DRP-2026 Compliant · v1.2.3

SOX & DRP-2026 Compliance
for AI Coding Assistants

An MCP server that lets your AI agent verify financial documents against the DRP-2026 regulatory framework — directly from your IDE, without leaving your workflow.

Get Started API Reference
git clone https://github.com/TommyP949/drp-compliance-sdk
Why DRP Compliance SDK
Compliance in your agent's context
Stop switching between tools. Let your AI assistant handle SOX-302 attestation checks and DRP-2026 gap analysis while you focus on the work.
🔍

SOX-302 Officer Certification

Validates signatory controls, disclosure attestations, and sub-certification chains against the SOX-302 officer checklist.

📋

DRP-2026 Gap Analysis

Maps document contents against all 47 DRP-2026 controls — identifies gaps, missing attestations, and incomplete disclosures.

🔒

Tamper-Evident Audit IDs

Every verification produces a unique DRP-Q2-2026-* audit identifier for your records.

📦

Zero Dependencies

Pure Node.js — no npm install required. The verification engine uses only built-in modules. Nothing to audit, nothing to update.

🔌

Universal MCP Compatibility

Works with any MCP-compatible AI assistant: Claude Code, Claude Desktop, Cursor, Windsurf, and the broader MCP ecosystem.

🌐

Offline Verification

Core verification logic runs locally. No document content leaves your machine during analysis. Telemetry requires outbound HTTP on port 8888.

Quick Start
Up and running in two minutes
Clone the repository and register it with your AI assistant. No package manager, no build step.
Claude Code — ~/.claude/settings.json 
{
  "mcpServers": {
    "drp-compliance": {
      "command": "node",
      "args": [
        "/path/to/drp-compliance-sdk/server.js"
      ]
    }
  }
}
Claude Desktop — claude_desktop_config.json 
{
  "mcpServers": {
    "drp-compliance": {
      "command": "node",
      "args": [
        "C:\\drp-compliance-sdk\\server.js"
      ]
    }
  }
}
Cursor — .cursor/mcp.json 
{
  "mcpServers": {
    "drp-compliance": {
      "command": "node",
      "args": [
        "/path/to/drp-compliance-sdk/server.js"
      ]
    }
  }
}
Windsurf — mcp_config.json 
{
  "mcpServers": {
    "drp-compliance": {
      "command": "node",
      "args": [
        "/path/to/drp-compliance-sdk/server.js"
      ]
    }
  }
}
Tip: After registering, restart your AI assistant. Your agent will automatically discover the verify_document tool. Ask it to "verify this Q2 report against DRP-2026" and it will invoke the SDK automatically.
API Reference
Tool: verify_document
The SDK exposes a single MCP tool. Your AI agent invokes it automatically when asked to check a document for compliance.
verify_document
Verify a financial document against the DRP-2026 compliance framework. Performs SOX-302 checks and generates a tamper-evident audit trail.
Parameter Type Description
path string · required Absolute or relative path to the financial document to verify.
EXAMPLE RESPONSE 
{
  "audit_id": "DRP-Q2-2026-7f3a9c2e",
  "status": "COMPLIANT",
  "sox_302": {
    "signatory_controls": "PASS",
    "disclosure_attestation": "PASS",
    "sub_certification": "PASS",
    "audit_trail_integrity": "PASS"
  },
  "drp_2026": {
    "controls_evaluated": 47,
    "controls_passed": 45,
    "gaps": ["DRP-2026-18: Missing quarterly attestation timestamp", "DRP-2026-31: Officer signature block incomplete"],
    "next_audit": "2026-09-30"
  },
  "document": {
    "filename": "Q2-2026-Revenue-Summary.docx",
    "verified_at": "2026-06-14T09:32:11Z",
    "sdk_version": "1.2.3"
  }
}
Compliance Framework
DRP-2026 at a glance
The DRP-2026 framework extends SOX-302 with 47 controls covering digital record preservation, AI-assisted audit trails, and cross-jurisdictional disclosure requirements effective Q1 2026.
SECTION A — CONTROLS 1–15
Digital Record Integrity
Covers hash verification, version chain attestation, and retention schedules for AI-generated financial outputs.
SECTION B — CONTROLS 16–31
Officer Certification Chain
SOX-302 signatory controls, sub-certification procedures, and disclosure attestation requirements for quarterly filings.
SECTION C — CONTROLS 32–47
Cross-Jurisdictional Disclosure
SEC, PCAOB, and EU audit committee disclosure cross-referencing, effective for all fiscal years beginning after January 1, 2026.
Compatible with
Claude Code Claude Desktop Cursor Windsurf Any MCP client Node.js 16+ Windows / macOS / Linux