io.github.CSOAI-ORG/gdpr-compliance-ai-mcp

Assess GDPR compliance issues and generate privacy and data governance guidance.

Source

Official Registry

Updated

2026-06-13

// securityCaution

Runs locally
Official / curated
Open source
Community-trusted

Summary

This MCP tool is from an official registry and is open source, with no documented secrets or remote endpoints in the provided materials, so no clear high-risk red flags are evident. However, the missing README leaves its functional scope and local data access unclear, and the system indicates code-execution capability, so it should be used with least privilege after reviewing the source.

CredentialsLow risk

The materials explicitly state that no keys or environment variables are required, and no API key, token, or account credential is documented; based on the available information, credential exposure or abuse risk appears low.

Network egressLow risk

The materials state that there is no remote endpoint host, and no external API or data upload path is described; based on the current documentation, there is no explicit destination for user data egress.

Code executionCaution

The objective checks flag executes-code, indicating the tool has the standard MCP capability to run code or processes locally; this is an inherent capability of such tools. No evidence is provided of system privileges far beyond its stated purpose, but it should still be run in a constrained environment.

Data accessCaution

The README is missing, so the materials do not clarify which local files, working directories, or other resources it can read or write; there is no explicit over-privilege red flag, but the data access boundary is opaque, so least-privilege access is recommended.

Supply chainCaution

Positive factors include an official registry source, an auditable open-source repository, and updates within the past year; however, the license is unspecified, the README is missing, and community adoption is 0 stars, which weakens auditability and maturity signals, resulting in moderate but cautious supply-chain confidence.

Recommendations

Review the GitHub source and dependency list first to confirm actual file access scope, subprocess behavior, and any implicit network requests.
Run the MCP tool in an isolated environment and grant only the minimum directory permissions required for the task.
Because the license is unspecified and documentation is missing, confirm legal/compliance posture, maintenance ownership, and update strategy before production use.
Enable host-side process and file access auditing to verify that real behavior matches the claims of no remote endpoints and no secrets.

Audited by: gpt-5.4 · 2026-06-17

// install

Copy the install command and let the AI configure it · recommended for beginners

Please install the "io.github.CSOAI-ORG/gdpr-compliance-ai-mcp" MCP server from askskill:
Run: claude mcp add 'io-github-csoai-org-gdpr-compliance-ai-mcp' -- npx -y gdpr-compliance-ai-mcp