Privacy

io.github.thegridworkPublished by GitHub account thegridworkv1.0.0Updated Oct 24, 2026

Audit websites for GDPR, CCPA, and ePrivacy compliance — trackers, consent, and policies.

VerifiedSTDIODesktop onlyWeb Search & ScrapingSecurity & Monitoring

Overview

AI-generated overview

Audits websites for GDPR, CCPA, and ePrivacy compliance, covering trackers, cookie consent, and privacy policies.

What you can do
Runs privacy audits on websites and reports on third-party trackers, cookie consent mechanisms, privacy policy disclosures, and data collection forms. Tools include audit_privacy for a full audit, scan_trackers for quick tracker detection with GDPR concern levels, check_consent for consent mechanism checks, and compare_privacy for side-by-side comparison of two sites. Findings are mapped to specific regulatory articles.
When to use it
Useful when reviewing a site's privacy posture, checking whether trackers and consent flows meet GDPR, CCPA, or ePrivacy expectations, or comparing two sites' privacy practices before adopting or partnering with them.
Requirements
Runs locally as a stdio process via npx from the npm package gridwork-privacy; Node.js is required. No accounts, API keys, environment variables, or headers are declared. Network access is needed to reach the sites being audited.
Before you install
The server inspects third-party websites, so the URLs you submit are sent to those sites from your machine; only audit sites you are authorized to test. No credentials or payment details are requested.

Installation

In SourceWeft

  1. Open Privacy in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.

Other MCP clients

Follow the launch instructions in the repository.

README

gridwork-privacy

MCP server that audits websites for GDPR, CCPA, and ePrivacy compliance.

What it does

  • Detects 30+ third-party trackers (Google Analytics, Facebook Pixel, TikTok, Criteo, etc.)
  • Analyzes cookie consent mechanisms (CMP detection, reject options, pre-checked boxes)
  • Checks privacy policy presence and required disclosures
  • Reviews data collection forms for sensitive fields
  • Classifies each tracker's GDPR concern level
  • Identifies specific regulatory articles for each finding

Install

bash
npx gridwork-privacy

MCP tools

ToolDescription
audit_privacyFull privacy audit — trackers, consent, policy, data collection
scan_trackersQuick tracker detection with GDPR concerns
check_consentCookie consent mechanism compliance check
compare_privacySide-by-side privacy comparison of two sites

Claude Desktop config

json
{  "mcpServers": {    "gridwork-privacy": {      "command": "npx",      "args": ["-y", "gridwork-privacy"]    }  }}

License

MIT — Gridwork

Source: README.md at commit 5cbd9b6

Tools

0
SourceWeft has not started this package in its sandbox yet, so its tools are not known.

Version history

1
  1. v1.0.0LatestSep 16, 2026

Score

40% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 days25 pts

    Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.

  • Auth declared10 pts

    Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.

  • Tools listed15 pts

    Answer tools/list without a credential, or ship a package that starts in a sandbox without one.

  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts

    Declare a license in the repository or the registry entry.