How do I install AI Act Radar?

Copy the http config for Cursor, Claude Desktop, Claude Code, or VS Code on this page. It uses the publisher's install, not a PlugMCP proxy.

Does AI Act Radar need an API key?

No required environment variable is listed on this record.

What transport does AI Act Radar use?

AI Act Radar is reached over HTTP.

When was AI Act Radar last checked?

Last checked 2026-10-16. EU AI Act obligations and updates from ten official sources, incl. the national layer.

AI Act Radar MCP server

Add this server

The publisher's own URL. Not a PlugMCP endpoint.

Server URL

https://mcp.aiactradar.com/mcp/v1

Provider

Add in Claude

Claude opens with the name and URL filled in. You still confirm it there.

Claude Code

claude mcp add --transport http com.aiactradar-ai-act-radar https://mcp.aiactradar.com/mcp/v1

Run in a terminal.

Claude Desktop

{
  "mcpServers": {
    "com.aiactradar-ai-act-radar": {
      "command": "npx",
      "args": [
        "-y",
        "mcp-remote",
        "https://mcp.aiactradar.com/mcp/v1"
      ]
    }
  }
}

claude_desktop_config.json

Step-by-step: add this in Claude

Remote URL or a command on your machine? How the two installs differ

aiactradar-examples

Reference webhook receivers for AI Act Radar. Each subdirectory is a self-contained, runnable example for one platform.

What every receiver does

Reads the raw request body (signature is over the bytes, not the parsed JSON).
Verifies X-AIAR-Timestamp is within 300 seconds of now.
Verifies X-AIAR-Signature (v1=<hex>) using HMAC-SHA-256 over <timestamp>.<raw_body> in constant time.
Checks an idempotency key (event.id) before doing real work — retries are normal.
Returns 2xx within 5 seconds; otherwise the dispatcher retries with exponential backoff.

The verification is identical across platforms; only the platform glue differs.

Examples

Folder	Platform	Notes
`cloudflare-workers/`	Cloudflare Workers	Web Crypto API, KV for idempotency
`vercel-edge/`	Vercel Edge Functions	Web Crypto API, Vercel KV for idempotency
`aws-lambda/`	AWS Lambda + API Gateway	Node `crypto` module, DynamoDB for idempotency
`express-node/`	Plain Express on Node	Node `crypto`, in-process LRU (replace for prod)
`fastify-typescript/`	Fastify + TS	Typed body parser, raw-body capture
`deno-deploy/`	Deno Deploy	Deno KV for idempotency

Try it without signing up

Each example has a test.sh that signs a sample event with a local secret and posts it to the running receiver. You can run the full loop on your laptop in under five minutes:

cd cloudflare-workers
cp .dev.vars.example .dev.vars   # set AIA_SECRET to anything
npm install && npm run dev       # starts http://localhost:8787
# in another terminal:
bash test.sh                     # posts a signed sample event

Going to production

Store AIA_SECRET in your platform's secret manager. Never commit it.
Rotate the secret in the AI Act Radar dashboard at least every 90 days.
Subscribe to the dispatcher's webhook health channel — bounced deliveries surface there before customers notice.
Idempotency stores need a TTL of at least 7 days; the dispatcher retries up to 24h.

License

MIT.

AI Act Radar is operated by ligea GmbH, Karlsruhe. Information only — not legal advice.

aiactradar-examples

Reference webhook receivers for AI Act Radar. Each subdirectory is a self-contained, runnable example for one platform.

What every receiver does

Reads the raw request body (signature is over the bytes, not the parsed JSON).
Verifies X-AIAR-Timestamp is within 300 seconds of now.
Verifies X-AIAR-Signature (v1=<hex>) using HMAC-SHA-256 over <timestamp>.<raw_body> in constant time.
Checks an idempotency key (event.id) before doing real work — retries are normal.
Returns 2xx within 5 seconds; otherwise the dispatcher retries with exponential backoff.

The verification is identical across platforms; only the platform glue differs.

Examples

Folder	Platform	Notes
`cloudflare-workers/`	Cloudflare Workers	Web Crypto API, KV for idempotency
`vercel-edge/`	Vercel Edge Functions	Web Crypto API, Vercel KV for idempotency
`aws-lambda/`	AWS Lambda + API Gateway	Node `crypto` module, DynamoDB for idempotency
`express-node/`	Plain Express on Node	Node `crypto`, in-process LRU (replace for prod)
`fastify-typescript/`	Fastify + TS	Typed body parser, raw-body capture
`deno-deploy/`	Deno Deploy	Deno KV for idempotency

Try it without signing up

Each example has a test.sh that signs a sample event with a local secret and posts it to the running receiver. You can run the full loop on your laptop in under five minutes:

cd cloudflare-workers
cp .dev.vars.example .dev.vars   # set AIA_SECRET to anything
npm install && npm run dev       # starts http://localhost:8787
# in another terminal:
bash test.sh                     # posts a signed sample event

Going to production

Store AIA_SECRET in your platform's secret manager. Never commit it.
Rotate the secret in the AI Act Radar dashboard at least every 90 days.
Subscribe to the dispatcher's webhook health channel — bounced deliveries surface there before customers notice.
Idempotency stores need a TTL of at least 7 days; the dispatcher retries up to 24h.

License

MIT.

AI Act Radar is operated by ligea GmbH, Karlsruhe. Information only — not legal advice.

AI Act Radar

Add this server

Host a copy with our keys and logs.

Related MCP

Related skills

aiactradar-examples

What every receiver does

Examples

Try it without signing up

Going to production

License

AI Act Radar

Add this server

Host a copy with our keys and logs.

Related MCP

Related skills

aiactradar-examples

What every receiver does

Examples

Try it without signing up

Going to production

License