EU Audit Trail MCP Server

Tamper-evident audit trail MCP server for EU AI Act & GDPR compliance.

Local serverstdioPython

What is the EU Audit Trail MCP server?

Tamper-evident audit trail MCP server for EU AI Act & GDPR compliance. That is what the eu audit trail mcp server brings to an AI assistant: the same capability, reachable through the Model Context Protocol rather than a separate app or dashboard.

The short version

Tamper-evident audit trail MCP server for EU AI Act and GDPR compliance. Designed to be integrated into a local desktop application via stdio transport.

  • Tamper-evident logging — — HMAC-SHA256 hash chain over all events
  • PII scanning — — Automatic detection and redaction via Microsoft Presidio (EU patterns)
  • GDPR erasure — — Article 17 right-to-erasure support with audit trail
  • Compliance checks — — Technical checklist against EU AI Act Articles 12/19 and GDPR Article 30
  • Local-first — — All data stays on your machine in a single SQLite file

The tools it exposes

The server publishes 10 tools. What each one is for:

  • log_event — Record an audit event with automatic PII scanning
  • log_inference — Log an LLM inference call (model, tokens, cost)
  • log_data_access — Log a document/data access event
  • query_log — Search events by time range, type, session
  • get_session_trace — Full ordered trace of a session
  • get_stats — Summary statistics over a time period
  • compliance_check — Check against EU AI Act Art. 12/19 and GDPR Art. 30
  • execute_erasure — GDPR Article 17 right-to-erasure
  • get_pii_summary — Summary of detected PII types (counts only)
  • verify_chain — Verify hash chain integrity

What it needs from you

Configuration is passed through the environment: AUDIT_CONFIG. Treat anything key-shaped as a real credential — scope it to the minimum the server needs, and rotate it if it ever lands in a shared config.

Getting it running

Setup follows the usual MCP pattern — install or clone the server, register it in your client's configuration file, restart the client. The configuration blocks on this page cover the common clients.

How it compares

Among the database access options, the useful question is rarely "what can it do" but "what does it cost you to run" — permissions, credentials, and how much of your context its toolset consumes. EU Audit Trail's toolset — log_event, log_inference, log_data_access and 7 more — is a fair guide to whether it matches your workflow. It is maintained by jellewas; worth a glance at recent repository activity before you build anything load-bearing on it.

This entry was verified against EU Audit Trail's own documentation before publication; SyncDev keeps the directory reviewed rather than auto-generated.

Things to watch

  • It runs with your machine's permissions. That is convenient and also the reason to think about what you point it at before you approve a tool call.
  • With 10 tools registered it takes up a noticeable share of the context window; turn it off in projects that never touch EU Audit Trail.
  • Keep per-call confirmation enabled while you learn its behaviour; it is the cheapest safeguard you have.

Available tools

ToolWhat it does
log_eventRecord an audit event with automatic PII scanning
log_inferenceLog an LLM inference call (model, tokens, cost)
log_data_accessLog a document/data access event
query_logSearch events by time range, type, session
get_session_traceFull ordered trace of a session
get_statsSummary statistics over a time period
compliance_checkCheck against EU AI Act Art. 12/19 and GDPR Art. 30
execute_erasureGDPR Article 17 right-to-erasure
get_pii_summarySummary of detected PII types (counts only)
verify_chainVerify hash chain integrity

How to install the EU Audit Trail MCP server

{
  "mcpServers": {
    "eu-audit": {
      "command": "python",
      "args": ["-m", "eu_audit_mcp.server"],
      "env": {
        "AUDIT_CONFIG": "./audit_config.yaml"
      }
    }
  }
}

Configuration as documented by the project. Restart the client after saving.

Configuration

VariableDescriptionRequired
AUDIT_CONFIGConfiguration value read at startup.Optional

Example prompts to try

  • Use EU Audit Trail to log event.
  • Use EU Audit Trail to log inference.
  • Use EU Audit Trail to log data access.

Frequently asked questions

It connects EU Audit Trail to MCP-compatible AI assistants such as Claude and Cursor, exposing 10 tools (log_event, log_inference, log_data_access, and more) that the assistant can call on your behalf. Instead of copying data back and forth by hand, the assistant works with EU Audit Trail directly.