Compliance Checker

io.github.GuardBeePublished by GitHub account GuardBeev0.4.1Updated Nov 3, 2026

KVKK/GDPR/CCPA compliance checks for codebases

VerifiedSTDIODesktop onlyWeb Search & ScrapingSecurity & Monitoring

Overview

AI-generated overview

Runs KVKK, GDPR and CCPA compliance scans on URLs via the GuardBee API, analyzes privacy policies, and compares legal requirements.

What you can do
  • Run a full compliance scan for a URL against KVKK, GDPR or CCPA and get a gap analysis and action plan
  • Fetch findings from a completed scan, filtered by framework or severity
  • Fetch and score a privacy policy page against ten compliance signals, with a grade
  • List the legal requirements and article references for each framework
  • Compare KVKK, GDPR and CCPA requirements side by side
When to use it
Useful when you need a quick privacy or data-protection check of a website or its privacy policy, or want to see how KVKK, GDPR and CCPA requirements differ. The requirement catalog and framework comparison work without any account.
Requirements
Runs locally as an npm package over stdio (Node.js). A GuardBee API key in GUARDBEE_API_KEY is required for the scan and findings tools; the other three tools work without one. GUARDBEE_BASE_URL can point at a custom endpoint. Network access to the GuardBee service is needed.
Before you install
The scan and findings tools send the target URL to the GuardBee API and require a GuardBee API key; the privacy policy tool fetches the given URL. Telemetry is off by default but, when enabled with GUARDBEE_TELEMETRY=1, sends tool names, success, duration and short parameter values such as file paths to a telemetry package. Results are automated signals, not legal advice.

Installation

In SourceWeft

  1. Open Compliance Checker in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.

Other MCP clients

Follow the launch instructions in the repository.

README

@guardbee/mcp-compliance-checker

🇬🇧 English | 🇹🇷 Türkçe | 🇨🇳 中文 | 🇯🇵 日本語 | 🇰🇷 한국어 | 🇧🇷 Português | 🇪🇸 Español | 🇩🇪 Deutsch

[npm version] [npm downloads] [License: MIT]

An MCP server that runs KVKK (Turkish data protection law), GDPR, and CCPA compliance checks via the GuardBee API, analyzes privacy policies, and compares legal requirements. Three of its tools work without an API key.

Telemetry is off by default. With GUARDBEE_TELEMETRY=1 it sends the server, tool, success, duration and short parameter values such as a file path; longer strings and fields like content, token or password are replaced with a placeholder. See @guardbee/mcp-telemetry.

A GuardBee API key is required for the check_compliance and get_compliance_findings tools. Get one at app.guardbee.ai/developers.

Features

  • KVKK / GDPR / CCPA Scanning — triggers a compliance-focused scan via the GuardBee API and fetches findings
  • Privacy Policy Analysis — fetches policy text from a URL; 10 compliance signals, a score (0-100), and a letter grade
  • Cookie Banner Detection — detects OneTrust, Cookiebot, Axeptio, and 10+ CMP platforms
  • Requirements Catalog — 21 requirements with legal-article references across KVKK (9), GDPR (8), CCPA (4)
  • Framework Comparison — common and differing articles across KVKK / GDPR / CCPA
  • Key-Free Tools — analyze_privacy_policy, list_requirements, compare_frameworks work offline

Quick Start

bash
npm install -g @guardbee/mcp-compliance-checker

Add to claude_desktop_config.json:

json
{  "mcpServers": {    "guardbee-compliance-checker": {      "command": "npx",      "args": ["-y", "@guardbee/mcp-compliance-checker"],      "env": {        "GUARDBEE_API_KEY": "gb_..."      }    }  }}

Get your API key at app.guardbee.ai/developers.

MCP Tools

ToolAPI KeyDescription
check_complianceRequiredStarts a compliance scan (KVKK/GDPR/CCPA) for a URL
get_compliance_findingsRequiredFetches scan findings, filterable by framework and severity
analyze_privacy_policyNoAnalyzes a privacy policy URL — score, grade, missing clauses
list_requirementsNoLists legal requirements for supported frameworks
compare_frameworksNoCompares similarities and differences across KVKK, GDPR, and CCPA

Example Usage

You can ask Claude:

"Check example.com's KVKK compliance"

"List GDPR requirements"

"Compare the differences between KVKK and GDPR"

"Analyze the privacy policy at https://example.com/privacy"

Example Output

Privacy Policy Analysis: https://example.com/privacy──────────────────────────────────────────────────────Score : 72/100  Grade: C
✅ Data controller identity disclosed✅ Purpose of processing stated✅ Retention periods mentioned✅ Cookie policy present❌ Legal basis for processing not stated❌ Data subject rights not listed (access, erasure, portability)❌ International transfer safeguards missing❌ Contact information for DPO missing
Recommendation: Add legal basis statements and data subject rights section.

Supported Frameworks

FrameworkRequirement CountScan Scenario
KVKK9kvkkFocus
GDPR8gdprFocus
CCPA4ccpaFocus

Privacy Policy Scoring

The analyze_privacy_policy tool looks for 10 signals in the policy text:

SignalDescription
Data controller identityCompany/organization name is stated
Purpose of processingWhy the personal data is being collected
Legal basisReference to GDPR Art. 6 / KVKK Art. 5
Retention periodsHow long the data will be kept
Data subject rightsAccess, erasure, portability, objection
Contact / DPOHow to reach the data controller
Cookie policyCookies and tracking technologies
Third-party sharingParties the data is shared with
Security measuresTechnical/administrative safeguards
International transferCross-border transfer safeguards

Grades: A (90-100) · B (75-89) · C (60-74) · D (45-59) · F (0-44)

Environment Variables

VariableDescription
GUARDBEE_API_KEYGuardBee API key (required for check_compliance and get_compliance_findings)
GUARDBEE_BASE_URLCustom endpoint (default: https://app.guardbee.ai)

Development

bash
npm installnpm test          # unit testsnpm run build     # TypeScript compile

License

MIT — GuardBee

Feedback

Questions, ideas, or a false positive? Start a thread in GitHub Discussions or open an issue. If GuardBee is useful to you, a ⭐ on the repository helps others find it.

Source: packages/compliance-checker/README.md at commit bc5997d

Tools

5

check_compliance

Run a full compliance scan for a URL against a regulatory framework (KVKK, GDPR, or CCPA) using the GuardBee scanner. Returns a gap analysis and action plan.

Parametersurlrequiredwaitframeworkrequired

get_compliance_findings

Get compliance findings from a completed GuardBee scan, optionally filtered by severity

ParametersscanIdrequiredseverityframework

analyze_privacy_policy

Fetch and analyze a privacy policy page for completeness against GDPR/KVKK requirements. Works without an API key.

Parametersurlrequired

list_requirements

List all compliance requirements for a framework with legal basis references

Parametersseverityframeworkrequired

compare_frameworks

Compare KVKK, GDPR, and CCPA requirements side by side to understand overlaps and gaps

Takes no parameters.

Version history

3
  1. v0.4.1LatestOct 30, 2026
  2. v0.3.2Oct 22, 2026
  3. v0.2.5Oct 13, 2026

Score

90% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 days25 pts
  • Auth declared10 pts

    Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.

  • Tools listedRequired15 pts
  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts