REP27 — EU & UK legal representative
Server Details
Check EU/UK GDPR Art. 27 and GPSR Art. 16 obligations, see plans, start a free trial
- Status
- Healthy
- Last Tested
- Transport
- Streamable HTTP · MCP 2025-11-25
- URL
TDQS
Scored across 6 tools
Most tools have clearly distinct purposes: info (about_rep27), compliance determination (check_obligations), pricing (get_plans), catalogue lookup (find_product_category), conversion (create_checkout, start_free_trial). check_obligations and find_product_category both help determine which legal figure applies and could occasionally be confused, and create_checkout vs start_free_trial are both conversion paths, but descriptions make the boundaries reasonably clear.
Five of six tools follow a clean verb_noun pattern (check_obligations, create_checkout, find_product_category, get_plans, start_free_trial) with snake_case throughout. The lone deviation is about_rep27, a noun-style name, which is a minor inconsistency rather than a convention break.
Six tools is well-scoped for a focused legal-representative service, covering discovery, determination, pricing, trial, and checkout without redundancy. Each tool earns its place and the surface is not bloated or thin.
The customer-acquisition flow (info, obligation check, plans, trial, checkout) is covered, but post-purchase lifecycle operations are missing — no subscription status, renewal, cancellation, or order lookup, despite cancellation terms being referenced. These gaps would leave agents at a dead end for existing-customer requests.
Available Tools
6 toolsabout_rep27About REP27ARead-onlyInspect
Who provides the REP27 service, legal entities, contacts, terms and verification.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
Output Schema
| Name | Required | Description |
|---|---|---|
No output parameters | ||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true, destructiveHint=false, and openWorldHint=false, so the safety profile is fully covered by structured data. The description contributes only the subject-matter scope (provider, entities, contacts, terms, verification) rather than behavioral context like freshness or data source. With annotations carrying the behavioral load, a 3 is appropriate.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
A single sentence with no filler, and the resource ('REP27 service') is front-loaded before the content list. Every word earns its place for a zero-argument info tool.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
An output schema exists, so return-format explanation is unnecessary, and the description sufficiently scopes the content for a zero-param read-only tool. The only gap is the absence of any usage trigger, which is minor given how narrow the siblings' functions are.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The tool takes zero parameters, so there is nothing for the description to disambiguate; the baseline 4 applies. The schema coverage is 100%, and the description appropriately adds no parameter detail because none exists.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description names a concrete resource (the REP27 service's provider) and enumerates the content it returns: legal entities, contacts, terms, verification. This is clearly an informational lookup and is distinguishable from siblings like get_plans or create_checkout. The verb is implicit ('Who provides...') rather than an explicit action, which keeps it from a 5.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
There is no explicit when-to-use guidance, no prerequisites, and no reference to alternatives. The use case (fetch provider/legal info) is inferable from the topic list, but the description never states the condition under which an agent should call this rather than, say, get_plans.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
check_obligationsCheck which EU/UK representative obligations applyARead-onlyInspect
Checks, from a few facts about the company, whether it legally needs an EU GDPR Art. 27 representative, a UK GDPR Art. 27 representative and/or a GPSR Art. 16 EU responsible person, explains why with the legal basis and lists exemptions. Recommends the cheapest REP27 combination. Returns result_url, a personal page with the result.
| Name | Required | Description | Default |
|---|---|---|---|
| lang | No | Language code for the answer (ISO 639-1, e.g. en, it, es, fr, de, pt, nl, pl, ja, zh) | en |
| currency | No | Currency to also show prices in: EUR, USD, GBP, CAD, AUD, NZD, CHF, CZK, JPY or NOK (ECB rate) | EUR |
| offers_to_eu | Yes | True if the company offers goods or services to people in the EU/EEA or monitors their behaviour (tracking, ad profiling) | |
| offers_to_uk | No | True if the company offers goods or services to people in the UK or monitors their behaviour | |
| has_eu_branch | No | True if the company has an establishment (branch or subsidiary) in the EU | |
| has_uk_branch | No | True if the company has an establishment in the UK | |
| established_in | Yes | Country where the company is established, name or ISO code (e.g. United States, US, China) | |
| public_authority | No | True if the organisation is a public authority or body | |
| data_requests_per_year | No | Expected data-subject requests per year (access, erasure…), 0 if unknown | |
| sells_consumer_products_eu | No | True if it places physical consumer products on the EU market (own shop or marketplaces like Amazon, Etsy, eBay) | |
| sells_consumer_products_uk | No | True if it places physical consumer products on the UK market | |
| health_or_special_category_data | No | True if it processes health or other special-category data (Art. 9) or criminal-offence data at scale | |
| occasional_low_risk_processing_only | No | True if personal data of EU/UK people is processed only occasionally, at low risk and without special categories (Art. 27(2) exemption) | |
| has_eu_importer_or_manufacturer_in_eu | No | True if an EU-based manufacturer, importer or authorised representative already covers the products |
Output Schema
| Name | Required | Description |
|---|---|---|
No output parameters | ||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already cover the safety profile (readOnlyHint=true, destructiveHint=false, openWorldHint=false), and the description adds real value beyond them: it explains why the answer is given (legal basis), that exemptions are listed, that a cheapest-combination recommendation is produced, and that a personal result_url page is returned. It does not mention auth or rate limits, but for a read-only assessment tool this is solid added context.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Three tightly packed sentences, each earning its place: what is determined, what the output explains, what is recommended, and what is returned. Front-loaded with the core action and no filler.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a 14-parameter legal-assessment tool with a full output schema, the description covers purpose, reasoning output, exemptions, recommendation, and the result_url artifact. It omits any hint about how many/which facts are minimally required beyond the two required params, a minor gap.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100% across all 14 parameters, so the schema already carries the full semantics (including defaults and enum-like value lists for lang and currency). The description only says 'a few facts about the company' and adds no field-level guidance, so the baseline 3 applies.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb (checks) plus the exact determinations it makes: EU GDPR Art. 27 representative, UK GDPR Art. 27 representative, GPSR Art. 16 responsible person. An agent can distinguish this from informational siblings like about_rep27 purely from the description.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It signals the trigger condition ('from a few facts about the company') and that it is a determination tool rather than an informational one, but never states when not to use it or routes the agent between this and the sibling about_rep27. Usage is implied rather than explicit.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
create_checkoutCreate secure checkoutAInspect
Creates the secure Mollie checkout for the chosen REP27 plan with the buyer's company, country, contact name and email, and returns the payment link. Payment happens on Mollie's page, never in the chat.
| Name | Required | Description | Default |
|---|---|---|---|
| vat | No | EU VAT number if the company has one (reverse charge, no VAT) | |
| lang | No | Language code for the answer (ISO 639-1, e.g. en, it, es, fr, de, pt, nl, pl, ja, zh) | en |
| name | Yes | Full name of the buyer contact, as given by the user | |
| plan | Yes | Plan key as returned by get_plans: base, standard, multi (gdpr) or rp-solo, rp-brand, rp-house (gpsr) | |
| Yes | Email of the buyer contact, as given by the user | ||
| phone | No | Contact phone (optional) | |
| billing | No | yearly, or monthly only for GPSR responsible-person plans | yearly |
| company | Yes | Legal name of the buying company | |
| country | Yes | Country where the company is established | |
| service | Yes | gdpr = GDPR Art. 27 representative, gpsr = GPSR Art. 16 EU responsible person | |
| website | No | Company website (optional) | |
| currency | No | Currency to pay in: EUR, USD, GBP, CAD, AUD, NZD, CHF, CZK, JPY or NOK (ECB rate) | EUR |
| territory | No | Territory for the GDPR representative: eu, uk or both | eu |
Output Schema
| Name | Required | Description |
|---|---|---|
No output parameters | ||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations only declare the generic mutation profile (readOnlyHint=false, openWorldHint=true, idempotentHint=false, destructiveHint=false). The description adds genuinely useful behavior beyond that: payment is completed on an external Mollie page and never in the chat, and the tool returns a payment link rather than a completed transaction. It does not address what happens on repeat calls (duplicate checkouts) or any auth/rate constraints, so it stops short of full coverage.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two tight sentences with zero filler, front-loading the action and resource before the buyer fields and the external-payment caveat. Every clause carries information an agent can act on.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a 13-parameter (6 required) open-world mutation tool with a full output schema, the description covers the essentials: what is created, with whose data, and where payment occurs. The return-value explanation is redundant given the output schema, and the lack of prerequisite ordering (plan from get_plans) is a minor remaining gap.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so every parameter including enums (service, billing, territory) and defaults is already documented in the schema. The description only echoes the four buyer fields it names and adds no format, constraint, or dependency information beyond the schema, making this the baseline case.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb (creates) and resource (the secure Mollie checkout), plus the key inputs and the returned artifact (payment link). It is distinguishable from read-only siblings like get_plans and check_obligations, but it never explicitly contrasts with the nearby sibling start_free_trial, which is the obvious free alternative.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The phrase 'the chosen REP27 plan' implies a plan must first come from get_plans, and 'payment happens on Mollie's page' tells the agent this is the paid path, but there is no explicit when-to-use/when-not guidance or named alternative. Usage is implied rather than stated.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
find_product_categoryWhich legal figure does my product need?BRead-onlyInspect
Searches REP27's product-category catalogue (toys, cosmetics, electronics, pet products, connected devices…) and returns, for the best matches, the EU legal figure required (responsible person, authorised representative, Art. 4 economic operator, GDPR representative) and the REP27 service.
| Name | Required | Description | Default |
|---|---|---|---|
| lang | No | Language code for the answer (ISO 639-1, e.g. en, it, es, fr, de, pt, nl, pl, ja, zh) | en |
| product | Yes | Product or product type to look up, in any language (e.g. wooden toys, lipstick, smart plug, dog food) |
Output Schema
| Name | Required | Description |
|---|---|---|
No output parameters | ||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true, destructiveHint=false, and openWorldHint=true, so the safety and openness profile is settled. The description adds the data source (REP27's catalogue) and the shape of the answer, but its return-value detail overlaps with the existing output schema and it says nothing about rate limits, auth, or result ranking beyond 'best matches'.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
A single front-loaded sentence opens with the verb and resource before the parenthetical examples and the return clause. It is dense with enumerations but every clause carries information; only mild trimming would be possible.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a two-parameter, read-only lookup with full schema coverage, annotations, and an output schema, an agent has everything needed to invoke it correctly. The only shortfall is the missing routing guidance relative to check_obligations.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100% for both parameters (lang and product), including examples and the ISO 639-1 language hint, so the schema carries the semantics. The description contributes no additional parameter meaning, which makes the baseline 3 correct.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb and resource (searches REP27's product-category catalogue) and enumerates both the domain (toys, cosmetics, electronics…) and the payload returned (EU legal figure and REP27 service). The title adds a user-facing framing that helps an agent match intent, but it never explicitly contrasts with the closest sibling, check_obligations.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
There is no when-to-use or when-not-to-use guidance. The description never explains the boundary with check_obligations (which also concerns regulatory requirements) or when the agent should prefer this lookup over that one, so selection between siblings is left to inference.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_plansREP27 plans and pricesARead-onlyInspect
Returns REP27 plans with first-year price, renewal price and what each includes, for the GDPR Art. 27 representative (territory eu, uk or both) or the GPSR Art. 16 responsible person. Includes free-trial and cancellation terms.
| Name | Required | Description | Default |
|---|---|---|---|
| lang | No | Language code for the answer (ISO 639-1, e.g. en, it, es, fr, de, pt, nl, pl, ja, zh) | en |
| service | No | gdpr = GDPR Art. 27 representative, gpsr = GPSR Art. 16 EU responsible person | gdpr |
| currency | No | Currency to also show prices in: EUR, USD, GBP, CAD, AUD, NZD, CHF, CZK, JPY or NOK (ECB rate) | EUR |
| territory | No | Territory for the GDPR representative: eu, uk or both (GPSR is always eu) | eu |
Output Schema
| Name | Required | Description |
|---|---|---|
No output parameters | ||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true, openWorldHint=false and destructiveHint=false, so safety is covered. The description adds genuine behavioral content beyond that: what the response covers (first-year vs renewal pricing, inclusions, free-trial and cancellation terms), which is useful for an agent deciding whether this call answers the user's question.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
A single dense sentence that front-loads the returned data and then the modifiers, with no filler sentences. Slightly heavy prose but every clause carries information.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
An output schema exists, so return format need not be explained, and parameters are fully covered by the schema. The description supplies enough scope and content detail for an agent to invoke this confidently; only explicit usage routing is missing.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so all four parameters (lang, service, currency, territory) are already fully documented in the schema. The description reinforces the service/territory semantics but adds no syntax, format, or constraint detail beyond what the schema supplies, making the 3 baseline correct.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb ('Returns') and a precisely scoped resource: REP27 plans with first-year price, renewal price, inclusions, plus free-trial and cancellation terms. It also names the two service variants (GDPR Art. 27 vs GPSR Art. 16), which cleanly separates it from siblings like create_checkout and start_free_trial.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Usage is implied by the content description (use this to see pricing and terms), but there is no explicit when-to-use or when-not-to-use guidance, and no routing hint toward siblings such as start_free_trial or create_checkout. Adequate but leaves the agent to infer the selection context.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
start_free_trialStart the 7-day free trialAInspect
Starts the REP27 7-day free trial (no card) for the given contact name, work email, company and country. The user receives an email to continue.
| Name | Required | Description | Default |
|---|---|---|---|
| lang | No | Language code for the answer (ISO 639-1, e.g. en, it, es, fr, de, pt, nl, pl, ja, zh) | en |
| name | Yes | Full name of the contact person, as given by the user | |
| Yes | Work email of the contact person, as given by the user | ||
| notes | No | Optional short note from the user | |
| company | Yes | Legal name of the company | |
| country | Yes | Country where the company is established | |
| service | No | Service to try: GDPR representative EU, UK or both, or GPSR responsible person | gdpr_eu |
Output Schema
| Name | Required | Description |
|---|---|---|
No output parameters | ||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare the safety profile (non-readOnly, non-idempotent, open-world), so the bar is lower. The description adds genuinely useful context beyond them: no credit card is needed and the user will receive a follow-up email, which tells the agent the operation is asynchronous and not self-completing.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two tight sentences with the outcome front-loaded and the downstream email effect last. Nothing is redundant or padding.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
An output schema exists, so return values need not be explained, and annotations carry the safety profile. The description is nearly sufficient, though it never mentions the service parameter (which selects the trial product line), leaving an agent to discover that from the schema.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the schema already documents all seven parameters; baseline is 3. The description names only the four required fields (name, email, company, country) and adds a 'work email' nuance, but omits the service, lang, and notes options.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb+resource — 'Starts the REP27 7-day free trial' — with a qualifier ('no card') that hints at how it differs from create_checkout. It does not explicitly name any sibling, but the free-trial framing is unambiguous.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Usage is implied by the name and the '(no card)' qualifier, which suggests this is the frictionless path relative to a paid checkout, but no explicit when-to-use/when-not condition or alternative is given. An agent can infer context but must guess at prerequisites.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
6 tool updates
- First observed
about_rep27 - First observed
check_obligations - First observed
create_checkout - First observed
find_product_category - First observed
get_plans - First observed
start_free_trial
Related MCP Connectors
EU compliance checks for AI agents: sanctions, company, VAT ID, IBAN, email. Pay per call.
Check if EU GPSR applies to your product, and estimate what your small business is worth.
The compliance specialist your AI calls: ISO 27001, SOC 2, GDPR, NIS 2, DORA and more.
One-step legal compliance for vibe-coded apps: privacy, terms, cookie banner and EU AI Act check.
Related MCP Servers
- AlicenseNot gradedqualityDmaintenanceEnables EU AI Act compliance for AI agent systems by providing risk classification, audit trails, gap analysis, and evidence package generation.40 npmMIT
- AlicenseNot gradedqualityDmaintenanceEnables compliance checking and risk forecasting for the EU Platform Workers Directive (2024/2831), including employment-status presumption, algorithmic management disclosure, and human oversight.23 PyPIMIT
- FlicenseAqualityDmaintenanceEMEA sales + employment compliance for AI agents across 7 countries (UK, Germany, France, Spain, Italy, Netherlands, Sweden). GDPR, IR35, CNIL, B2B opt-out rules, cultural buyer psychology. Built by an ex-Deel ($12B) compliance + sales operator.7-
- AlicenseAqualityCmaintenanceProvides comprehensive GDPR compliance assessment tools for AI/ML systems, including lawful basis determination, DPIA generation, and data subject rights handling. It also crosswalks GDPR requirements to EU AI Act obligations with AI-specific considerations throughout.66 npm109 PyPIMIT
Glama MCP Gateway
Add one secure layer between your agents and this server.