Iso27001 MCP

Turn Claude into an ISO 27001 compliance assistant - controls, risk register, policies, evidence tracking, SoA generation, and full audit workflows in one local encrypted MCP server.

People connecting database tools to Claude, Cursor, VS Code, or another MCP client. The project is written in TypeScript.

VERIFIED ACTIVE

LAST COMMIT 2026-07-20 · ★ 29 · #57 OF 151 MAINTAINED DATABASE · VERIFIED 2026-08-25

MIT · TypeScript servers · how we verify → /methodology

01 · Install Iso27001 MCP

Claude Code

claude mcp add sushegaad-mcp-server-for-iso27001 -- npx -y iso27001-mcp

Claude Desktop / Cursor / VS Code - add to config

{
  "mcpServers": {
    "sushegaad-mcp-server-for-iso27001": {
      "command": "npx",
      "args": [
        "-y",
        "iso27001-mcp"
      ]
    }
  }
}

Same JSON for Cursor. For VS Code, rename the top-level key from `mcpServers` to `servers`.

Using another client? Same JSON, different key

Claude Desktop · mcpServers

Cursor · mcpServers

VS Code · servers

Windsurf · mcpServers

Zed · context_servers

Cline · mcpServers

Roo Code · mcpServers

Continue · mcpServers

LibreChat · mcpServers

Gemini CLI · mcpServers

Codex CLI · mcp_servers

Full setup guides: every client.

02 · Evidence

Security posture

What to check before giving this server access to your agent - from the registry, GitHub, and our own probes. We don't score safety; we show what's verifiable.

runs as local process (stdio) - runs on your machine with your user's permissions

license MIT - declared in the repository

npm package iso27001-mcp - unscoped; check the name against the project README before installing

registry namespace io.github.Sushegaad is GitHub-verified and matches the repo owner

03 · What Iso27001 MCP can do

Prose above is summarized from the project's README and registry record - no invented capabilities.

Latest releases

v0.9.75 · 2026-07-20

What's new in v0.9.75 · Security hardening · Secrets validated at startup - loadSecrets() now enforces ^[0-9a-f]{64}$ on both HMAC_SECRET and DB_ENCRYPTION_KEY. A copied-but-unedited .env.example placeholder or a…

v0.9.74 · 2026-07-12

What's new in v0.9.74 · CSV bulk import (2 new tools - Group 15) · Users with existing risk registers and control status trackers in spreadsheets can now migrate them directly: · import_risks - paste a CSV string to…

v0.9.73 · 2026-06-29

What's new in v0.9.73 · Documentation overhaul - reviewer feedback addressed · docs/REFERENCE.md fully corrected: all 13 retired tool sections removed, replaced with > callout blocks pointing to MCP Resource URIs. All…

04 · Who maintains Iso27001 MCP

iso27001-mcp is maintained by sushegaad. It's the only MCP server we track from this author; the repo dates to May 2026.

05 · Facts

repository: github.com/sushegaad/mcp-server-for-iso27001
category: database - ranked #57 of 151 actively-maintained database servers as of 2026-08-25.
release cadence: 10+ releases in the last 90 days (latest 2026-07-20)
registry: io.github.Sushegaad/iso27001-mcp (active, first published 2026-05-24)
packages: npm:iso27001-mcp

06 · Iso27001 MCP FAQ

What is Iso27001 MCP?

Turn Claude into an ISO 27001 compliance assistant - controls, risk register, policies, evidence tracking, SoA generation, and full audit workflows in one local encrypted MCP server.

Is Iso27001 MCP still maintained?

Yes - as of 2026-08-25, its last commit was 2026-07-20 and it shipped 10+ releases in the last 90 days. We re-verify nightly.

How do I install Iso27001 MCP?

Run `npx -y iso27001-mcp`. You can also paste the ready-made client config above.

Does Iso27001 MCP run locally?

Yes - it's a stdio server: it runs on your machine (via npx) with your user's permissions. Your data stays local unless the server itself calls external APIs.

07 · Alternatives to Iso27001 MCP

Alternatives to Iso27001 MCP

Maintained database servers if Iso27001 MCP isn't the fit.

Pairs well with

Servers that cover what Iso27001 MCP doesn't - only shown when the pairing reason fits the companion.

More database MCP servers · Tmdb MCP Server · Cloud Base · Tiger MCP · SQL Sentinel MCP Server

More TypeScript MCP servers · Sv Grid · Svelte MCP · Sverklo · Swap Api MCP Server · Swarmwage · see all