Iso27001 MCP

Turn Claude into an ISO 27001 compliance assistant - controls, risk register, policies, evidence tracking, SoA generation, and full audit workflows in one local encrypted MCP server.

People who work with iso27001 and want it reachable from Claude, Cursor, VS Code, or another MCP client. The project is written in TypeScript.

VERIFIED ACTIVE

LAST COMMIT 2026-09-05 · ★ 31 · #40 OF 168 MAINTAINED DATABASE · VERIFIED 2026-09-18

MIT · TypeScript servers · how we verify → /methodology

01 · Install Iso27001 MCP

Claude Code

claude mcp add sushegaad-mcp-server-for-iso27001 -- npx -y iso27001-mcp

Claude Desktop / Cursor / VS Code - add to config

{
  "mcpServers": {
    "sushegaad-mcp-server-for-iso27001": {
      "command": "npx",
      "args": [
        "-y",
        "iso27001-mcp"
      ]
    }
  }
}

Same JSON for Cursor. For VS Code, rename the top-level key from `mcpServers` to `servers`.

Using another client? Same JSON, different key

Claude Desktop · mcpServers

Cursor · mcpServers

VS Code · servers

Windsurf · mcpServers

Zed · context_servers

Cline · mcpServers

Roo Code · mcpServers

Continue · mcpServers

LibreChat · mcpServers

Gemini CLI · mcpServers

Codex CLI · mcp_servers

Full setup guides: every client.

02 · Evidence

Security posture

What to check before giving this server access to your agent - from the registry, GitHub, and our own probes. We don't score safety; we show what's verifiable.

runs as local process (stdio) - runs on your machine with your user's permissions

license MIT - declared in the repository

npm package iso27001-mcp - unscoped; check the name against the project README before installing

registry namespace io.github.Sushegaad is GitHub-verified and matches the repo owner

03 · What Iso27001 MCP can do

Prose above is summarized from the project's README and registry record - no invented capabilities.

Latest releases

v0.9.83 · 2026-09-05

What's new in v0.9.83 - HITL as enforced policy · A security-audit-driven hardening release. The unifying change: HITL gating is now registry policy, not handler convention - the same "impossible by construction"…

v0.9.82 · 2026-09-01

What's new in v0.9.82 - ARD discovery support · iso27001-mcp is now discoverable through Agentic Resource Discovery (ARD v0.91) - ARD-implementing registries and agents can find it by semantic search ("run an ISO 27001…

v0.9.81 · 2026-08-30

What's new in v0.9.81 - the road-to-1.0 trust release · This release implements Phases 1–5 of the v1.0.0 plan: every change closes a gap between what the product implies and what the server enforces. Tool count: 52 →…

04 · Who maintains Iso27001 MCP

iso27001-mcp is maintained by sushegaad. It's the only MCP server we track from this author; the repo dates to May 2026.

05 · Facts

repository: github.com/sushegaad/mcp-server-for-iso27001
category: database - ranked #40 of 168 actively-maintained database servers as of 2026-09-18.
release cadence: 9 releases in the last 90 days (latest 2026-09-05)
registry: io.github.Sushegaad/iso27001-mcp (active, first published 2026-05-24)
packages: npm:iso27001-mcp

06 · Iso27001 MCP FAQ

What is Iso27001 MCP?

Turn Claude into an ISO 27001 compliance assistant - controls, risk register, policies, evidence tracking, SoA generation, and full audit workflows in one local encrypted MCP server.

Is Iso27001 MCP still maintained?

Yes - as of 2026-09-18, its last commit was 2026-09-05 and it shipped 9 releases in the last 90 days. We re-verify nightly.

How do I install Iso27001 MCP?

Run `npx -y iso27001-mcp`. You can also paste the ready-made client config above.

Does Iso27001 MCP run locally?

Yes - it's a stdio server: it runs on your machine (via npx) with your user's permissions. Your data stays local unless the server itself calls external APIs.

07 · Alternatives to Iso27001 MCP

Alternatives to Iso27001 MCP

Maintained database servers if Iso27001 MCP isn't the fit.

Pairs well with

Servers that cover what Iso27001 MCP doesn't - only shown when the pairing reason fits the companion.

More database MCP servers · Tmdb MCP Server · Cloud Base · Tiger MCP · SQL Sentinel MCP Server

More TypeScript MCP servers · Sv Grid · Svelte MCP · Sverklo · Swap Api MCP Server · Swarmwage · see all