Double AIgents DSAR service
GDPR DSAR deadlines, breach triage, AI tool checks, HR retention and letters (UK/EU/CH)
Install
Add this to your client's MCP configuration (Claude Desktop: claude_desktop_config.json; Cursor: .cursor/mcp.json; VS Code and others use the same "mcpServers" shape).
claude mcp add --transport http double-aigents-dsar-service 'https://www.doubleaigents.com/api/mcp'
{
"mcpServers": {
"double-aigents-dsar-service": {
"type": "http",
"url": "https://www.doubleaigents.com/api/mcp"
}
}
}
Documentation
From the project's README on GitHub, refreshed weekly. Links open on GitHub.
Double AIgents DSAR MCP server
A public, read-only MCP server for GDPR subject access requests (DSARs) and personal data breaches, for the UK, the EU and Switzerland.
Endpoint (Streamable HTTP, no auth, no key): https://www.doubleaigents.com/api/mcp
Official MCP registry: com.doubleaigents.www/dsar
Tools
| Tool | What it does |
|---|---|
dsar_deadline | Due date for a subject access request (UK GDPR Art 12A, EU GDPR Art 12(3), Swiss revFADP), with extension rules |
breach_clock | 72-hour breach notification deadline (UK/EU Art 33), to the hour; Swiss rule |
dsar_letter_template | Acknowledgement, extension and clarification letters, UK/EU/CH wording |
dsar_quote | Fixed price for an outsourced DSAR by page count (GBP/EUR/CHF) |
dsar_service_info | What the Double AIgents DSAR service covers |
dsar_request_scoping | How to start a request (returns a mailto link; stores nothing) |
breach_triage | Likely reportability of a breach (unlikely / borderline / likely / high risk), with reasons and the 72-hour deadline |
ai_tool_check | DPIA screening and EU AI Act risk flags for an AI tool, with sources |
hr_retention | How long to keep 14 common UK HR records, with the legal source |
dsar_search_checklist | Where to search for an employee DSAR |
General information, not legal advice. The controller decides.
Use it
Claude Code:
claude mcp add --transport http doubleaigents-dsar https://www.doubleaigents.com/api/mcp
Any MCP client that supports Streamable HTTP: point it at the endpoint above.
Privacy
Stateless. No storage, no accounts. Usage is counted as one log line per call (time, method, tool name, success); no arguments, IP addresses or user agents are logged.
Code
api/mcp.ts (the Vercel serverless function) and src/lib/dpTools.ts (the shared rules, also used by the free tools page at https://www.doubleaigents.com/free-tools) are mirrored from our site. No dependencies.
About
Double AIgents Ltd, registered in England and Wales, company no. 17513072, ICO registration ZC272947. Contact: james@doubleaigents.com.
MIT licence.
Frequently asked questions
What is Double AIgents DSAR service?
GDPR DSAR deadlines, breach triage, AI tool checks, HR retention and letters (UK/EU/CH)
How do I install Double AIgents DSAR service?
It runs as a remote server. In Claude Code: claude mcp add --transport http double-aigents-dsar-service 'https://www.doubleaigents.com/api/mcp'. For other clients, paste the JSON configuration from this page into their MCP settings.
Does Double AIgents DSAR service need an API key?
Its registry entry lists no required key or secret. Some features may still need an account with the service it connects to.
Is Double AIgents DSAR service open source?
Yes. Its code is on GitHub under the MIT license.
Who maintains Double AIgents DSAR service?
It is published by JimmyBoy-Git. AI.tn lists it but does not maintain or endorse it.
From the official MCP Registry. Listing is not an endorsement: review a server's code and permissions before giving it access to your data.