io.github.kynosure-ai/norma-mcp-server
Official4 toolsNORMA MCP Server
EU compliance corpus across 8 frameworks (NIS2, DORA, AI Act, ISO 27001 + more) via MCP.
Access EU compliance frameworks and regulations across NIS2, DORA, AI Act, and ISO standards.
Captured live from the server via tools/list.
search_controls
Full-text search the curated NORMA control corpus. Filter by framework (NIS2 / DORA / ISO 27001 / ISO 42001 / EU AI Act / ISO 22301 / ISO 27701 / CRA). Returns matching templates with title, framework, slug, source_refs, and an excerpt around the match.
Parameters (3)
- frameworkstring
Restrict to one framework (omit to search all frameworks).
- keywordstringrequired
Search query (matched against title + body, case-insensitive).
- limitinteger
map_controls
Crosswalk corpus controls between two compliance frameworks via the `cross_references` frontmatter graph. Useful for prompts like 'I am ISO 27001 certified — what gaps for NIS2?'. Returns an array of mapped pairs with confidence + source slug.
Parameters (3)
- from_frameworkstringrequired
Source framework (e.g., iso27001).
- to_frameworkstringrequired
Target framework (e.g., nis2).
- limitinteger
generate_policy
Parametrize a NORMA compliance template with company context and return Markdown. Templates are sourced from the curated corpus (32 in the public subset, 176 more queryable in full). Output begins with a not-legal-advice disclaimer block. Use search_controls first to discover a slug.
Parameters (2)
- template_slugstringrequired
Template slug. Use search_controls to discover one. Examples: "iso27001-access-control", "isms-policies-supplier-security".
- company_contextobjectrequired
Variables substituted into {{COMPANY_NAME}}, {{SECTOR}}, etc.
assess_gap
Indicative gap register against a target framework. Given a company profile (existing certifications, sector, size, jurisdiction), return covered / partial / gap counts and slug examples. Heuristic only — Pyxis (https://kynosure.ai/en/pyxis) produces the severity-ranked cross-framework gap register with FCI/WMI/ECI scoring.
Parameters (2)
- company_profileobjectrequired
Existing certifications + organisational profile.
- target_frameworkstringrequired
The framework to assess gaps against.
README not available yet.
Install
claude_desktop_config.json
{
"mcpServers": {
"norma-mcp-server": {
"command": "npx",
"args": [
"-y",
"mcp-remote",
"https://norma-mcp.kynosure.ai/mcp"
]
}
}
}Desktop config is stdio-only; this bridges via mcp-remote. Native remote: Settings > Connectors.