Rulemesh Mcp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Rulemesh Mcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Engineered Compliance Infrastructure for engineers and AI agents.
RuleMesh delivers engineered rules for GDPR: what each obligation requires, how to execute it with framework-specific controls, and what evidence proves it was done. It runs as a hosted remote MCP server at https://api.rulemesh.com/mcp (Streamable HTTP, OAuth login), consumable from any MCP client.
This repo is the canonical home for the server's listing (server.json, published to the MCP Registry as com.rulemesh/compliance) and client setup docs.
You authenticate once in the browser (email/password or Google); no API key to manage. A RuleMesh account is required — the FREE tier covers GDPR and all mapped frameworks.
Add to ~/.codex/config.toml:
[features]
rmcp_client = true # enables the remote MCP client (use experimental_use_rmcp_client = true on older Codex)
[mcp_servers.rulemesh]
url = "https://api.rulemesh.com/mcp"
startup_timeout_sec = 30
tool_timeout_sec = 120Then codex mcp login rulemesh (opens the browser for OAuth), and /mcp in the TUI to confirm the tools loaded.
claude mcp add --transport http rulemesh https://api.rulemesh.com/mcpRun /mcp and follow the browser login. A packaged plugin is also available at RuleMesh/rulemesh-claude-plugin.
Add a remote (Streamable HTTP) MCP server pointing at https://api.rulemesh.com/mcp. For example, Claude Desktop (claude_desktop_config.json) or Cursor (.cursor/mcp.json):
{
"mcpServers": {
"rulemesh": {
"type": "streamable-http",
"url": "https://api.rulemesh.com/mcp"
}
}
}The server groups its tools around one loop — plan, pull, implement, prove — over 14 tools, 4 prompts, and a regulation resource. GDPR is packaged end to end today; more regulations are in the pipeline.
list_regulations, list_frameworks, lookup_definition, get_compliance_planpull_rules, scan_compliancesubmit_signals, submit_signals_batchget_progress, get_ticket_status, get_scan_sessions, start_scan, end_scan, resume_sessionOAuth 2.1 with PKCE and Dynamic Client Registration. Clients register themselves and open a browser login; tokens refresh automatically.
RuleMesh is Engineered Compliance Infrastructure — the engineered rule graph that sits between regulation as written and software as built, consumable by engineers, AI agents, and auditors. It defines what each obligation requires, how to execute it with framework-specific controls, and what evidence proves it was done. GDPR is packaged end to end today; more regulations are in the pipeline. → rulemesh.com
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.