
Check code against secure-coding rules mapped to ISO 27001 and the DPDP Act. Free, no account.
Maintain this server? Claim it
Call this server's tools from your browser. Nothing to install.
Requests go through mcptry because browsers can't call most MCP servers directly. Header values are sent to the server for that request only and are never stored or logged.
Tool list from our last check. Connect live to refresh it.
Returns the workspace's secure-coding rules: what to look for, how to fix it, and the ISO 27001 Annex A controls and DPDP Act sections each rule evidences. Call this before reviewing a change, then report with report_compliance_check.
Only the rules in these areas. Omit for all rules (recommended).
Returns the workspace's secure-coding rules: what to look for, how to fix it, and the ISO 27001 Annex A controls and DPDP Act sections each rule evidences. Call this before reviewing a change, then report with report_compliance_check.
| Argument | Type | Description |
|---|---|---|
| areas | array | Only the rules in these areas. Omit for all rules (recommended). |
{
"type": "object",
"properties": {
"areas": {
"type": "array",
"items": {
"enum": [
"secrets_and_auth",
"injection",
"cryptography",
"personal_data",
"logging",
"supply_chain",
"infrastructure",
"change_safety"
],
"type": "string"
},
"description": "Only the rules in these areas. Omit for all rules (recommended)."
}
},
"additionalProperties": false
}Turns the check you ran against the rules from get_compliance_rules into a scorecard: findings by severity, the ISO 27001 controls and DPDP Act sections affected, and the fix for each. Report a clean check too. Regulane does not store it. Send no source code, secrets or personal data.
| Argument | Type | Description |
|---|---|---|
| agent | string | Which coding agent you are, such as "Claude Code", "Cursor", "GitHub Copilot", "Codex". |
| scope* | string | One line on what was examined, such as "staged changes, 6 files" or "src/payments". |
| branch | string | Current branch, if known. |
| commit | string | Commit SHA the check ran against, if known. |
| findings* | array | One entry per problem found. Empty when the check is clean. |
| repository* | string | The git remote URL, or the project folder name when there is no remote. |
| rules_checked* | array | Every rule id you checked, including those with no finding. |
{
"type": "object",
"required": [
"repository",
"scope",
"rules_checked",
"findings"
],
"properties": {
"agent": {
"type": "string",
"description": "Which coding agent you are, such as \"Claude Code\", \"Cursor\", \"GitHub Copilot\", \"Codex\"."
},
"scope": {
"type": "string",
"description": "One line on what was examined, such as \"staged changes, 6 files\" or \"src/payments\"."
},
"branch": {
"type": "string",
"description": "Current branch, if known."
},
"commit": {
"type": "string",
"description": "Commit SHA the check ran against, if known."
},
"findings": {
"type": "array",
"items": {
"type": "object",
"required": [
"rule_id",
"file",
"summary"
],
"properties": {
"file": {
"type": "string",
"description": "Path relative to the repository root."
},
"line": {
"type": "integer",
"minimum": 1,
"description": "Line number, if there is one."
},
"rule_id": {
"type": "string",
"description": "The rule broken, such as RG-SC-004."
},
"summary": {
"type": "string",
"description": "One sentence on the problem. No code, secrets or personal data."
}
},
"additionalProperties": false
},
"maxItems": 200,
"description": "One entry per problem found. Empty when the check is clean."
},
"repository": {
"type": "string",
"description": "The git remote URL, or the project folder name when there is no remote."
},
"rules_checked": {
"type": "array",
"items": {
"type": "string"
},
"description": "Every rule id you checked, including those with no finding."
}
},
"additionalProperties": false
}