AI Act obligations
AI Act updates
Aggregates information from ten official sources
Includes a national layer

🚀 Use Cases

Tracking AI Act obligations for EU-facing implementations
Monitoring updates across multiple official sources
Considering both EU-level and national-level AI Act information

⚡ Developer Benefits

Centralizes AI Act obligation and update references from official sources
Includes national context alongside EU-level content

⚠️ Limitations

Source material is limited to what is available from the ten official sources and the national layer described.

aiactradar-examples

Reference webhook receivers for AI Act Radar. Each subdirectory is a self-contained, runnable example for one platform.

What every receiver does

Reads the raw request body (signature is over the bytes, not the parsed JSON).
Verifies X-AIAR-Timestamp is within 300 seconds of now.
Verifies X-AIAR-Signature (v1=<hex>) using HMAC-SHA-256 over <timestamp>.<raw_body> in constant time.
Checks an idempotency key (event.id) before doing real work — retries are normal.
Returns 2xx within 5 seconds; otherwise the dispatcher retries with exponential backoff.

The verification is identical across platforms; only the platform glue differs.

Examples

Folder	Platform	Notes
`cloudflare-workers/`	Cloudflare Workers	Web Crypto API, KV for idempotency
`vercel-edge/`	Vercel Edge Functions	Web Crypto API, Vercel KV for idempotency
`aws-lambda/`	AWS Lambda + API Gateway	Node `crypto` module, DynamoDB for idempotency
`express-node/`	Plain Express on Node	Node `crypto`, in-process LRU (replace for prod)
`fastify-typescript/`	Fastify + TS	Typed body parser, raw-body capture
`deno-deploy/`	Deno Deploy	Deno KV for idempotency

Try it without signing up

Each example has a test.sh that signs a sample event with a local secret and posts it to the running receiver. You can run the full loop on your laptop in under five minutes:

bash

cd cloudflare-workers
cp .dev.vars.example .dev.vars   # set AIA_SECRET to anything
npm install && npm run dev       # starts http://localhost:8787
# in another terminal:
bash test.sh                     # posts a signed sample event

Going to production

Store AIA_SECRET in your platform's secret manager. Never commit it.
Rotate the secret in the AI Act Radar dashboard at least every 90 days.
Subscribe to the dispatcher's webhook health channel — bounced deliveries surface there before customers notice.
Idempotency stores need a TTL of at least 7 days; the dispatcher retries up to 24h.

License

MIT.

AI Act Radar is operated by ligea GmbH, Karlsruhe. Information only — not legal advice.

since	string	optional	ISO 8601 timestamp; only events published after this. Optional.
until	string	optional	ISO 8601 timestamp; only events published before this. Optional.
source_id	string	optional	One of: eurlex, aioffice, aiboard, codeofpractice, haveyoursay, cen, bnetza, bfdi, bsi, cnil, nl-algoritmeregister, oecdai. Optional.
topics	array	optional	Topic taxonomy. e.g. ["gpai","transparency","high-risk"]. Optional.
severity_min	string	optional	Minimum severity. Optional.
limit	integer	optional

role	string	required	The AI Act role you operate as.
risk_category	string	required	The AI Act risk classification of the system you offer or use.

since	string	required	ISO 8601 date; the digest covers everything from this date forward.
topics	array	optional	Restrict digest to these topics. Optional.
language	string	optional

AI Act Radar

com.aiactradar/ai-act-radar MCP Server

🛠️ Key Features

🚀 Use Cases

⚡ Developer Benefits

⚠️ Limitations

query_ai_act_updates

get_obligation_for_role

summarize_changes_since

lookup_article