Back to Browse
Free
Server data from the Official MCP Registry
MCP server for gdpr compliance ai. Features classify processing, lawful basis assessment, dp...
About
MCP server for gdpr compliance ai. Features classify processing, lawful basis assessment, dp...
Security Report
1.2
Use Caution1.2Critical RiskThis GDPR compliance MCP server has critical authentication and authorization flaws that expose its tools to abuse. The server implements a tiered system (free/pro) but the `check_access()` function is called inconsistently and appears to be a stub that doesn't properly validate API keys. Multiple tools accept an `api_key` parameter but the validation logic is incomplete or missing. Additionally, the code makes external network calls to a Vercel attestation API for signing compliance certificates, creating data exfiltration risk and external dependency on an unvetted service. The in-memory rate limiting is trivial to bypass. These issues, combined with the tools' ability to process and return sensitive compliance assessments, warrant a high-risk rating. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue.
4 files analyzed · 14 issues found
Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.
Permissions Required
This plugin requests these system permissions. Most are normal for its category.
How to Install
Add this to your MCP configuration file:
{
"mcpServers": {
"io-github-csoai-org-gdpr-compliance-ai-mcp": {
"args": [
"-y",
"gdpr-compliance-ai-mcp"
],
"command": "npx"
}
}
}Documentation
View on GitHubFrom the project's GitHub README.
GDPR Compliance MCP
Full GDPR compliance assessment for AI/ML systems.
Lawful basis (Article 6) · DPIAs (Article 35) · Data subject rights (Articles 15-22) · Breach notification (72h rule) · EU AI Act crosswalk
Penalties: up to 4% of global turnover or EUR 20M.
Why This Exists
Every AI system processing personal data needs GDPR compliance. Article 35 requires a DPIA for high-risk processing — which includes most ML training on personal data. Article 22 restricts automated decision-making. The 72-hour breach notification window leaves no room for manual processes.
This MCP automates the GDPR assessment: classify processing activities, determine lawful basis, generate DPIAs, check data subject rights workflows, and crosswalk findings to EU AI Act obligations.
Install
pip install gdpr-compliance-ai-mcp
Tools
| Tool | GDPR Article | What it does |
|---|---|---|
classify_processing | Art 4, 6 | Processing activity classification + lawful basis |
generate_dpia | Art 35 | Data Protection Impact Assessment generator |
check_data_rights | Art 15-22 | Data subject rights workflow audit |
assess_breach_process | Art 33-34 | 72-hour breach notification readiness |
check_automated_decisions | Art 22 | Automated decision-making compliance |
crosswalk_eu_ai_act | — | GDPR-to-EU AI Act obligation mapping |
run_full_audit | All | Complete GDPR readiness assessment |
sign_attestation | — | HMAC-SHA256 signed compliance certificate |
Pricing
| Tier | Price | What you get |
|---|---|---|
| Free | £0 | 10 calls/day |
| Pro | £199/mo | Unlimited + HMAC-signed attestations |
| Enterprise | £1,499/mo | Multi-tenant + co-branded reports |
Attestation API
POST https://meok-attestation-api.vercel.app/sign
GET https://meok-attestation-api.vercel.app/verify/{cert_id}
Links
- Website: meok.ai
- All MCP servers: meok.ai/labs/mcp/servers
- Enterprise support: nicholas@csoai.org
License
MIT
Reviews
No reviews yet
Be the first to review this server!
More Security MCP Servers
Toleno
Freeby Toleno · Developer Tools
Toleno Network MCP Server — Manage your Toleno mining account with Claude AI using natural language.
137
Stars
436
Installs
8.0
Security
4.8
Local
mcp-creator-python
Freeby mcp-marketplace · Developer Tools
Create, build, and publish Python MCP servers to PyPI — conversationally.
-
Stars
59
Installs
10.0
Security
5.0
Local
MarkItDown
Freeby Microsoft · Content & Media
Convert files (PDF, Word, Excel, images, audio) to Markdown for LLM consumption
120.0K
Stars
17
Installs
6.0
Security
5.0
Local