Danish Standards MCP

Structured access to 20 Danish government cybersecurity standards and frameworks: CFCS guidance (general, ICS/OT, ransomware, cloud, supply chain, secure development), Digitaliseringsstyrelsen (security + FDA), Statens ISO 27001, D-maerket, Datatilsynet, Sundhedsdatastyrelsen, MedCom, Finanstilsynet IKT/DORA, NIS2 Danish implementation, Sikkerhedscirkulaeret, Energistyrelsen, Trafikstyrelsen, KL municipal guidance, and DS 484. 482 controls, bilingual Danish/English, FTS search, ISO 27001/27002 cross-references, and sector-based filtering.

Part of the Ansvar MCP Network -- specialist MCP servers for compliance and security intelligence.

Quick Start

Remote endpoint (no installation)

Add to your MCP client config:

{
  "mcpServers": {
    "danish-standards": {
      "url": "https://danish-standards-mcp.vercel.app/mcp"
    }
  }
}

Local (stdio via npx)

Claude Desktop -- edit ~/Library/Application Support/Claude/claude_desktop_config.json:

{
  "mcpServers": {
    "danish-standards": {
      "command": "npx",
      "args": ["-y", "@ansvar/danish-standards-mcp"]
    }
  }
}

Cursor -- edit .cursor/mcp.json in your project:

{
  "mcpServers": {
    "danish-standards": {
      "command": "npx",
      "args": ["-y", "@ansvar/danish-standards-mcp"]
    }
  }
}

VS Code / GitHub Copilot -- add to .vscode/mcp.json:

{
  "servers": {
    "danish-standards": {
      "type": "stdio",
      "command": "npx",
      "args": ["-y", "@ansvar/danish-standards-mcp"]
    }
  }
}

What's Included

Total: 482 controls and requirements across 20 Danish cybersecurity frameworks.

For full coverage details, see COVERAGE.md.

What's NOT Included

For the complete gap list, see COVERAGE.md -- What's NOT Included.

Available Tools

For full parameter documentation, return formats, and examples, see TOOLS.md.

Data Sources & Freshness

The ingest.yml workflow runs automatically on the most frequent source schedule. The check-updates.yml workflow runs daily and creates a GitHub issue if any source is overdue.

To check freshness at runtime, call check_data_freshness. Full source provenance and licenses: sources.yml.

Security

This repository runs 6-layer automated security scanning on every push and weekly:

Disclaimer

THIS TOOL IS NOT PROFESSIONAL ADVICE.

This MCP provides structured access to Danish cybersecurity standards sourced from authoritative publications. It is provided for informational and research purposes only.

• Verify critical compliance decisions against the original standards
• Data is a snapshot -- sources update, and there may be a delay between upstream changes and database refresh
• See DISCLAIMER.md for the full disclaimer and no-warranty statement

Ansvar MCP Network

This server is part of the Ansvar MCP Network -- 149 specialist MCP servers covering legislation, compliance frameworks, and cybersecurity standards.

Browse the full directory at ansvar.ai/mcp.

Development

Branch strategy

feature-branch -> PR to dev -> verify on dev -> PR to main -> deploy

Never push directly to main. main triggers npm publish and Vercel deployment.

Setup

git clone https://github.com/Ansvar-Systems/danish-standards-mcp.git
cd danish-standards-mcp
npm install
npm run build
npm test

Ingestion

# Full pipeline: fetch -> diff -> build DB -> update coverage
npm run ingest:full

# Individual steps
npm run ingest:fetch     # Download latest data from upstream sources
npm run ingest:diff      # Check for changes against current DB
npm run build:db         # Rebuild SQLite database
npm run coverage:update  # Regenerate coverage.json and COVERAGE.md

# Check freshness
npm run freshness:check

Pre-deploy verification

npm run build            # Gate 1: build
npm run lint             # Gate 2: TypeScript strict
npm test                 # Gate 3: unit tests
npm run test:contract    # Gate 4: golden contract tests
sqlite3 data/standards.db "PRAGMA integrity_check;"   # Gate 5: DB integrity
npm run coverage:verify  # Gate 6: coverage consistency

License & Data Licenses

Code: Apache-2.0

Data licenses by source:

All data is extracted from publicly available authoritative publications. Zero AI-generated content in the database. See sources.yml for complete provenance.