Skip to content

European Parliament MCP Server v1.3.17

Choose a tag to compare

@github-actions github-actions released this 07 Jun 08:58
· 64 commits to main since this release
Immutable release. Only release title and notes can be modified.

Highlights

πŸ—οΈ Infrastructure & Performance

  • chore(deps): bump undici from 8.3.0 to 8.4.0 in the production-dependencies group @dependabot[bot] (#513)
  • chore(deps): bump codecov/codecov-action from 6.0.1 to 7.0.0 @dependabot[bot] (#511)
  • chore(deps-dev): bump knip from 6.16.0 to 6.16.1 in the development-dependencies group @dependabot[bot] (#512)

πŸ“¦ Dependencies

  • chore(deps): bump undici from 8.3.0 to 8.4.0 in the production-dependencies group @dependabot[bot] (#513)
  • chore(deps): bump codecov/codecov-action from 6.0.1 to 7.0.0 @dependabot[bot] (#511)
  • chore(deps-dev): bump knip from 6.16.0 to 6.16.1 in the development-dependencies group @dependabot[bot] (#512)

πŸ›οΈ European Parliament MCP Server Enhancements

Changes in this release continue to enhance the European Parliament MCP Server's capabilities for providing AI assistants with structured access to parliamentary datasets, including:

  • Model Context Protocol (MCP) tools, resources, and prompts
  • European Parliament API integration and data access
  • Security-first architecture with GDPR compliance
  • High-performance caching and rate limiting
  • Comprehensive TypeScript typing and runtime validation

πŸ“Š Quality Metrics & Documentation

Test Coverage
Unit Tests
E2E Tests
API Docs
Documentation Portal

πŸ” Security & Compliance

OpenSSF Scorecard
SLSA 3
SBOM
SBOM Quality
Attestations

πŸ›‘οΈ Hack23 ISMS Compliance

Information Security Policy
Open Source Policy
ISO 27001
NIST CSF 2.0
CIS Controls v8.1
GDPR

This release maintains compliance with Hack23 AB's Information Security Management System (ISMS):

  • βœ… ISO 27001:2022 - Information security management
  • βœ… NIST CSF 2.0 - Cybersecurity framework
  • βœ… CIS Controls v8.1 - Security best practices
  • βœ… GDPR - EU data protection compliance
  • βœ… SLSA Level 3 - Supply chain security with build provenance

πŸ’» Technology Stack

  • πŸ”Œ Model Context Protocol - MCP SDK for AI integration
  • ⚑ Node.js 25.x - Latest JavaScript runtime
  • πŸ”· TypeScript 6.0.2 - Strict typing with latest standards
  • πŸ›οΈ European Parliament API - Official open data access
  • πŸ”’ Zod - Runtime schema validation
  • 🌐 Undici - Fast HTTP/1.1 client
  • πŸ’Ύ LRU Cache - Efficient caching for API responses
  • πŸ§ͺ Vitest - Fast unit testing with 80%+ coverage

πŸ›οΈ European Parliament Data Access

  • πŸ‘₯ MEPs - Current and historical member information
  • πŸ“Š Plenary - Sessions, votes, and attendance records
  • πŸ›οΈ Committees - Meetings, documents, and membership
  • πŸ“„ Documents - Legislative texts, reports, amendments
  • ❓ Questions - Parliamentary questions and answers

πŸ” Build Attestations & Verification

All artifacts in this release include cryptographic attestations proving build integrity. For npm packages, use npm's provenance tooling; for GitHub artifacts, use GitHub attestations:

# Primary: verify npm package provenance using npm signatures
npm audit signatures european-parliament-mcp-server@1.3.17

# Optional: inspect attached attestations in the npm registry
npm view european-parliament-mcp-server@1.3.17 dist.attestations

# Verify GitHub artifact attestations for this repository
gh attestation verify european-parliament-mcp-server@1.3.17 --owner Hack23 --repo European-Parliament-MCP-Server

# View all GitHub attestations
gh api /repos/Hack23/European-Parliament-MCP-Server/attestations

SLSA Level 3 Benefits:

  • πŸ” Cryptographic proof of build integrity
  • πŸ›‘οΈ Protection against supply chain attacks
  • πŸ“‹ Full build provenance transparency
  • βœ… Independent verification capability

See ATTESTATIONS.md for complete verification guide.

πŸ™ Contributors

Thanks to @dependabot[bot], @pethers and dependabot[bot] for their contributions to this release!

πŸ“š Additional Resources

Full Changelog: v1.3.16...1.3.17