# gridwork-privacy

MCP server that audits websites for GDPR, CCPA, and ePrivacy compliance.

## What it does

- Detects 30+ third-party trackers (Google Analytics, Facebook Pixel, TikTok, Criteo, etc.)
- Analyzes cookie consent mechanisms (CMP detection, reject options, pre-checked boxes)
- Checks privacy policy presence and required disclosures
- Reviews data collection forms for sensitive fields
- Classifies each tracker's GDPR concern level
- Identifies specific regulatory articles for each finding

## Install

```bash
npx gridwork-privacy
```

## MCP tools

| Tool | Description |
|------|-------------|
| `audit_privacy` | Full privacy audit — trackers, consent, policy, data collection |
| `scan_trackers` | Quick tracker detection with GDPR concerns |
| `check_consent` | Cookie consent mechanism compliance check |
| `compare_privacy` | Side-by-side privacy comparison of two sites |

## Claude Desktop config

```json
{
  "mcpServers": {
    "gridwork-privacy": {
      "command": "npx",
      "args": ["-y", "gridwork-privacy"]
    }
  }
}
```

## License

MIT — [Gridwork](https://thegridwork.space)