Hermetics RGPD
Server Details
EU data protection law for AI agents: GDPR, AI Act, EDPB, CJEU and national law, with status.
- Status
- Healthy
- Last Tested
- Transport
- Streamable HTTP · MCP 2025-11-25
- URL
TDQS
Score is being calculated.
Available Tools
2 toolsgdpr_obligationsGDPR obligations of a companyRead-onlyIdempotentInspect
Lists the GDPR obligations of a company established in an EU or EEA country from a few facts (size, website and cookies, e-mail marketing, sensitive data, video surveillance, AI...). Deterministic rules: each obligation comes with its legal basis and a suggested search_law query for the official text. A fact left out is treated as unknown, except processors, which are assumed.
| Name | Required | Description | Default |
|---|---|---|---|
| ai | No | True if it develops or uses AI systems that interact with or make decisions about people. | |
| cctv | No | True if it uses video surveillance (CCTV). | |
| country | Yes | Country where the company is established (ISO code of an EU or EEA country, e.g. FR, DE, ES, IT). | |
| website | No | True if the company has a website or app. | |
| employees | No | Number of employees (0 if none). | |
| processors | No | True if providers process personal data on its behalf (hosting, SaaS, payroll, CRM). Assumed true if omitted. | |
| large_scale | No | True if the processing concerns a large number of people (large scale). | |
| public_sector | No | True if the organisation is a public authority or public body. | |
| email_marketing | No | True if the company sends marketing e-mails or SMS to individuals. | |
| vulnerable_people | No | True if it processes data of vulnerable people (children, patients, elderly people). | |
| automated_decisions | No | True if it takes automated decisions with legal or similarly significant effects on people. | |
| evaluation_or_scoring | No | True if it evaluates or scores people (credit scoring, profiling, performance rating). | |
| non_essential_cookies | No | True if the website or app uses non-essential cookies or trackers (analytics, advertising, social media pixels). | |
| special_category_data | No | True if it processes special category data (health, biometrics, genetic data, religion, union membership, sex life or orientation, ethnic origin, political opinions). | |
| systematic_monitoring | No | True if it systematically monitors people (online behaviour tracking, geolocation, profiling for advertising, CCTV of public areas). | |
| transfers_outside_eea | No | True if personal data is sent to providers or entities outside the EEA (e.g. US SaaS). |
search_lawSearch EU data protection lawRead-onlyIdempotentInspect
Searches the official texts on data protection (GDPR, ePrivacy, AI Act, EDPB guidance, CJEU case law, and the national law, authority guidance and decisions held for each country) and returns the most relevant passages verbatim, each with its current status (in force, applicable from a date, amended) and its official link.
| Name | Required | Description | Default |
|---|---|---|---|
| country | No | ISO code of an EU or EEA country (e.g. FR, DE, ES) to add its national law and authority guidance to the EU texts; omit for EU texts only. | |
| question | Yes | The legal question, in any language (French gives the best results today). Names and personal data are not needed. |
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
2 tool updates
- First observed
gdpr_obligations - First observed
search_law
Related MCP Connectors
EU AI Act obligations and updates from ten official sources, incl. the national layer.
Provenance-backed EU and UK legislation for AI agents, addressable to the individual provision.
German and EU law for AI assistants: statutes and case law in current wording, with sources.
1EU AI Act and GDPR checks with sources: classify an AI system, trace each duty, find the supervisor.
91
Related MCP Servers
- AlicenseNot gradedqualityCmaintenanceEU Digital Identity Wallet (eIDAS 2.0) for AI agents, compliant with MCP protocol and EU AI Act.37 PyPIMIT
- FlicenseNot gradedqualityDmaintenanceProvides an AI agent with regulatory compliance tools for the French/European market based on the AI Act and GDPR, including system classification, obligation listing, deadline schedules, legal reference lookup, and GDPR crosschecks.-
- AlicenseAqualityDmaintenanceCompliance and guardrails infrastructure for AI agents, enabling safe operations within regulatory boundaries like GDPR and EU AI Act.6MIT
- AlicenseAqualityCmaintenanceProvides comprehensive GDPR compliance assessment tools for AI/ML systems, including lawful basis determination, DPIA generation, and data subject rights handling. It also crosswalks GDPR requirements to EU AI Act obligations with AI-specific considerations throughout.64 npm45 PyPIMIT
Glama MCP Gateway
Add one secure layer between your agents and this server.