Compliance & Audit Automation MCP Servers — Vanta, Drata, Secureframe, IBM OpenPages, CISO Assistant, ComplianceCow, and More

Compliance MCP servers reviewed: Vanta official (55+ stars, TypeScript, MIT, 13 tools/43 operations, ISO 42001 certified, TPRM Agent), Drata hosted (experimental, AI-native trust management + community server), Secureframe (8 stars, 11 endpoints read-only), IBM OpenPages 9.2 (official, open-sourced MCP server, Apache 2.0, GA March 27 + CP4D June 10), CISO Assistant (4.1k stars, 150+ frameworks, DORA incident reporting, exceptions MCP tools, v3.16.2), ComplianceCow (27+ tools), Comply ComplyAI (financial services regtech, GA May 2026). Rating: 3.5/5.