AIR Blackbox MCP Server
EU AI Act compliance scanning for Claude Desktop, Claude Code, Cursor, and any MCP-compatible client.
Unlike other compliance scanners that only report problems, AIR Blackbox also remediates - generating working code fixes, trust layer integrations, GDPR compliance checks, bias analysis, and full compliance reports. Under the hood, the scanning feeds into air-trust, a cryptographic audit chain (HMAC-SHA256) with Ed25519 signed handoffs that ensures compliance data integrity.
14 Tools (10 base + 4 SDK-powered)
| Tier | Tool | What it does | Requires SDK |
|---|---|---|---|
| Scanning | scan_code |
Scan a code string for all 6 EU AI Act articles (Python, notebooks, TypeScript, JavaScript, Java, Kotlin with the SDK; Python without) | Recommended |
| Scanning | scan_file |
Read and scan a single source file | Recommended |
| Scanning | scan_project |
Recursively scan a project directory | Recommended |
| Analysis | analyze_with_model |
Deep analysis via local fine-tuned model (Ollama) | No |
| Analysis | check_injection |
Detect prompt injection attacks (15 patterns) | No |
| Analysis | classify_risk |
Classify tools by EU AI Act risk level | No |
| Remediation | add_trust_layer |
Generate trust layer integration code | No |
| Remediation | suggest_fix |
Get article-specific fix recommendations | No |
| Documentation | explain_article |
Technical explanation of EU AI Act articles | No |
| Documentation | generate_compliance_report |
Full markdown compliance report | No |
| GDPR | scan_gdpr |
GDPR-specific compliance scan | Yes |
| Bias | scan_bias |
Bias and fairness analysis | Yes |
| Validation | validate_action |
Validate agent actions before execution (Article 14) | Yes |
| History | compliance_history |
View past scans, trends, and compliance scores | Yes |
