English Français العربية

GDPR Scanner API

Official registry Security

Scan website GDPR compliance: consent, privacy policy, trackers. Score 0-100. x402.

Source code Website Documentation

Install

Add this to your client's MCP configuration (Claude Desktop: claude_desktop_config.json; Cursor: .cursor/mcp.json; VS Code and others use the same "mcpServers" shape).

Remote (sse)
Claude Code 
claude mcp add --transport sse gdpr-scanner-api 'https://gdpr-scanner.api.klymax402.com/mcp'
JSON configuration (Claude Desktop, Cursor, VS Code) 
{
    "mcpServers": {
        "gdpr-scanner-api": {
            "type": "sse",
            "url": "https://gdpr-scanner.api.klymax402.com/mcp"
        }
    }
}

Documentation

From the project's README on GitHub, refreshed weekly. Links open on GitHub.

Contents
  1. GDPR Scanner API
  2. Quickstart -- MCP
  3. Quickstart -- HTTP (x402)
  4. Tools
  5. Example agent prompts
  6. Payment
  7. Part of klymax402
  8. License

GDPR Scanner API

Scan any website for GDPR compliance -- cookie consent, privacy policy, trackers, DPO contact. Score 0-100. Pay-per-call via x402 (USDC on Base L2) -- no API key, no signup, no rate-limit wall.

Part of the klymax402 marketplace -- 100 x402 micropayment APIs for AI agents, one wallet, USDC on Base.

Quickstart -- MCP

Add to your MCP client config (Claude Desktop, Cursor, ElizaOS, etc.):

{
  "mcpServers": {
    "gdpr-scanner": {
      "url": "https://gdpr-scanner.api.klymax402.com/mcp"
    }
  }
}

Quickstart -- HTTP (x402)

curl "https://gdpr-scanner.api.klymax402.com/api/scan?url=https://example.com"
# -> 402 Payment Required, with an x402 payment challenge in the response body

Any x402-aware client (@x402/fetch, x402-agent-tools, ATXP) handles the 402 -> sign -> retry cycle automatically.

Tools

ToolMethodPathPriceDescription
compliance_scan_gdprGET/api/scan$0.03Scan a website for GDPR compliance — cookie consent, privacy policy, trackers
compliance_scan_gdprPOST/api/scan$0.03Scan a website for GDPR compliance — cookie consent, privacy policy, trackers (POST variant)
compliance_scan_gdpr

Use this when you need to check a website's GDPR compliance. Scans the URL plus /privacy-policy and /cookie-policy pages. Returns a compliance report in JSON.

Parameters

NameTypeRequiredDescription
urlstringyesWebsite URL to scan for GDPR compliance (e.g. https://example.com)

Example response:

{"url":"https://example.com","complianceScore":72,"cookieConsent":{"detected":true,"type":"banner"},"privacyPolicy":{"found":true,"url":"/privacy"},"thirdPartyTrackers":["Google Analytics","Facebook Pixel"],"recommendations":["Add DPO contact info","Add data retention policy"]}

When to use: launching a website in the EU, FOR compliance audits, due diligence on acquisitions, and regular privacy monitoring.

Not for: PII in text (use compliance_detect_pii), tech detection (use website_detect_tech_stack), HTTP security headers (use network_analyze_headers).

compliance_scan_gdpr

Use this when you need to check a website's GDPR compliance. Scans the URL plus /privacy-policy and /cookie-policy pages. Returns a compliance report in JSON. POST variant of compliance_scan_gdpr -- same params passed as JSON body instead of query string.

Parameters

NameTypeRequiredDescription
urlstringyesWebsite URL to scan for GDPR compliance (e.g. https://example.com)

Example response:

{"url":"https://example.com","complianceScore":72,"cookieConsent":{"detected":true,"type":"banner"},"privacyPolicy":{"found":true,"url":"/privacy"},"thirdPartyTrackers":["Google Analytics","Facebook Pixel"],"recommendations":["Add DPO contact info","Add data retention policy"]}

When to use: launching a website in the EU, FOR compliance audits, due diligence on acquisitions, and regular privacy monitoring.

Not for: PII in text (use compliance_detect_pii), tech detection (use website_detect_tech_stack), HTTP security headers (use network_analyze_headers).

Example agent prompts

  • "Check a website's GDPR compliance"
  • "Check a website's GDPR compliance"

Payment

  • Protocol: x402 -- HTTP-native pay-per-call, no signup, no API key
  • Network: Base L2 (eip155:8453)
  • Asset: USDC
  • Facilitator: Coinbase CDP (primary), PayAI (fallback)

Part of klymax402

100 x402 micropayment APIs for AI agents -- one wallet, USDC on Base, zero signup.

License

MIT

Frequently asked questions

What is GDPR Scanner API?

Scan website GDPR compliance: consent, privacy policy, trackers. Score 0-100. x402.

How do I install GDPR Scanner API?

It runs as a remote server. In Claude Code: claude mcp add --transport sse gdpr-scanner-api 'https://gdpr-scanner.api.klymax402.com/mcp'. For other clients, paste the JSON configuration from this page into their MCP settings.

Does GDPR Scanner API need an API key?

Its registry entry lists no required key or secret. Some features may still need an account with the service it connects to.

Is GDPR Scanner API open source?

Yes. Its code is on GitHub under the MIT license.

Who maintains GDPR Scanner API?

It is published by Br0ski777. AI.tn lists it but does not maintain or endorse it.

From the official MCP Registry. Listing is not an endorsement: review a server's code and permissions before giving it access to your data.