Skip to main content
Glama

Server Details

India DPDP Act facts, current pricing and a public-site compliance scan. No login needed.

If you are the author of this connector, you can claim ownership by verifying the domain or GitHub account it belongs to. Claimed connector authors can inspect health checks, view analytics, and manage their listing.
Status
Healthy
Uptime
100.0% over 21 days
Last Tested
Transport
Streamable HTTP · MCP 2025-06-18
URL

TDQS

A3.9/5.0

Scored across 5 tools

Disambiguation4/5

Each tool targets a distinct facet: dates, obligations lookup, penalty ceilings, pricing, and site scanning. The only mild overlap is between dpdp_obligations and dpdp_penalty_ceilings, since penalties could plausibly be a topic within obligations, but the descriptions clearly separate them. scan_site vs openproof_pricing are cleanly distinct (inspection vs plan info).

Naming Consistency4/5

All names are snake_case and readable, with three domain-prefixed lookups (dpdp_*) and two others (openproof_pricing, scan_site). The verb_noun vs noun_phrase split and inconsistent prefixes are a minor deviation rather than chaos, but a single convention would be cleaner.

Tool Count5/5

Five tools is well-scoped for a focused DPDP compliance helper: three reference lookups, one pricing lookup, and one active scan. Each tool clearly earns its place with no redundancy.

Completeness4/5

The surface covers dates, obligations, penalties, pricing, and live site signals, which spans the stated purpose reasonably well. Minor gaps exist, such as retrieving a specific section by number, generating an obligation checklist, or mapping scan findings to specific obligations.

Available Tools

5 tools
dpdp_key_datesA
Read-only
Inspect

Key dates under the India DPDP Rules, 2025: when the Rules were notified and when each group of obligations begins (Consent Managers, Data Fiduciary duties, penalties). Includes the confidence and review status of each.

NameRequiredDescriptionDefault

No parameters

TDQS

A3.7/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint=true and openWorldHint=false, so the safety profile is covered. The description adds useful content-level disclosure (that each date carries confidence and review status), but says nothing about freshness, source authority, or how the data is maintained.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

A single sentence with the resource named first and a colon-delimited enumeration of contents. Nothing is wasted and it is front-loaded.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

No output schema exists, so the description must convey return shape—it does by naming the dates, the obligation groups, and the confidence/review metadata. For a zero-param static lookup this is close to complete, missing only freshness or provenance notes.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Zero parameters, so there is no parameter semantics burden; baseline 4 applies. The description cannot and need not add parameter detail.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description uses a concrete resource (key dates under India DPDP Rules, 2025) and enumerates the scope of those dates: notification date and the commencement of obligation groups (Consent Managers, Data Fiduciary duties, penalties). This clearly distinguishes it from dpdp_obligations and dpdp_penalty_ceilings by content, though it never references those siblings by name.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Usage is implied: retrieve key compliance dates. There is no explicit when-to-use, when-not-to-use, or routing to the sibling tools (dpdp_obligations, dpdp_penalty_ceilings), which an agent choosing between three DPDP tools would benefit from.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

dpdp_obligationsA
Read-only
Inspect

Look up DPDP Act sections and Rules by topic (for example: breach, consent, grievance, children, processor contract, erasure, security safeguards, transfers). Returns matching summaries with confidence and review status.

NameRequiredDescriptionDefault
topicYesA topic or keyword, e.g. 'breach notification' or 'grievance'

TDQS

A3.5/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint=true and openWorldHint=false, so the safety profile is covered structurally. The description adds that results carry 'confidence and review status', which hints at potentially unevaluated or variable-reliability content, but it does not explain what those fields mean, how results are ranked, or how many are returned.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two sentences, no filler, with the core purpose front-loaded and the return characteristics in a compact trailing clause. The parenthetical topic list is somewhat long but earns its place by scoping the lookup.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a single-parameter read-only lookup with no output schema, the description covers purpose, example inputs and the shape of the return well enough to call it correctly. It stops short of explaining result ordering, count, or how to interpret confidence/review status.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

There is only one parameter and schema description coverage is 100%, so the baseline is 3. The description does supply additional example keywords beyond the schema's 'breach notification' and 'grievance', which helps an agent choose vocabulary, but it adds no syntax, granularity or matching-semantics detail.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description names a specific verb and resource ('Look up DPDP Act sections and Rules by topic') and gives a concrete topic list spanning breach, consent, grievance, children, processor contract, erasure, safeguards and transfers. It is clearly distinguishable from the sibling tools dpdp_key_dates and dpdp_penalty_ceilings by domain, though it never explicitly contrasts itself with them.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Usage is implied by the topic examples – an agent can infer this is the tool for substantive obligations rather than dates or penalties. However, there is no explicit when-to-use/when-not statement, no guidance on what to do when a lookup returns nothing, and no named alternative tool.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

dpdp_penalty_ceilingsA
Read-only
Inspect

The maximum penalties in the Schedule to the DPDP Act and the factors the Data Protection Board considers. These are ceilings, not an estimate of what any business would pay.

NameRequiredDescriptionDefault

No parameters

TDQS

A3.9/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint=true and openWorldHint=false, so the safety profile is covered. The description adds real interpretive value beyond the annotations by warning that these figures are ceilings rather than a prediction of what any business would actually pay — exactly the misuse an agent would otherwise make.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two sentences, zero filler, with the substance front-loaded and the caveat placed second where it qualifies the whole. Every clause earns its place.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a no-parameter, no-output-schema reference tool, the description is essentially complete: it says what content is returned and pre-empts the obvious misreading. Only a bare hint about result shape or scope (statute version/jurisdiction) is missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The tool takes no parameters, so there is no parameter semantics to explain and the baseline of 4 applies. The description correctly spends none of its text restating an empty input schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description names a specific resource — the maximum penalties in the Schedule to the DPDP Act — plus the Board's aggravating factors, so an agent knows exactly what content comes back. It is a noun phrase rather than a verb+resource, and it does not explicitly contrast itself with dpdp_key_dates or dpdp_obligations, though the subject matter is plainly distinct.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Usage is only implied: an agent can infer this is the tool for questions about statutory fine amounts, but there is no explicit when-to-use or when-not-to-use statement and no pointer to siblings. For a zero-parameter reference lookup the cost of that omission is modest, so a middle score is fair.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

openproof_pricingA
Read-only
Inspect

OpenProof's current public plans: the three annual tiers with price in INR before taxes, what each includes and its limits, and the free trial length. Read live from the same source as the pricing page.

NameRequiredDescriptionDefault

No parameters

TDQS

A4/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already establish readOnlyHint=true and openWorldHint=false, so safety is covered. The description adds genuine behavioral value beyond that: it discloses the exact return contents (tier count, INR pre-tax pricing, limits, trial length) and that data is 'read live from the same source as the pricing page,' signaling freshness rather than caching — important since there is no output schema.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two sentences, no filler: the first front-loads exactly what is returned, the second supplies the freshness guarantee. Every clause carries information.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With no output schema, the description carries the return-value burden and does so by enumerating contents; annotations cover the read-only, non-open-world profile. There are no parameters and no mutation concerns, so an agent has everything needed to call it correctly.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Zero parameters, so there is no parameter semantics to explain; the baseline for a no-arg tool applies. Schema coverage is also 100%, so nothing is left undocumented.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

Names a specific resource (OpenProof's public pricing plans) and enumerates exactly what it returns: three annual tiers, INR prices before taxes, inclusions/limits, and trial length. It is clearly distinct from all four siblings (dpdp_* regulatory queries, scan_site), though the retrieval verb is implied by 'Read live' rather than stated up front.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description makes the tool's subject matter obvious, so usage is strongly implied — call it when you need current OpenProof pricing. However, it never states when to use this versus alternatives or any exclusions/conditions, leaving the agent to infer the trigger.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

scan_siteA
Idempotent
Inspect

Run OpenProof's website scan on one public web address and return the DPDP-related signals found: consent banner and cookies before consent, third-party trackers, privacy-policy presence and content signals, signup-form consent checkbox, sensitive-field collection and TLS. It reads only the public page, honours site-owner opt-outs, and is an automated surface check, not an audit or legal advice. Limited to a few scans per hour per client. Send it as its own request, not inside a batch.

NameRequiredDescriptionDefault
urlYesPublic website address, e.g. 'https://example.com'

TDQS

A4.4/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Goes well beyond annotations by disclosing the rate limit (a few scans per hour per client), site-owner opt-out handling, the read-only-on-target-page scope, and the crucial caveat that this is an automated surface check and not an audit or legal advice. Annotations declare openWorldHint and idempotentHint but say nothing about limits or opt-outs, so the description adds substantial value.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Purpose and return payload are front-loaded in the first sentence, followed by behaviour, caveats, and operational constraints in tight sentences with no filler. It is dense but every clause contributes information an agent needs.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With no output schema, the description correctly enumerates the returned signal categories so the agent knows what comes back. It also covers limits, opt-outs, response-shape caveats, and batching constraints, leaving no material gap for a single-parameter tool.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100% and there is a single parameter, so the schema already carries the load; baseline 3 applies. The description slightly enriches it by stressing the address must be public and singular, but adds no format or edge-case guidance beyond the schema's example.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource ('Run OpenProof's website scan on one public web address') and enumerates the exact signals returned, so the agent knows precisely what the tool produces. It is clearly the only action tool among information-retrieval siblings, so differentiation is easy without opening a schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Gives concrete invocation constraints: one public web address, send as its own request rather than inside a batch, and a per-client hourly rate limit. It does not explicitly contrast against any sibling by name, but the surrounding tools are all static DPDP reference lookups, so the usage context is unambiguous.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

  1. 2 tool updates
    • Addedopenproof_pricing
    • Addedscan_site
  2. 3 tool updates
    • First observeddpdp_key_dates
    • First observeddpdp_obligations
    • First observeddpdp_penalty_ceilings

Related MCP Connectors

Related MCP Servers

  • A
    license
    Not graded
    quality
    B
    maintenance
    Local-first AI compliance scanner via Model Context Protocol, scanning codebases for violations of DPDPA 2023, RBI FREE-AI, SEBI AI/ML, and the EU AI Act.
    73 PyPI
    1
    Apache 2.0
  • A
    license
    Not graded
    quality
    C
    maintenance
    Vendor sovereignty scanner for EU AI Act compliance. Scans provider stacks for CLOUD Act exposure, data residency, and GDPR DPA status across 55 providers, then suggests EU-native alternatives. Free, no account required.
    12 npm
    1
    MIT
  • A
    license
    Not graded
    quality
    C
    maintenance
    Computes multi-jurisdictional AI compliance readiness scores with sourced penalty math, enabling gap analysis and audit tier recommendations.
    MIT
  • A
    license
    Not graded
    quality
    C
    maintenance
    Enables coding agents to build an inventory of what an app collects from its repo and run a free audit against the rules Apple, Google Play and Google OAuth reviewers apply. Also generates and hosts the required submission documents (privacy policy, account deletion page, reviewer notes, scope justifications) for a one-time fee once the user approves a checkout.
    MIT
Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.

Resources