AI Act Radar

السجل الرسمي الحكومة والقانون

EU AI Act obligations and updates from ten official sources, incl. the national layer.

التثبيت

أضف هذا إلى إعدادات MCP في عميلك (Claude Desktop: claude_desktop_config.json، وCursor: ‏.cursor/mcp.json، ويستخدم VS Code وغيره الصيغة نفسها «mcpServers»).

Remote (streamable-http)
Claude Code
claude mcp add --transport http ai-act-radar 'https://mcp.aiactradar.com/mcp/v1' --header 'Authorization: <Bearer <your beta key>. Free during the beta, request one at https://aiactradar.com/#waitlist>'
إعداد JSON (Claude Desktop وCursor وVS Code)
{
    "mcpServers": {
        "ai-act-radar": {
            "type": "http",
            "url": "https://mcp.aiactradar.com/mcp/v1",
            "headers": {
                "Authorization": "<Bearer <your beta key>. Free during the beta, request one at https://aiactradar.com/#waitlist>"
            }
        }
    }
}

التوثيق

مأخوذ من ملف README للمشروع على GitHub ويُحدَّث أسبوعيًا. تفتح الروابط على GitHub.

المحتويات
  1. aiactradar-examples
  2. What every receiver does
  3. Examples
  4. Try it without signing up
  5. Going to production
  6. License

aiactradar-examples

Reference webhook receivers for AI Act Radar. Each subdirectory is a self-contained, runnable example for one platform.

What every receiver does

  1. Reads the raw request body (signature is over the bytes, not the parsed JSON).
  2. Verifies X-AIAR-Timestamp is within 300 seconds of now.
  3. Verifies X-AIAR-Signature (v1=<hex>) using HMAC-SHA-256 over <timestamp>.<raw_body> in constant time.
  4. Checks an idempotency key (event.id) before doing real work — retries are normal.
  5. Returns 2xx within 5 seconds; otherwise the dispatcher retries with exponential backoff.

The verification is identical across platforms; only the platform glue differs.

Examples

FolderPlatformNotes
cloudflare-workers/Cloudflare WorkersWeb Crypto API, KV for idempotency
vercel-edge/Vercel Edge FunctionsWeb Crypto API, Vercel KV for idempotency
aws-lambda/AWS Lambda + API GatewayNode crypto module, DynamoDB for idempotency
express-node/Plain Express on NodeNode crypto, in-process LRU (replace for prod)
fastify-typescript/Fastify + TSTyped body parser, raw-body capture
deno-deploy/Deno DeployDeno KV for idempotency

Try it without signing up

Each example has a test.sh that signs a sample event with a local secret and posts it to the running receiver. You can run the full loop on your laptop in under five minutes:

cd cloudflare-workers
cp .dev.vars.example .dev.vars   # set AIA_SECRET to anything
npm install && npm run dev       # starts http://localhost:8787
# in another terminal:
bash test.sh                     # posts a signed sample event

Going to production

  • Store AIA_SECRET in your platform's secret manager. Never commit it.
  • Rotate the secret in the AI Act Radar dashboard at least every 90 days.
  • Subscribe to the dispatcher's webhook health channel — bounced deliveries surface there before customers notice.
  • Idempotency stores need a TTL of at least 7 days; the dispatcher retries up to 24h.

License

MIT.


AI Act Radar is operated by ligea GmbH, Karlsruhe. Information only — not legal advice.

الأسئلة الشائعة

ما هو AI Act Radar؟

EU AI Act obligations and updates from ten official sources, incl. the national layer.

كيف أثبّت AI Act Radar؟

يعمل كخادم بعيد. في Claude Code: claude mcp add --transport http ai-act-radar 'https://mcp.aiactradar.com/mcp/v1' --header 'Authorization: <Bearer <your beta key>. Free during the beta, request one at https://aiactradar.com/#waitlist>'. وفي العملاء الآخرين، الصق إعداد JSON من هذه الصفحة في إعدادات MCP الخاصة بهم.

هل يحتاج AI Act Radar إلى مفتاح API؟

نعم. يتطلب Authorization، وتضبطها في إعداداته.

هل AI Act Radar مفتوح المصدر؟

نعم. شيفرته متاحة على GitHub بترخيص MIT.

من يصون AI Act Radar؟

ينشره ligea-gmbh. يدرجه AI.tn لكنه لا يصونه ولا يوصي به.

من سجل MCP الرسمي. الإدراج ليس توصية: راجع شيفرة الخادم وصلاحياته قبل منحه الوصول إلى بياناتك.