Use ClevSec from Your AI Assistant

Connect your AI assistant to our free MCP server and it can answer EU compliance questions with the same logic as our tools: does NIS2 apply, is this DORA incident major, must we report this data breach. Every answer cites the articles it is based on.

Server address

https://mcp.clevsec.one/mcp

Remote MCP server, Streamable HTTP. Free, no account or key needed, read-only.

What your assistant can do with it

ToolAnswersBased on
nis2_scope_checkDoes NIS2 apply, and is the organisation an essential or important entity?NIS2 Arts. 2 to 4, Recommendation 2003/361/EC
nis2_gap_assessment53 readiness questions in nine domains, and a score with the gaps once answeredNIS2 Arts. 20, 21 and 23
dora_classify_incidentIs an ICT incident at a financial entity major, and by when must it be reported?Delegated Regulations (EU) 2024/1772 and 2025/301
dora_checklistThe 59 core DORA requirements, without those DORA disapplies for microenterprises or the simplified frameworkDORA (Regulation (EU) 2022/2554)
gdpr_breach_decisionAfter a personal data breach: notify the authority within 72 hours? Tell the people affected?GDPR Arts. 33 and 34, EDPB Guidelines 9/2022
gdpr_fine_estimateThe starting range of a GDPR fine, step by stepGDPR Art. 83, EDPB Guidelines 04/2022
privacy_notice_requirementsEverything a privacy notice must contain, when to give it, and the exceptionsGDPR Arts. 12 to 14
cra_reporting_checkMust a manufacturer report an exploited vulnerability or severe incident, by when and where?Cyber Resilience Act Arts. 14, 69 and 71
reporting_deadlinesAll incident and breach reporting deadlines under GDPR, NIS2, DORA and the CRAThe articles listed per deadline

Set it up

Menus differ between plans and app versions; if a step looks different, look for "connectors", "integrations" or "MCP servers" in your assistant's settings.

Claude (web and desktop)

  1. Open Settings → Connectors and choose Add custom connector.
  2. Name it ClevSec and paste the server address above. No sign-in is needed.
  3. In a new chat, open the tools menu under the message box and switch ClevSec on.

Claude Code

claude mcp add --transport http clevsec https://mcp.clevsec.one/mcp

ChatGPT

Where your plan allows custom connectors, turn on developer mode in the connector settings, create a connector with the server address above, and select it in a chat.

Cursor

Add to .cursor/mcp.json in your project, or to ~/.cursor/mcp.json for all projects:

{
  "mcpServers": {
    "clevsec": { "url": "https://mcp.clevsec.one/mcp" }
  }
}

VS Code

Add to .vscode/mcp.json:

{
  "servers": {
    "clevsec": { "type": "http", "url": "https://mcp.clevsec.one/mcp" }
  }
}

Other clients

Any client that supports remote MCP servers over Streamable HTTP works. The server speaks the 2026-07-28 protocol and accepts stateless requests from clients on the 2025 versions.

Questions to try

  • Does NIS2 apply to a 120-person transport company?
  • Our payment system was down for 3 hours and 15% of clients were affected. Is this a major incident under DORA?
  • A laptop with unencrypted customer data was stolen. Do we have to notify anyone under the GDPR?
  • What must our privacy notice contain if we buy contact data from a data broker?
  • We found an actively exploited vulnerability in our router firmware. What must we report under the Cyber Resilience Act?

If your assistant searches the web instead, ask it to "use the ClevSec tool".

How it works

  • Deterministic: the tools are rules, not a language model. The same question gives the same answer, from the same code as our website tools.
  • Sourced: every answer lists its legal sources, the date we last checked them, and a link to the matching guide. The underlying rules are also available as open data.
  • Private: the tools ask for facts about an organisation or incident, not personal data. We do not store requests; our logs record only which tool was called. See the privacy policy.
  • Fair use: up to 300 calls per minute per IP address.

Sources

ClevSec

Compliance & security tools for modern businesses

We build practical tools and templates that help startups and SMBs stay compliant with NIS2, GDPR, and DORA. Explore our free tools →

This page and the tools' answers are for informational purposes only and do not constitute legal advice. Last updated: October 2026.