Csoai Governance Crosswalk MCP Server by MEOK AI Labs
Most developer tooling work still happens through a UI a human drives. Csoai MCP server moves it into the conversation instead. Csoai Governance Crosswalk MCP Server by MEOK AI Labs.
AI governance crosswalk MCP — map controls across 13 frameworks (EU AI Act, ISO 42001, NIST AI RMF, GDPR, SOC 2, HIPAA, FedRAMP, CCPA, PIPEDA, DPDPA, LGPD, CSA, OWASP).
The server publishes 12 tools. What each one is for:
query_crosswalk — Query all 12 frameworks on any compliance topiccrosswalk_bridge — Find framework-to-framework requirement mappingscompliance_gap_analysis — Identify gaps between current posture and regulationframework_comparison — Side-by-side comparison of two frameworksget_article_details — Full text and interpretation of a specific articleregulatory_timeline — Key dates and deadlines for a frameworkrisk_profile — Generate cross-framework risk profilecontrol_mapping — Map existing controls to framework requirementsaudit_scoping — Scope an audit across multiple frameworksremediation_plan — Generate prioritized remediation planevidence_requirements — List evidence needed for each framework articlestakeholder_report — Generate stakeholder-ready compliance reportThe server ships on npm as @smithery/cli, so your MCP client can launch it on demand — there is no separate build step. Add the server block to your client's configuration, restart it, and the tools register themselves.
This sits in the developer tooling group, where several servers overlap in what they claim to do but differ sharply once you actually set them up. Csoai's toolset — query_crosswalk, crosswalk_bridge, compliance_gap_analysis and 9 more — is a fair guide to whether it matches your workflow. It is maintained by CSOAI-ORG; worth a glance at recent repository activity before you build anything load-bearing on it.
We check each listing at SyncDev against the project's documentation before it goes live — if something here drifts out of date, it is a bug worth reporting.
| Tool | What it does |
|---|---|
| query_crosswalk | Query all 12 frameworks on any compliance topic |
| crosswalk_bridge | Find framework-to-framework requirement mappings |
| compliance_gap_analysis | Identify gaps between current posture and regulation |
| framework_comparison | Side-by-side comparison of two frameworks |
| get_article_details | Full text and interpretation of a specific article |
| regulatory_timeline | Key dates and deadlines for a framework |
| risk_profile | Generate cross-framework risk profile |
| control_mapping | Map existing controls to framework requirements |
| audit_scoping | Scope an audit across multiple frameworks |
| remediation_plan | Generate prioritized remediation plan |
| evidence_requirements | List evidence needed for each framework article |
| stakeholder_report | Generate stakeholder-ready compliance report |
### Claude Desktop
```json
{
"mcpServers": {
"csoai-governance-crosswalk": {
"command": "python",
"args": ["path/to/server.py"]
}
}
}Configuration as documented by the project. Restart the client after saving.
Kill hallucinated APIs — version-accurate, up-to-date library documentation injected straight into context.
Microsoft's official browser automation server — drive a real browser through the accessibility tree, no screenshots needed.
GitHub's official server — repos, issues, pull requests, Actions and code security, straight from your assistant.
Issue tracking at the speed of conversation — Linear's official hosted server with OAuth and zero install.
Local repository surgery — status, diffs, commits, branches and history for any repo on disk.
Timezone sanity for AI — current time anywhere and correct conversions, without the model doing date math.