Skip to main content
Glama
KevinRabun

io.github.KevinRabun/GDPRShiftLeftMCP

by KevinRabun

analyze_code_ast

Detect GDPR compliance issues in Python, JavaScript, and TypeScript by analyzing source code with AST parsing, identifying cross-border data transfers, PII mishandling, and logging violations.

Instructions

Analyze code using AST for GDPR compliance (Python, JavaScript, TypeScript).

AST analysis provides higher accuracy than regex by:

  • Filtering out comments and string literals (reducing false positives)

  • Tracking variable assignments and data flow

  • Identifying function definitions and call sites

  • Verifying semantic intent of GDPR-related code

Detects:

  • Cross-border data transfers (third-party API imports)

  • PII handling in function parameters

  • PII logging violations

  • DSR implementation patterns (Art. 15-22)

Args: code: Source code to analyze file_path: Optional file path for automatic language detection language: Override language (python, javascript, typescript) deep_analysis: Include detailed function, import, and data flow info

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
codeYes
file_pathNo
languageNo
deep_analysisNo

Output Schema

TableJSON Schema
NameRequiredDescriptionDefault
resultYes
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations provided, so description carries full burden. It details how AST works (filters comments/strings, tracks variables, identifies functions, verifies semantic intent) and lists detections. Lacks mention of potential side effects or limits, but sufficient.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Well-structured with a lead sentence, bullet points for benefits and detections, and an Args list. Every sentence adds value, though slightly lengthy; could be more concise but not wasteful.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Output schema exists, so return values not needed. Description covers all parameters, use cases, and behavior. Complete for a complex analysis tool.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters5/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 0%, but description includes an Args section explaining each parameter's purpose (code, file_path, language, deep_analysis), adding meaning beyond schema titles and types.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

Clearly states 'Analyze code using AST for GDPR compliance' with specific languages (Python, JavaScript, TypeScript). Distinct from siblings like 'analyze_application_code' which likely uses different methods.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explains when to use AST over regex (higher accuracy, reduces false positives, tracks data flow) and lists specific detections. Does not explicitly mention when not to use or compare to direct siblings, but context is sufficient.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Install Server

Other Tools

Latest Blog Posts

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/KevinRabun/GDPRShiftLeftMCP'

If you have feedback or need assistance with the MCP directory API, please join our Discord server