MCP.Market

GDPR Shift-Left Compliance MCP server

by KevinRabun·io.github.KevinRabun/GDPRShiftLeftMCP·v0.4.0·2 stars
No reviews yet

GDPR compliance MCP server - article lookup, DPIA, ROPA, DSR, IaC analysis, Bicep templates.

B75/100grade B
Write a reviewInstall
What users say
No reviews yet
Be the first
Safety scan
B75/100

full report

Adoption
New

2 stars164 downloads/wk

Reviews

Write one

Nobody has reviewed GDPR Shift-Left Compliance yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

GDPR Shift-Left Compliance tools (34)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

  • analyze_application_code

    Analyze application code for GDPR compliance issues such as missing consent checks, PII logging, insecure data handling, and missing encryption.

  • analyze_breach_readiness

    Analyze code for breach notification readiness under GDPR Art. 33-34.

  • analyze_code_ast

    Analyze code using AST for GDPR compliance (Python, JavaScript, TypeScript).

  • analyze_code_for_role_indicators

    Analyze source code for patterns indicating controller vs processor role.

  • analyze_cross_border_transfers

    Analyze code for potential cross-border data transfers under GDPR Chapter V.

  • analyze_data_flow

    Analyze code for personal data flow patterns to support ROPA documentation.

  • analyze_dsr_capabilities

    Analyze code for Data Subject Rights (DSR) implementation capabilities.

  • analyze_infrastructure_code

    Analyze Bicep/Terraform/ARM code for GDPR compliance issues.

  • assess_controller_processor_role

    Assess whether a service/system acts as data controller, processor, joint controller, or has a mixed role under GDPR.

  • assess_dpia_need

    Assess whether a DPIA is required for a described processing activity.

  • assess_retention_policy

    Assess a data-retention policy against GDPR storage-limitation principle (Art. 5(1)(e)) and right to erasure (Art. 17).

  • check_deletion_requirements

    Check what deletion/anonymization capabilities a system must support per GDPR.

  • generate_dpa_checklist

    Generate an Article 28 Data Processing Agreement (DPA) checklist.

  • generate_dpia_template

    Generate a DPIA template pre-filled with guidance for the described processing activity, including risk assessment and mitigation measures.

  • generate_dsr_workflow

    Generate a step-by-step DSR fulfilment workflow with Azure implementation notes.

  • generate_ropa_template

    Generate a Records of Processing Activities (ROPA) template per Art. 30.

  • get_article

    Get the full text and context of a specific GDPR article.

  • get_ast_capabilities

    Get information about AST analysis capabilities.

  • get_azure_mapping

    Get Azure service recommendations mapped to a specific GDPR article.

  • get_definition

    Get the GDPR definition for a specific term (Art. 4).

  • get_dpia_guidance

    Get detailed DPIA guidance for a specific topic or processing type.

  • get_dsr_guidance

    Get guidance on handling a specific data-subject request.

  • get_dsr_timeline

    Get GDPR-mandated response timelines and extension rules for a DSR type.

  • get_recital

    Get the text of a specific GDPR recital.

  • get_retention_guidance

    Get GDPR-aligned retention guidance for a specific data category.

  • get_role_obligations

    Get GDPR obligations specific to a controller/processor role.

  • get_role_scenarios

    Get common controller/processor scenarios and role determinations.

  • get_ropa_requirements

    Get the mandatory ROPA fields for a given organizational role.

  • list_chapter_articles

    List all articles within a specific GDPR chapter.

  • list_definitions

    List all GDPR definitions from Article 4.

  • search_definitions

    Search GDPR definitions by keywords.

  • search_gdpr

    Search across GDPR articles and recitals by keywords.

  • validate_gdpr_config

    Validate IaC configuration against GDPR mandatory requirements BEFORE deploying.

  • validate_ropa

    Validate a ROPA document against Art. 30 mandatory fields.

Public scan report

scanner v0.1.10 · 2026-09-28 · same rubric, same numbers if you re-run it

no findings
  • Code scan23 source files scanned25/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitylocal package, no credentials required12/15
  • Maintenancelast push 219 days ago4/15
  • Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
Overall 75/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How GDPR Shift-Left Compliance compares

Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
75/100
higher than 45% of 48,255 servers
Tools
34
the typical server has 7
Tools that change things
0%
typical: 0%. Fewer write tools means less an agent can break
GitHub stars
2
more than 75% of 28,688 servers
Downloads a week
164
more than 72% of 12,191 servers with a package

What its tools let an agent do: 30 read · 4 create

Install GDPR Shift-Left Compliance in Claude Code, Cursor or VS Code

claude mcp add GDPRShiftLeftMCP -- uvx gdpr-shift-left-mcp
Add to Cursor

What the publisher says

From the GDPR Shift-Left Compliance repository's README, as published. We do not edit it. Read it on GitHub

GDPR Shift-Left MCP Server

<!-- mcp-name: io.github.KevinRabun/GDPRShiftLeftMCP -->

A Model Context Protocol (MCP) server that brings GDPR compliance knowledge directly into your IDE, enabling developers and compliance teams to "shift left" — identifying and addressing data protection requirements early in the development lifecycle.

⚠️ Disclaimer: This tool provides informational guidance only and does not constitute legal advice. Organisations should consult qualified legal counsel for binding GDPR compliance decisions.

Features

🔍 GDPR Knowledge Base (34 Tools)

  • Article Lookup — Retrieve any GDPR article by number, search across all 99 articles and 173 recitals
  • Definitions — Art. 4 term definitions with contextual explanations
  • Chapter Navigation — Browse articles by chapter with full directory
  • Azure Mappings — Map GDPR articles to Azure services and controls

📋 Compliance Workflows

  • DPIA Assessment — Assess whether a DPIA is required (EDPB 9-criteria test), generate Art. 35 templates
  • ROPA Builder — Generate and validate Art. 30 Records of Processing Activities
  • DSR Guidance — Step-by-step workflows for all 7 data subject rights (Arts. 12–23)
  • Retention Analysis — Assess retention policies against Art. 5(1)(e) storage limitation
  • Controller/Processor Role Classification — Assess data roles, get obligations, analyze code patterns, generate DPA checklists

🏗️ Infrastructure & Code Review

  • Bicep/Terraform/ARM Analyzer — Scan IaC for GDPR violations (encryption, access, network, residency, logging, retention)
  • Application Code Analyzer — Detect PII logging, hardcoded secrets, missing consent checks, data minimisation issues
  • GDPR Config Validator — Pass/fail validation in strict or advisory mode
  • DSR Capability Analyzer — Detect implementation of all 7 data subject rights (Arts. 15–22)
  • Cross-Border Transfer Analyzer — Identify third-party APIs/SDKs that may transfer data outside EEA, with risk justifications explaining why each provider has its assigned risk level (based on headquarters location, adequacy decisions, and data sensitivity)
  • Breach Readiness Analyzer — Assess breach detection, logging, and notification capabilities
  • Data Flow Analyzer — Map personal data lifecycle (collection, storage, transmission, deletion)
  • AST Code Analyzer — Deep analysis using Abstract Syntax Trees for Python, JavaScript, TypeScript, Java, C#, and Go with:
  • PII detection in function parameters and variables
  • Cross-border transfer detection via import analysis (150+ providers with risk justifications)
  • PII logging violation detection
  • DSR implementation pattern verification

📝 Guided Prompts (8 Expert Prompts)

  • Gap Analysis, DPIA Assessment, Compliance Roadmap, Data Mapping
  • Incident Response, Azure Privacy Review, Vendor Assessment, Cross-Border Transfers

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

GDPR Shift-Left Compliance: common questions

Is GDPR Shift-Left Compliance MCP server safe?
Mostly: it is graded B (75/100). Read the GDPR Shift-Left Compliance safety report
How do I install GDPR Shift-Left Compliance?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does GDPR Shift-Left Compliance need an API key?
Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is GDPR Shift-Left Compliance maintained?
The last commit was 256 days ago (2026-02-21). The latest release is v0.4.0.
How does GDPR Shift-Left Compliance compare with other MCP servers?
safety score 75/100 (higher than 45% of 48,255 servers); tools 34 (the typical server has 7); tools that change things 0% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.

More from KevinRabun →