meok-fria-generator-mcp

EU AI Act Article 27 Fundamental Rights Impact Assessment (FRIA) generator. EDPB DPIA crosswalk, EU Charter of Fundamental Rights mapping, HMAC-signed compliance attestations.

By MEOK AI Labs · MIT licensed · runs as an MCP server inside Claude Code, Cursor, Cline, Windsurf, etc.

Why this exists

EU AI Act Reg (EU) 2024/1689 Article 27 mandates that public-law bodies and private operators providing public services complete a Fundamental Rights Impact Assessment before deploying a high-risk AI system.

The official EU AI Office FRIA template is not yet published (April 2026). Existing free tools (ALIGNER, AIActStack, kla.digital) are template generators — none are MCP-callable, none ship signed attestations.

This MCP gives compliance teams a structured, callable, signed-FRIA workflow today, mapped against the EDPB harmonised DPIA template (14 April 2026) so the same evidence pack satisfies both AI Act and GDPR auditors.

Tools

Install

pip install meok-fria-generator-mcp

Then in your Claude Code / Cursor MCP config:

{
  "mcpServers": {
    "meok-fria-generator": {
      "command": "python",
      "args": ["-m", "meok_fria_generator"]
    }
  }
}

Example use

"Is a FRIA mandatory if we're a UK public-sector recruitment provider deploying a CV-screening AI in EU markets? Annex III categories: employment-and-workforce."

Claude calls is_fria_required(...) and returns a structured decision: YES, mandatory because (a) provides-public-service AND (b) Annex III high-risk category. Returns the rationale, the regulatory basis, and the deadline (before first deployment).

"Generate a FRIA template for Acme Public Services Ltd's CV-screening AI. Expected 50,000 candidates/year, deployed in DE, FR, IE."

Claude returns a structured template with all 7 Article 27 fields, EU Charter article references, EDPB DPIA crosswalk, and review-trigger schedule.

Article 27 mandatory triggers

FRIA is mandatory when:

1. The deployer is a body governed by public law (Member State or EU institution)
2. The deployer is a private operator providing public services (recruitment for public sector, education, healthcare, etc.)
3. The deployment is a high-risk Annex III system
4. Always-mandatory categories (regardless of o

... View full README on GitHub