German Law MCP

A thin, LLM-friendly remote MCP server for German federal legislation. It uses the public NeuRIS preview API as the legal source of truth, removes implementation identifiers from tool inputs, and returns compact source-linked results.

Live endpoints after deployment:

• /mcp Remote MCP over Streamable HTTP
• /docs Runtime-generated tool documentation
• /openapi.json Runtime API specification for the website API
• /health Deployment health and NeuRIS status
• / Marketing site
• /login Account area

MCP tools

• find_laws: Find a law from its title, short title, or abbreviation.
• get_law: Get compact official law metadata and current validity.
• search_legislation_text: Search statutory text by keyword, optionally within one law.
• list_norms: List directly addressable norms in a law.
• list_law_structure: Return the hierarchy of parts, sections and norms.
• get_norm: Retrieve an official norm by human reference such as law=FinVermV, norm=17.
• get_law_versions: List available versions of a law.

Source of truth and correctness

NeuRIS remains the source of truth. The Worker stores no legal corpus. It resolves human law references at request time, uses the requested as_of date for version choice, and preserves legal-force, validity, official title, publication and source URL metadata.

If one date resolves to more than one applicable expression, the response preserves all matching version candidates rather than presenting a silent arbitrary choice. Technical eId values are resolver internals and are never MCP inputs.

Documentation

src/tools/catalog.ts is the single tool-contract source. MCP registrations, the public /docs page and /api/spec all use the same catalog. The test suite fails if the MCP server's list of tools differs from this catalog.

Development

npm install
npm run check
npm test
npm run build

The public MCP deliberately has no database dependency. The optional account area uses Supabase Auth; it is enabled only when the Worker is configured with SUPABASE_URL and SUPABASE_ANON_KEY. These values are public client configuration, not service-role credentials.

Deploy

npm run deploy bundles the Worker and uploads it directly through the Cloudflare Workers REST API. It never uses Wrangler. It requires CLOUDFLARE_API_TOKEN with Developer Platform → Workers Scripts → Edit and CLOUDFLARE_ACCOUNT_ID.

To activate account login, create or select a dedicated Supabase project, configure its Auth providers and redirect URL, and set SUPABASE_URL plus SUPABASE_ANON_KEY as Worker bindings. Do not add a Supabase service-role key to the Worker or browser.

Scope

This product provides official-source retrieval, not legal advice. NeuRIS is a preview service; the contract tests are intentionally small and the upstream adapter is isolated in src/neuris/.

License: MIT