GDPR Shift-Left Compliance
This brings GDPR compliance tooling directly into your IDE through 34 MCP tools that cover article lookup, DPIA assessments, ROPA generation, and data subject rights workflows. The standout feature is infrastructure analysis: point it at Bicep, Terraform, or ARM templates and it scans for encryption gaps, cross-border transfer risks, and retention policy violations. It also includes AST-based code analysis for six languages to catch PII logging and missing consent checks, plus 19 production-ready Azure Bicep templates with built-in compliance controls for storage accounts, Key Vault, AKS, and more. Useful when you need to shift compliance checks left into development rather than discovering issues at audit time.
- GitHub stars
- 2
- tools
- 34
- transport
- STDIO
- last updated
- Feb 11, 2026
Tools
34 toolsPublic tool metadata for what this MCP can expose to an agent.
get_articleRetrieve a GDPR article by number
Retrieve a GDPR article by number
No parameter schema in public metadata yet.
list_chapter_articlesList all articles in a chapter
List all articles in a chapter
No parameter schema in public metadata yet.
search_gdprFull-text search across GDPR
Full-text search across GDPR
No parameter schema in public metadata yet.
get_recitalRetrieve a recital by number
Retrieve a recital by number
No parameter schema in public metadata yet.
get_azure_mappingAzure services for a GDPR article
Azure services for a GDPR article
No parameter schema in public metadata yet.
get_definitionArt. 4 term definition
Art. 4 term definition
No parameter schema in public metadata yet.
list_definitionsList all definitions
List all definitions
No parameter schema in public metadata yet.
search_definitionsSearch definitions
Search definitions
No parameter schema in public metadata yet.
assess_dpia_needCheck if DPIA is required
Check if DPIA is required
No parameter schema in public metadata yet.
generate_dpia_templateGenerate DPIA document
Generate DPIA document
No parameter schema in public metadata yet.
get_dpia_guidanceDPIA area guidance
DPIA area guidance
No parameter schema in public metadata yet.
generate_ropa_templateArt. 30 ROPA template
Art. 30 ROPA template
No parameter schema in public metadata yet.
validate_ropaValidate ROPA completeness
Validate ROPA completeness
No parameter schema in public metadata yet.
get_ropa_requirementsROPA field requirements
ROPA field requirements
No parameter schema in public metadata yet.
get_dsr_guidanceDSR handling guidance
DSR handling guidance
No parameter schema in public metadata yet.
generate_dsr_workflowDSR fulfilment workflow
DSR fulfilment workflow
No parameter schema in public metadata yet.
get_dsr_timelineDSR response timelines
DSR response timelines
No parameter schema in public metadata yet.
analyze_infrastructure_codeScan IaC for GDPR issues
Scan IaC for GDPR issues
No parameter schema in public metadata yet.
analyze_application_codeScan app code for GDPR issues
Scan app code for GDPR issues
No parameter schema in public metadata yet.
validate_gdpr_configPass/fail GDPR validation
Pass/fail GDPR validation
No parameter schema in public metadata yet.
assess_retention_policyAssess retention policy
Assess retention policy
No parameter schema in public metadata yet.
get_retention_guidanceCategory-specific retention
Category-specific retention
No parameter schema in public metadata yet.
check_deletion_requirementsDeletion capability checklist
Deletion capability checklist
No parameter schema in public metadata yet.
assess_controller_processor_roleAssess data controller/processor role
Assess data controller/processor role
No parameter schema in public metadata yet.
get_role_obligationsRole-specific GDPR obligations
Role-specific GDPR obligations
No parameter schema in public metadata yet.
analyze_code_for_role_indicatorsDetect controller/processor code patterns
Detect controller/processor code patterns
No parameter schema in public metadata yet.
generate_dpa_checklistArt. 28 DPA agreement checklist
Art. 28 DPA agreement checklist
No parameter schema in public metadata yet.
get_role_scenariosCommon role classification scenarios
Common role classification scenarios
No parameter schema in public metadata yet.
analyze_dsr_capabilitiesDetect DSR implementation (access, erase, portability, etc.)
Detect DSR implementation (access, erase, portability, etc.)
No parameter schema in public metadata yet.
analyze_cross_border_transfersDetect third-party APIs/SDKs with risk justifications
Detect third-party APIs/SDKs with risk justifications
No parameter schema in public metadata yet.
analyze_breach_readinessAssess breach detection, logging, and notification capabilities
Assess breach detection, logging, and notification capabilities
No parameter schema in public metadata yet.
analyze_data_flowMap personal data lifecycle (collection, storage, transmission, deletion)
Map personal data lifecycle (collection, storage, transmission, deletion)
No parameter schema in public metadata yet.
analyze_code_astDeep AST analysis for Python/JS/TS/Java/C#/Go (PII, cross-border, DSR)
Deep AST analysis for Python/JS/TS/Java/C#/Go (PII, cross-border, DSR)
No parameter schema in public metadata yet.
get_ast_capabilitiesGet AST analyzer supported languages and features
Get AST analyzer supported languages and features
No parameter schema in public metadata yet.
Sponsors
Agent CaffeineSponsoredClose your lid, come back to finished work
SnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthly
WaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthly
knobsSponsoredSee your site on any phone, any day, in any languageReadme
GDPR Shift-Left MCP Server
A Model Context Protocol (MCP) server that brings GDPR compliance knowledge directly into your IDE, enabling developers and compliance teams to "shift left" — identifying and addressing data protection requirements early in the development lifecycle.
⚠️ Disclaimer: This tool provides informational guidance only and does not constitute legal advice. Organisations should consult qualified legal counsel for binding GDPR compliance decisions.
Features
Details
- Repository
- github.com/kevinrabun/gdprshiftleftmcp
- Package
gdpr-shift-left-mcp- Transport
- STDIO
- Registry
- MCP registry, active