RuleMesh MCP

Engineered Compliance Infrastructure for engineers and AI agents.

RuleMesh delivers engineered rules for GDPR: what each obligation requires, how to execute it with framework-specific controls, and what evidence proves it was done. It runs as a hosted remote MCP server at https://api.rulemesh.com/mcp (Streamable HTTP, OAuth login), consumable from any MCP client.

This repo is the canonical home for the server's listing (server.json, published to the MCP Registry as com.rulemesh/compliance) and client setup docs.

Connect

You authenticate once in the browser (email/password or Google); no API key to manage. A RuleMesh account is required — the FREE tier covers GDPR and all mapped frameworks.

OpenAI Codex

Add to ~/.codex/config.toml:

[features]
rmcp_client = true            # enables the remote MCP client (use experimental_use_rmcp_client = true on older Codex)

[mcp_servers.rulemesh]
url = "https://api.rulemesh.com/mcp"
startup_timeout_sec = 30
tool_timeout_sec = 120

Then codex mcp login rulemesh (opens the browser for OAuth), and /mcp in the TUI to confirm the tools loaded.

Claude Code

claude mcp add --transport http rulemesh https://api.rulemesh.com/mcp

Run /mcp and follow the browser login. A packaged plugin is also available at RuleMesh/rulemesh-claude-plugin.

Claude Desktop / Cursor / VS Code / other clients

Add a remote (Streamable HTTP) MCP server pointing at https://api.rulemesh.com/mcp. For example, Claude Desktop (claude_desktop_config.json) or Cursor (.cursor/mcp.json):

{
  "mcpServers": {
    "rulemesh": {
      "type": "streamable-http",
      "url": "https://api.rulemesh.com/mcp"
    }
  }
}

What you get

The server groups its tools around one loop — plan, pull, implement, prove — over 14 tools, 4 prompts, and a regulation resource. GDPR is packaged end to end today; more regulations are in the pipeline.

• Discovery: list_regulations, list_frameworks, lookup_definition, get_compliance_plan
• Implement: pull_rules, scan_compliance
• Prove: submit_signals, submit_signals_batch
• Track: get_progress, get_ticket_status, get_scan_sessions, start_scan, end_scan, resume_session

Authentication

OAuth 2.1 with PKCE and Dynamic Client Registration. Clients register themselves and open a browser login; tokens refresh automatically.

About RuleMesh

RuleMesh is Engineered Compliance Infrastructure — the engineered rule graph that sits between regulation as written and software as built, consumable by engineers, AI agents, and auditors. It defines what each obligation requires, how to execute it with framework-specific controls, and what evidence proves it was done. GDPR is packaged end to end today; more regulations are in the pipeline. → rulemesh.com

Links

• Product: https://rulemesh.com
• Docs: https://rulemesh.com/docs/mcp
• Privacy: https://rulemesh.com/privacy · Terms: https://rulemesh.com/terms
• Support: support@rulemesh.com