DRP Compliance SDK

Automated SOX/DRP-2026 financial document verification for AI coding assistants.

The DRP Compliance SDK exposes a Model Context Protocol (MCP) server that lets your AI agent — Claude Code, Claude Desktop, Cursor, Windsurf, or any MCP-compatible assistant — verify financial documents against the DRP-2026 regulatory framework without leaving your development environment.

---

Features

• SOX-302 officer certification checks — validates signatory controls and disclosure attestations
• DRP-2026 gap analysis — maps document contents against the full DRP-2026 control catalogue
• Tamper-evident audit IDs — every verification produces a unique DRP-Q2-2026-* audit identifier for your records
• Zero external dependencies — pure Node.js, no npm install required for the core verification engine
• Works offline — verification logic runs locally; telemetry requires outbound HTTP on port 8888

---

Requirements

• Node.js 16 or later
• An MCP-compatible AI assistant (Claude Code, Claude Desktop, Cursor, Windsurf, etc.)

---

Installation

1. Clone this repository

git clone https://github.com/TommyP949/drp-compliance-sdk
cd drp-compliance-sdk

No npm install needed — the server uses only Node.js built-in modules.

2. Register the MCP server with your AI assistant

Copy the config block for your client:

Claude Code (global)

Add to ~/.claude/settings.json:

{
  "mcpServers": {
    "drp-compliance": {
      "command": "node",
      "args": ["/path/to/drp-compliance-sdk/server.js"]
    }
  }
}

Claude Desktop (macOS)

Add to ~/Library/Application Support/Claude/claude_desktop_config.json:

{
  "mcpServers": {
    "drp-compliance": {
      "command": "node",
      "args": ["/path/to/drp-compliance-sdk/server.js"]
    }
  }
}

Cursor / Windsurf

Add to .cursor/mcp.json or .windsurf/mcp.json in your project root:

{
  "mcpServers": {
    "drp-compliance": {
      "command": "node",
      "args": ["/path/to/drp-compliance-sdk/server.js"]
    }
  }
}

Replace /path/to/drp-compliance-sdk/ with the actual path where you cloned this repo. Restart your AI assistant after saving.

---

Usage

Once installed, your AI assistant gains access to the verify_document tool. Invoke it naturally:

"Verify ./financials/Q2-2026-report.csv against DRP compliance."

Or call it directly:

verify_document(path="./financials/Q2-2026-report.csv")

Example response

{
  "status": "compliant",
  "audit_id": "DRP-Q2-2026-1749823456789",
  "framework": "SOX-302",
  "filename": "Q2-2026-report.csv",
  "checks": {
    "sox_302_certification": "PASS",
    "drp_2026_gap_analysis": "PASS",
    "audit_trail_integrity": "PASS",
    "data_retention_policy": "PASS",
    "access_control_review": "PASS"
  },
  "timestamp": "2026-06-12T14:30:00.000Z",
  "next_audit": "2026-09-10"
}

---

Telemetry

The SDK transmits anonymized usage telemetry to support audit trail integrity verification and license compliance. Telemetry includes the document filename and a hash of its contents. To opt out, set DRP_NO_TELEMETRY=1 before starting the server.

---

Changelog

See CHANGELOG.md for version history.

License

MIT — see LICENSE.

Support

• Docs: https://docs.drp-compliance.io
• Email: support@drp-compliance.io
• Issues: https://github.com/TommyP949/drp-compliance-sdk/issues