protogrid
Sign inAdd to your agent

Search / com.doubleaigents.www/dsar

Double AIgents DSAR service

R0· no sign-in

GDPR DSAR deadlines, breach triage, AI tool checks, HR retention and letters (UK/EU/CH)

v1.2.0 · active · repository · website · descriptor JSON · versions

An agent can connect right now, no human step.Remote endpoint, no authentication, reachable on the last probe.
Quality100new
Trust96of 100
Uptime, 30 days100%
Latency p50333 ms

Connect

8 clients · secrets stay placeholders
{
  "mcpServers": {
    "dsar": {
      "type": "http",
      "url": "https://www.doubleaigents.com/api/mcp"
    }
  }
}
claude mcp add --transport http dsar https://www.doubleaigents.com/api/mcp
[mcp_servers.dsar]
url = "https://www.doubleaigents.com/api/mcp"

{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "dsar": {
      "type": "remote",
      "url": "https://www.doubleaigents.com/api/mcp",
      "enabled": true
    }
  }
}
{
  "mcpServers": {
    "dsar": {
      "type": "http",
      "url": "https://www.doubleaigents.com/api/mcp"
    }
  },
  "deeplink": "cursor://anysphere.cursor-deeplink/mcp/install?name=dsar&config=eyJ0eXBlIjoiaHR0cCIsInVybCI6Imh0dHBzOi8vd3d3LmRvdWJsZWFpZ2VudHMuY29tL2FwaS9tY3AifQ%3D%3D"
}
{
  "servers": {
    "dsar": {
      "type": "http",
      "url": "https://www.doubleaigents.com/api/mcp"
    }
  }
}
{
  "mcpServers": {
    "dsar": {
      "httpUrl": "https://www.doubleaigents.com/api/mcp"
    }
  }
}
extensions:
  "dsar":
    enabled: true
    name: "dsar"
    type: streamable_http
    uri: "https://www.doubleaigents.com/api/mcp"
    timeout: 300

Quality 100 / 100new

protocol100 · weight 25
  • pass
    protocol.modernsupports 2026-07-28 (server/discover)
  • pass
    protocol.statelessanswers without a session
  • pass
    protocol.transportstreamable HTTP
  • pass
    protocol.list_ttltool list is cacheable (ttlMs 3600000)
authorizationn/a · weight 15
  • n/a
    auth.prm, auth.as_metadata, auth.cimdno remote uses OAuth
  • n/a
    auth.secret_in_urlno templated URL
tool hygiene100 · weight 30
  • pass
    tools.descriptionsevery tool has a description
  • pass
    tools.description_lengthdescriptions are concise
  • pass
    tools.schemasevery tool has an object input schema
  • pass
    tools.annotations10 of 10 tools declare readOnlyHint or destructiveHint
  • pass
    tools.directory_hintsevery tool declares readOnlyHint, destructiveHint, idempotentHint and openWorldHint
  • pass
    tools.token_costabout 2,596 tokens to load every tool
  • pass
    tools.api_dumptools are not a one-to-one API dump
stabilityn/a · weight 15
  • n/a
    stability.changes, stability.rug_pulltool history recorded for 2 of the 7 days needed
dependenciesn/a · weight 15
  • n/a
    deps.known_vulns, deps.mcp_sdk_version, deps.resolvableno npm or PyPI package

10 tools, about 2,596 tokens to load them all · tool set b030c0620617 · tools last changed 2026-10-18 · checked 2026-10-20 15:26 UTC

Tool changes

  • dsar_search_checklistadded

    Where to search when answering a subject access request, especially from an employee: Microsoft 365 (Exchange and archives, shared mailboxes, Teams, OneDrive, SharePoint), other collaboration tools, HR, payroll, recruitment, CCTV, access logs, devices, line manager notes, paper files, occupational health and backups; search-term tips; and the search standard (UK GDPR Art. 15(1A) reasonable and proportionate searches). General information, not legal advice.

  • hr_retentionadded

    Recommended retention period for a common UK HR record, whether it is statutory or only recommended, and the source (HMRC, Home Office, RIDDOR 2013, Working Time Regulations, Limitation Act 1980, ICO, DBS). UK only for now. General information, not legal advice.

  • ai_tool_checkadded

    Screens a planned use of an AI tool: whether a DPIA is likely to be required (Art. 35(3), the ICO high-risk list, the WP248 criteria; FADP Art. 22 for Switzerland), EU AI Act risk flags (Annex III high-risk areas, especially employment; Art. 5 prohibited practices such as emotion recognition at work; current application dates after the Digital Omnibus), and automated decision rules (GDPR Art. 22, UK GDPR Arts 22A to 22D). Findings with sources. The use_case text is not stored or returned. General information, not legal advice.

  • breach_triageadded

    A likely-reportability view on a personal data breach (UK, EU/EEA, Switzerland), following the ICO guide "Personal data breaches: a guide" and EDPB Guidelines 9/2022: whether notifying the regulator and telling the people affected is likely or unlikely to be required, the factors behind that view, and the notification deadline. The controller decides. General information, not legal advice. Do not pass names or other personal data.

Full history: list_changes · trend: quality JSON.

Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.

Trust 96 / 100

provenance85
liveness100
freshness100
hygiene100

+repository +dns-namespace +website +reachable +uptime-100% +updated-2d-ago

Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. How it is computed.

Endpoints

remoteauthreachableuptime 30dp50protocollast ok
https://www.doubleaigents.com/api/mcp streamable-httpnoneyes100%333 ms2026-07-28, 2025-11-25, 2025-06-18, 2025-03-262026-10-20

Tools (10)

ai_tool_checkread-onlyScreens a planned use of an AI tool: whether a DPIA is likely to be required (Art. 35(3), the ICO high-risk list, the WP248 criteria; FADP Art. 22 for Switzerland), EU AI Act risk flags (Annex III high-risk areas, especially employment; Art. 5 prohibited practices such as emotion recognition at work; current application dates after the Digital Omnibus), and automated decision rules (GDPR Art. 22, UK GDPR Arts 22A to 22D). Findings with sources. The use_case text is not stored or returned. General information, not legal advice.
breach_clockread-onlyWhen a personal data breach must be notified to the regulator: 72 hours from awareness in the UK and EU/EEA (Art. 33), "as soon as possible" in Switzerland (revised FADP Art. 24). Gives the deadline, the rule, the processor and individual-notification position, and the facts the regulator will ask for. The controller decides whether to notify. General information, not legal advice.
breach_triageread-onlyA likely-reportability view on a personal data breach (UK, EU/EEA, Switzerland), following the ICO guide "Personal data breaches: a guide" and EDPB Guidelines 9/2022: whether notifying the regulator and telling the people affected is likely or unlikely to be required, the factors behind that view, and the notification deadline. The controller decides. General information, not legal advice. Do not pass names or other personal data.
dsar_deadlineread-onlyCalculate the statutory deadline for answering a data subject access request in the UK, the EU/EEA or Switzerland, with the rule that applies and the extension position. General information, not legal advice.
dsar_letter_templateread-onlyPlain-text letter template, in British English with [placeholders], for an acknowledgement, an extension of time or a request for clarification of a data subject access request, under UK, EU/EEA or Swiss law. Fills in the dates if received_date is given. General information, not legal advice.
dsar_quoteread-onlyFixed price from Double AIgents for preparing a DSAR response, by pack size in pages after de-duplication. Also gives the retainer price (15% off). Excludes VAT.
dsar_request_scopingread-onlyExplains how to start free scoping and returns a prefilled email (mailto URL) to [email protected]. Sends nothing and stores nothing. Do not pass the requester's personal data or the request letter.
dsar_search_checklistread-onlyWhere to search when answering a subject access request, especially from an employee: Microsoft 365 (Exchange and archives, shared mailboxes, Teams, OneDrive, SharePoint), other collaboration tools, HR, payroll, recruitment, CCTV, access logs, devices, line manager notes, paper files, occupational health and backups; search-term tips; and the search standard (UK GDPR Art. 15(1A) reasonable and proportionate searches). General information, not legal advice.
dsar_service_inforead-onlyWhat the Double AIgents DSAR service covers: scoping, collection guidance, de-duplication, redaction, exemption recommendations, two independent reviews, secure delivery, data handling, jurisdictions and partner arrangements.
hr_retentionread-onlyRecommended retention period for a common UK HR record, whether it is statutory or only recommended, and the source (HMRC, Home Office, RIDDOR 2013, Working Time Regulations, Limitation Act 1980, ICO, DBS). UK only for now. General information, not legal advice.

Schemas: list_tools.

Similar MCP servers

Official server.json
{
  "name": "com.doubleaigents.www/dsar",
  "title": "Double AIgents DSAR service",
  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
  "remotes": [
    {
      "url": "https://www.doubleaigents.com/api/mcp",
      "type": "streamable-http"
    }
  ],
  "version": "1.2.0",
  "repository": {
    "url": "https://github.com/JimmyBoy-Git/doubleaigents-dsar-mcp",
    "source": "github"
  },
  "websiteUrl": "https://www.doubleaigents.com/#sar",
  "description": "GDPR DSAR deadlines, breach triage, AI tool checks, HR retention and letters (UK/EU/CH)"
}