Click on "Deploy Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type @ followed by the MCP server name and your instructions, e.g., "@io.github.mister-franklin/gdpr-decisions largest GDPR fines in 2024"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
Remote MCP server providing AI-powered access to the largest EU GDPR enforcement decisions database. Search decisions, recommendations, and guidelines from all EU/EEA Data Protection Authorities, CJEU judgments, and EDPB guidelines.
Built by Mr. Franklin for The DPO.
Semantic search across thousands of GDPR enforcement decisions using legal-domain embeddings (Voyage voyage-law-2)
Hybrid search combining vector similarity, full-text search, and legal source hierarchy weighting
Reranking with Voyage rerank-2.5 for optimal result relevance
GDPR article lookup — find decisions by violated or cited GDPR article
Enforcement statistics — aggregate data on fines, violations, and authority activity
Full decision details including sanctions, controller data, and GDPR article references
Related MCP server: GDPR Compliance for AI Systems MCP Server
Tool | Description |
| Semantic search with optional jurisdiction filter |
| Full decision details by ID |
| Find decisions by GDPR article number |
| Aggregate enforcement statistics |
Sign up at thedpo.eu/mcp to get your API key. Free tier includes 3 advice sessions per month.
Add to your Claude Desktop config (claude_desktop_config.json):
{
"mcpServers": {
"gdpr-decisions": {
"command": "uvx",
"args": ["mcp-server-gdpr-decisions"],
"env": {
"GDPR_API_KEY": "sk_free_your_key_here"
}
}
}
}Ask Claude questions like:
"What are the largest GDPR fines in 2024?"
"Find decisions about consent for cookies"
"Which DPA decisions cite Article 6 GDPR?"
"Give me enforcement statistics for Belgium"
Tier | Sessions/month | Price |
Free | 3 | Free |
Pro | Unlimited | See thedpo.eu/mcp |
A session is a 15-minute window. Follow-up questions within the same session don't count as new sessions.
MIT
Get full details of a specific GDPR decision by its ID. Returns the complete summary, violated articles, sanctions, controller info, and legal analysis. Use after search_gdpr_decisions to get more detail on a specific result.
Inputs: decision_id (required), api_key.
Get aggregate GDPR enforcement statistics: total decisions, total fines, average fine, decisions this month, authorities covered. Useful for contextualizing advice with enforcement trends.
Inputs: api_key.
Find GDPR decisions that cite or violate a specific GDPR article. Useful for finding enforcement patterns for specific provisions. Examples: '5(1)(a)' for lawfulness/fairness/transparency, '6(1)' for legal basis, '32' for security measures.
Inputs: article (required), violated_only, country, limit, +1 more.
Search the EU GDPR case law database using semantic search. Finds relevant decisions from all EU/EEA Data Protection Authorities (GBA, CNIL, AP, etc.), CJEU judgments, and EDPB guidelines. Returns decisions with summaries, fines, violated articles, and metadata. Use this to find case law supporting legal advice.
Inputs: query (required), jurisdiction, limit, api_key.
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
Loading tool schema changelog…
Scored across 4 tools
Each tool has a distinct and clear purpose: search_gdpr_decisions for general semantic search, search_by_gdpr_article for article-specific search, get_decision_detail for fetching details, and get_gdpr_statistics for aggregate stats. There is no overlap or ambiguity.
All tool names use consistent snake_case with a verb_noun pattern ('search_' and 'get_'). The naming is predictable and follows a clear convention.
Four tools is an appropriate scope for the server's purpose. It covers the essential operations (search, detail, statistics) without being too sparse or excessive.
The tool set covers core workflows: searching generally and by article, retrieving details, and statistics. A minor gap is the lack of explicit listing or filtering options beyond article search, but the semantic search likely handles many use cases.
EU AI Act and GDPR checks with sources: classify an AI system, trace each duty, find the supervisor.
AI laws from 110+ countries, enforcement actions and a 3,900-term glossary. Free, no API key.
Privacy law your AI assistant can cite: the exact clause and its version. GDPR and UAE PDPL today.
Experimental GDPR grounding: rules, preconditions, exceptions, exact quotes, and citation checks.
