Add an MCP Resource

# ---------- Resources: authoritative documents ----------

POLICY_DOCS = {
    "kyc-tier-2": {
        "title": "KYC Tier 2 — Enhanced Due Diligence Requirements",
        "effective_date": "2025-09-01",
        "content": """\
KYC Tier 2 — Enhanced Due Diligence (EDD)

SCOPE: Customers classified Tier 2 require enhanced due diligence at onboarding and
on a 12-month review cadence. Triggers include cumulative volume > $50,000/year,
exposure to medium-risk jurisdictions, or politically-exposed-person (PEP) status.

REQUIRED EVIDENCE:
1. Government-issued ID verified against authoritative source
2. Proof of address dated within 90 days
3. Source-of-wealth documentation (employment letter, business registration, or tax return)
4. Sanctions screening against OFAC SDN, EU Consolidated, UN, and HMT lists
5. Adverse media screening covering the last 5 years

REVIEW CADENCE: Annual; immediate re-review on any material change in profile.
DOCUMENTATION RETENTION: 7 years from account closure per BSA 31 CFR 1010.430.""",
    },
    "sar-narrative-template": {
        "title": "SAR Narrative Template — Internal SOP",
        "effective_date": "2024-11-15",
        "content": """\
SAR Narrative Template — Internal Standard Operating Procedure

The narrative section of a Suspicious Activity Report must answer five questions
concisely. The recommended order:

1. WHO   — Subject(s) of the report. Full legal name, customer ID, role.
2. WHAT  — Suspicious activity. Type, channels, amounts, time window.
3. WHERE — Jurisdictions involved. Counterparties' locations.
4. WHEN  — Date range. Frequency. Velocity changes.
5. WHY   — What makes this suspicious. Reference policy or red-flag indicator.

TONE: Factual. No speculation. No conclusory language ("Customer is a money
launderer" — NO; "Activity is inconsistent with stated source of wealth" — YES).

LENGTH: Aim for 5-15 sentences. Be specific, not comprehensive.""",
    },
    "high-risk-jurisdictions": {
        "title": "High-Risk Jurisdictions — Current List",
        "effective_date": "2026-04-01",
        "content": """\
High-Risk Jurisdictions (effective 2026-04-01)

PROHIBITED (Comprehensive Sanctions):
- Iran (IR), North Korea (KP), Cuba (CU), Syria (SY)
- Russia (RU) — sectoral sanctions per OFAC EO 14024

HIGH RISK (Enhanced Monitoring):
- FATF black list: as published current cycle
- FATF grey list: as published current cycle
- Countries with weak AML/CFT regimes per internal risk assessment

This list is reviewed quarterly. The authoritative source is the Compliance
Policy Manual section 4.2. Refer all edge cases to the compliance lead.""",
    },
}


@mcp.resource("compliance://policies/{doc_id}")
def get_policy_document(doc_id: str) -> str:
    """Return the full text of an internal compliance policy document.

    Use these as authoritative references when drafting case narratives, EDD reports,
    or regulatory responses. Cite the URI and effective_date in any output that
    relies on the document.
    """
    if doc_id not in POLICY_DOCS:
        return f"# Policy not found\n\nNo policy document with ID '{doc_id}' is registered."
    doc = POLICY_DOCS[doc_id]
    return (
        f"# {doc['title']}\n"
        f"Effective: {doc['effective_date']}\n"
        f"Source URI: compliance://policies/{doc_id}\n\n"
        f"{doc['content']}"
    )


@mcp.resource("compliance://policies")
def list_policies() -> str:
    """Return a directory of all available compliance policy documents."""
    lines = ["# Available Compliance Policies\n"]
    for doc_id, doc in POLICY_DOCS.items():
        lines.append(f"- **compliance://policies/{doc_id}**: {doc['title']} (effective {doc['effective_date']})")
    return "\n".join(lines)

mcp dev server.py

Using the KYC Tier 2 policy I just attached, walk me through what
evidence I need to collect for a new customer with $80K projected annual
volume from the UAE.

I'm drafting a SAR narrative. Attach the SAR template and the high-risk
jurisdictions list, then help me structure a narrative for a customer
in Russia with unexplained $50K wire activity over 30 days.

from datetime import datetime

# Simulated case database
CASES = {
    "CASE-2026-00012": {
        "subject": "Vladimir Petrov",
        "opened": "2026-04-22",
        "alerts": ["ALT-2026-00042", "ALT-2026-00045"],
        "transactions": [
            {"date": "2026-04-18", "amount_usd": 12500, "counterparty": "Atlas Crypto Exchange", "type": "wire"},
            {"date": "2026-04-20", "amount_usd": 9800,  "counterparty": "Atlas Crypto Exchange", "type": "wire"},
            {"date": "2026-04-21", "amount_usd": 25000, "counterparty": "Global Shadow Holdings", "type": "wire"},
        ],
        "status": "under-investigation",
    },
}


@mcp.resource("compliance://cases/{case_id}")
def get_case_file(case_id: str) -> str:
    """Return the full case file for an investigation, including subject, alerts,
    transactions, and current status. Use this for drafting case narratives.
    """
    if case_id not in CASES:
        return f"# Case not found\n\nNo case with ID '{case_id}'."
    c = CASES[case_id]
    lines = [
        f"# Case File: {case_id}",
        f"Subject: {c['subject']}",
        f"Opened: {c['opened']}",
        f"Status: {c['status']}",
        f"Snapshot: {datetime.utcnow().isoformat()}Z",
        "",
        "## Related Alerts",
        *[f"- {a}" for a in c['alerts']],
        "",
        "## Transactions",
    ]
    for t in c['transactions']:
        lines.append(f"- {t['date']}: ${t['amount_usd']:,} {t['type']} ↔ {t['counterparty']}")
    return "\n".join(lines)