Server data from the Official MCP Registry
MCP server for gdpr compliance ai. Features classify processing, lawful basis assessment, dp...
MCP server for gdpr compliance ai. Features classify processing, lawful basis assessment, dp...
This GDPR compliance MCP server has critical authentication and authorization flaws that expose its tools to abuse. The server implements a tiered system (free/pro) but the `check_access()` function is called inconsistently and appears to be a stub that doesn't properly validate API keys. Multiple tools accept an `api_key` parameter but the validation logic is incomplete or missing. Additionally, the code makes external network calls to a Vercel attestation API for signing compliance certificates, creating data exfiltration risk and external dependency on an unvetted service. The in-memory rate limiting is trivial to bypass. These issues, combined with the tools' ability to process and return sensitive compliance assessments, warrant a high-risk rating. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue.
4 files analyzed · 14 issues found
Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.
This plugin requests these system permissions. Most are normal for its category.
Add this to your MCP configuration file:
{
"mcpServers": {
"io-github-csoai-org-gdpr-compliance-ai-mcp": {
"args": [
"-y",
"gdpr-compliance-ai-mcp"
],
"command": "npx"
}
}
}From the project's GitHub README.
Full GDPR compliance assessment for AI/ML systems.
Lawful basis (Article 6) · DPIAs (Article 35) · Data subject rights (Articles 15-22) · Breach notification (72h rule) · EU AI Act crosswalk
Penalties: up to 4% of global turnover or EUR 20M.
Every AI system processing personal data needs GDPR compliance. Article 35 requires a DPIA for high-risk processing — which includes most ML training on personal data. Article 22 restricts automated decision-making. The 72-hour breach notification window leaves no room for manual processes.
This MCP automates the GDPR assessment: classify processing activities, determine lawful basis, generate DPIAs, check data subject rights workflows, and crosswalk findings to EU AI Act obligations.
pip install gdpr-compliance-ai-mcp
| Tool | GDPR Article | What it does |
|---|---|---|
classify_processing | Art 4, 6 | Processing activity classification + lawful basis |
generate_dpia | Art 35 | Data Protection Impact Assessment generator |
check_data_rights | Art 15-22 | Data subject rights workflow audit |
assess_breach_process | Art 33-34 | 72-hour breach notification readiness |
check_automated_decisions | Art 22 | Automated decision-making compliance |
crosswalk_eu_ai_act | — | GDPR-to-EU AI Act obligation mapping |
run_full_audit | All | Complete GDPR readiness assessment |
sign_attestation | — | HMAC-SHA256 signed compliance certificate |
| Tier | Price | What you get |
|---|---|---|
| Free | £0 | 10 calls/day |
| Pro | £199/mo | Unlimited + HMAC-signed attestations |
| Enterprise | £1,499/mo | Multi-tenant + co-branded reports |
POST https://meok-attestation-api.vercel.app/sign
GET https://meok-attestation-api.vercel.app/verify/{cert_id}
MIT
Be the first to review this server!
by Toleno · Developer Tools
Toleno Network MCP Server — Manage your Toleno mining account with Claude AI using natural language.
by mcp-marketplace · Developer Tools
Create, build, and publish Python MCP servers to PyPI — conversationally.
by Microsoft · Content & Media
Convert files (PDF, Word, Excel, images, audio) to Markdown for LLM consumption