What is a NIS2 MCP server?

What is an MCP server, in plain words?

MCP stands for Model Context Protocol. It is an open standard that lets an AI assistant use another program: it reads data there and calls functions.

The program offers an MCP server for this, and the assistant connects to it. Claude, ChatGPT and Microsoft Copilot Studio can all add MCP servers today.

The nisd2.eu MCP server is that connection for the NIS 2 walkthrough. Through it your own assistant reads your items and fills in what they ask for, as the person who connected it, with exactly their rights.

What does the nisd2.eu MCP server do?

Every nisd2.eu instance serves its MCP server at /api/mcp, a self-hosted one too. On nisd2.eu the address is https://nisd2.eu/api/mcp.

It gives your assistant three tools. With get_walkthrough it reads your walkthrough. With fill_walkthrough_item it fills in, for example suppliers, software, ratings or the text of a policy.

With upload_file it uploads a file as evidence, if it can send files itself, as Claude Code can. Everything goes through the same checks as in the app.

If a person holds the Reviewer or Legal reviewer access role in the team, their assistant reads and fills in nothing. What an assistant fills in on which item, our article on that sets out item by item.

What may the assistant not do?

It finishes no item, decides none and signs nothing. The server has no tool for these steps, nor for deleting suppliers, assets or trainings, or for inviting colleagues.

Items already finished, recorded as deliberately not done, or signed it leaves alone.

Under Art. 20(1) NIS 2, management approves the measures. In the walkthrough it approves at item 7.3, with its own account. A managing director's assistant cannot do that either.

Art. 20(1) NIS 2

How is it different from other MCP servers on NIS 2?

Most MCP servers with NIS 2 in their name that we found in October 2026 are knowledge collections. They answer questions about the law, map requirements to each other or check a domain from the outside.

They do not know your company, and they write nothing into your records.

The nisd2.eu server works inside your walkthrough. It reads what your company has already recorded and writes into the lists your management approves at the end.

How do I get started?

The server is meant for companies that use the NIS 2 walkthrough and already use an AI assistant. It helps most where the facts already exist in another form, such as an accounts payable list or an inventory.

First an admin turns on “Allow AI assistants for this company” in Settings. You open Settings from the profile menu at the bottom of the left sidebar.

Then anyone whose account has the walkthrough unlocked connects their own assistant: enter the address, sign in through the browser, allow access. Where no browser is possible, they use “Create key” in Settings to get a key that is valid for 90 days.

We tested both ways with Claude Code: run the command below, type /mcp in Claude Code, sign in. We have not tested Claude on the web, ChatGPT, Copilot Studio or the other assistants ourselves yet.

claude mcp add --transport http nisd2 https://nisd2.eu/api/mcp

Where do I find the guide for my assistant?

Articles of their own explain setup in Claude Code, in Claude on the web and desktop, in Copilot Studio, in ChatGPT, and in VS Code, Cursor or Gemini CLI. Others cover running it on a self-hosted instance, choosing between a key and the browser sign-in, and allowing and disconnecting assistants.

Security, data protection and prompt injection (instructions hidden in data) each have an article. Further ones cover whether AI can implement NIS 2 for you, who is liable for its entries and how you trace them.