# REP27 — EU & UK legal representative

> Check EU/UK GDPR Art. 27 and GPSR Art. 16 obligations, see plans, start a free trial

- name: com.gdprrepresentative/rep27
- version: 1.0.0
- connection class: R0 (autonomous)
- trust: 83/100 flags: no-repository
- quality: 85/100 (new)
- owner: not claimed
- descriptor: https://api.protogrid.dev/v1/servers/com.gdprrepresentative%2Frep27
- tools: https://api.protogrid.dev/v1/servers/com.gdprrepresentative%2Frep27/tools

**An agent can connect right now, no human step.** Remote endpoint, no authentication, reachable on the last probe.

## Connection (mcpServers)

```json
{
  "mcpServers": {
    "rep27": {
      "type": "http",
      "url": "https://gdprrepresentative.com/mcp-claude"
    }
  }
}
```


## Trust

- hygiene: 80
- liveness: 100
- freshness: 100
- provenance: 55
- drivers: +dns-namespace +website +reachable +uptime-100% +updated-5d-ago -no-repository
- Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed.

## Quality 85/100 (new)

### protocol: 75 (weight 25)

- warn `protocol.modern`: newest supported version is 2025-11-25; 2026-07-28 not supported, older versions are deprecated until 2027-07-28
- n/a `protocol.stateless`: only applies to 2026-07-28 servers
- pass `protocol.transport`: streamable HTTP
- n/a `protocol.list_ttl`: only applies to 2026-07-28 servers

### authorization: n/a (weight 15)

- n/a `auth.prm`, `auth.as_metadata`, `auth.cimd`: no remote uses OAuth
- n/a `auth.secret_in_url`: no templated URL

### tool hygiene: 93 (weight 30)

- pass `tools.descriptions`: every tool has a description
- pass `tools.description_length`: descriptions are concise
- pass `tools.schemas`: every tool has an object input schema
- pass `tools.annotations`: 6 of 6 tools declare readOnlyHint or destructiveHint
- warn `tools.directory_hints`: 2 of 6 tools declare all four hints; missing: about_rep27 (idempotentHint); find_product_category (idempotentHint); check_obligations (idempotentHint); …
- pass `tools.token_cost`: about 2,226 tokens to load every tool
- pass `tools.api_dump`: tools are not a one-to-one API dump

### stability: n/a (weight 15)

- n/a `stability.changes`, `stability.rug_pull`: tool history recorded for 4 of the 7 days needed

### dependencies: n/a (weight 15)

- n/a `deps.known_vulns`, `deps.mcp_sdk_version`, `deps.resolvable`: no npm or PyPI package

- tools: 6, about 2,226 tokens to load them all
- tool set hash: 98fed24c257a3df1e07c299c439e6057
- badge: [![protogrid quality](https://protogrid.dev/badge/com.gdprrepresentative/rep27.svg)](https://protogrid.dev/servers/com.gdprrepresentative/rep27)
- Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed.

### Tool changes

_No tool definition changes recorded._

## Remotes

- https://gdprrepresentative.com/mcp-claude (streamable-http, auth none, reachable true, uptime30d 1)

## Packages

_none_

## Tools (6)

- `about_rep27`: Who provides the REP27 service, legal entities, contacts, terms and verification.
- `check_obligations`: Checks, from a few facts about the company, whether it legally needs an EU GDPR Art. 27 representative, a UK GDPR Art. 27 representative and/or a GPSR Art. 16 EU responsible person, explains why with the legal basis and lists exemptions. Recommends the cheapest REP27 combination. Returns result_url, a personal page with the result.
- `create_checkout`: Creates the secure Mollie checkout for the chosen REP27 plan with the buyer's company, country, contact name and email, and returns the payment link. Payment happens on Mollie's page, never in the chat.
- `find_product_category`: Searches REP27's product-category catalogue (toys, cosmetics, electronics, pet products, connected devices…) and returns, for the best matches, the EU legal figure required (responsible person, authorised representative, Art. 4 economic operator, GDPR representative) and the REP27 service.
- `get_plans`: Returns REP27 plans with first-year price, renewal price and what each includes, for the GDPR Art. 27 representative (territory eu, uk or both) or the GPSR Art. 16 responsible person. Includes free-trial and cancellation terms.
- `start_free_trial`: Starts the REP27 7-day free trial (no card) for the given contact name, work email, company and country. The user receives an email to continue.