Iso27001 MCP Server

by sushegaadio.github.Sushegaad/iso27001-mcpv0.8.4

ISO 27001 compliance workspace for Claude. Risks, policies, SoA, evidence, and audit workflows.

32Node.jsstdioofficial registry

context tax

queued

security

queued

cold start

queued

freshness

Maintained35d ago

Install Iso27001 MCP server

claude mcp add iso27001 -e DB_ENCRYPTION_KEY='<db-encryption-key>' -e HMAC_SECRET='<hmac-secret>' -e MCP_API_KEY='<mcp-api-key>' -- npx -y iso27001-mcp

{
  "mcpServers": {
    "iso27001": {
      "command": "npx",
      "args": [
        "-y",
        "iso27001-mcp"
      ],
      "env": {
        "DB_ENCRYPTION_KEY": "<db-encryption-key>",
        "HMAC_SECRET": "<hmac-secret>",
        "MCP_API_KEY": "<mcp-api-key>"
      }
    }
  }
}

Add to ~/.cursor/mcp.json (global) or .cursor/mcp.json (project).

{
  "mcpServers": {
    "iso27001": {
      "command": "npx",
      "args": [
        "-y",
        "iso27001-mcp"
      ],
      "env": {
        "DB_ENCRYPTION_KEY": "<db-encryption-key>",
        "HMAC_SECRET": "<hmac-secret>",
        "MCP_API_KEY": "<mcp-api-key>"
      }
    }
  }
}

Settings → Developer → Edit Config (claude_desktop_config.json), then restart.

{
  "servers": {
    "iso27001": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "iso27001-mcp"
      ],
      "env": {
        "DB_ENCRYPTION_KEY": "<db-encryption-key>",
        "HMAC_SECRET": "<hmac-secret>",
        "MCP_API_KEY": "<mcp-api-key>"
      }
    }
  }
}

Add to .vscode/mcp.json in your workspace.

{
  "mcpServers": {
    "iso27001": {
      "command": "npx",
      "args": [
        "-y",
        "iso27001-mcp"
      ],
      "env": {
        "DB_ENCRYPTION_KEY": "<db-encryption-key>",
        "HMAC_SECRET": "<hmac-secret>",
        "MCP_API_KEY": "<mcp-api-key>"
      }
    }
  }
}

Add to ~/.codeium/windsurf/mcp_config.json.

Configuration

Variable	Required	Secret	Description
DB_ENCRYPTION_KEY	yes	yes	32-byte hex key for AES-256 SQLite encryption (generated by iso27001-mcp init)
HMAC_SECRET	yes	yes	32-byte hex secret for HMAC-signing API keys (generated by iso27001-mcp init)
MCP_API_KEY	yes	yes	API key for authenticating tool calls (generated by iso27001-mcp keygen)
DB_PATH	—	—	Path to the encrypted SQLite database file

Freshness

Maintained — last maintenance signal 35d ago. The newest of the signals below sets the band.

Last commit (default branch)
2026-09-05 · 35d ago · GitHub
Latest release
2026-09-05 · 35d ago · GitHub · v0.9.83
Package published
no data · npm/PyPI
Registry entry updated
2026-05-24 · 5mo ago · official registry · v0.8.4

FAQ

›How do I install the Iso27001 MCP server in Claude Code?

Run: claude mcp add iso27001 -e DB_ENCRYPTION_KEY='<db-encryption-key>' -e HMAC_SECRET='<hmac-secret>' -e MCP_API_KEY='<mcp-api-key>' -- npx -y iso27001-mcp. For Cursor, VS Code, Claude Desktop and Windsurf, use the install tabs above.

›Does Iso27001 require an API key?

Yes. It expects DB_ENCRYPTION_KEY, HMAC_SECRET, MCP_API_KEY, of which 3 are secrets.

›Can I use Iso27001 as a remote (hosted) MCP server?

No hosted endpoint is published; it runs locally over stdio.

›Is Iso27001 in the official MCP registry?

Yes, as io.github.Sushegaad/iso27001-mcp.