Server data from the Official MCP Registry
Agent data residency + GDPR Chapter V transfer-basis runtime guard. Programmatically answer 'whe...
Agent data residency + GDPR Chapter V transfer-basis runtime guard. Programmatically answer 'whe...
This MCP server implements GDPR/EU AI Act compliance checking with reasonable security posture. Authentication is present but optional for free tier, relying on environment variables and a fallback auth engine. The codebase has clean input handling, no injection vulnerabilities, and appropriate permission scoping for its purpose. Minor concerns include broad exception handling, potential rate-limiting bypass on the free tier, and reliance on an external auth system that may not always be available. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue (1 critical, 0 high severity).
3 files analyzed · 10 issues found
Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.
This plugin requests these system permissions. Most are normal for its category.
Unverified package source
We couldn't verify that the installable package matches the reviewed source code. Proceed with caution.
Add this to your MCP configuration file:
{
"mcpServers": {
"io-github-csoai-org-agent-data-residency-mcp": {
"args": [
"agent-data-residency-mcp"
],
"command": "uvx"
}
}
}From the project's GitHub README.
The only MCP server that answers "where does this data live?" at agent runtime.
When agent A (EU) talks to agent B (US), where does data flow? Is GDPR Chapter V satisfied? Does the transfer need an adequacy decision, SCCs, or BCRs? This MCP gives programmatic answers.
Enterprises rolling out multi-agent systems hit a runtime question nobody answers cleanly: when agent A in Frankfurt invokes a tool on agent B in Virginia, what just happened legally?
Most MCPs ignore the transfer. Compliance teams audit it months later. This MCP makes the answer a single tool call.
pip install agent-data-residency-mcp
| Tool | Purpose |
|---|---|
check_residency_policy | Source→target verdict (permitted / restricted / prohibited) with legal basis |
get_transfer_basis | List GDPR Chapter V mechanisms: adequacy, SCCs, BCRs, derogations, UK IDTA |
list_adequacy_decisions | All 16 current EU adequacy decisions with scope + warnings |
check_eu_ai_act_data_governance | Article 10 duties + cross-refs to GDPR Chapter V |
log_transfer | Pro+ — immutable audit log entry (pairs with agent-audit-logger-mcp) |
result = check_residency_policy(
source_region="DE",
target_region="US",
data_classification="personal"
)
Returns:
{
"verdict": "permitted-with-conditions",
"rationale": "Adequacy decision for united-states (2023-07-10). Scope: EU-US Data Privacy Framework certified organisations only",
"legal_basis": "GDPR Article 45 — adequacy decision",
"warning": "Subject to ongoing CJEU scrutiny. Schrems III risk."
}
agent-audit-logger-mcp — immutable A2A audit trailagent-policy-enforcement-mcp — define per-region transfer policieseu-ai-act-compliance-mcp — Article 10 data-governance checklog_transfer audit trail. SubscribeMIT © MEOK AI Labs
Be the first to review this server!
by Modelcontextprotocol · Developer Tools
Read, search, and manipulate Git repositories programmatically
by Toleno · Developer Tools
Toleno Network MCP Server — Manage your Toleno mining account with Claude AI using natural language.
by mcp-marketplace · Developer Tools
Create, build, and publish Python MCP servers to PyPI — conversationally.