com.doubleaigents.www由 www.doubleaigents.com 发布官方发布者v1.2.0更新于 Oct 25, 2026
GDPR DSAR deadlines, breach triage, AI tool checks, HR retention and letters (UK/EU/CH)
一个公开、只读的 MCP 服务器，为助手提供英国、欧盟/欧洲经济区和瑞士的数据保护参考工具，涵盖 DSAR、数据泄露、AI 工具审查和人力资源留存
Web executable，通过 Streamable HTTP。 远程服务在工作区中配置后即可从网页运行时运行。
把这段提示词粘贴到 Claude Code、Codex、Cursor 等智能体，或 SourceWeft 对话中。智能体会读取该服务器的安装指南，先向你展示发布者、端点和登录方式，经你同意后再把它添加到你的客户端。密钥不会写进任何命令。
阅读 https://sourceweft.com/mcp/com.doubleaigents.www%2Fdsar/install.md，并按其中说明把这个 MCP 服务器接入我的客户端。修改任何配置之前，先告诉我它的发布者、端点和登录方式，等我确认。不要把 API 密钥写进命令或我会提交的文件；问我密钥应从哪里获取。把它添加到你客户端的 mcpServers 配置中。
{
"mcpServers": {
"double-aigents-dsar-service": {
"type": "http",
"url": "https://www.doubleaigents.com/api/mcp"
}
}
}A public, read-only MCP server for GDPR subject access requests (DSARs) and personal data breaches, for the UK, the EU and Switzerland.
Endpoint (Streamable HTTP, no auth, no key): https://www.doubleaigents.com/api/mcp
Official MCP registry: com.doubleaigents.www/dsar
General information, not legal advice. The controller decides.
Claude Code:
Any MCP client that supports Streamable HTTP: point it at the endpoint above.
Stateless. No storage, no accounts. Usage is counted as one log line per call (time, method, tool name, success); no arguments, IP addresses or user agents are logged.
api/mcp.ts (the Vercel serverless function) and src/lib/dpTools.ts (the shared rules, also used by the free tools page at https://www.doubleaigents.com/free-tools) are mirrored from our site. No dependencies.
Double AIgents Ltd, registered in England and Wales, company no. 17513072, ICO registration ZC272947. Contact: [email protected].
MIT licence.
来源：README.md，提交 f63a642
DSAR response deadline
Calculate the statutory deadline for answering a data subject access request in the UK, the EU/EEA or Switzerland, with the rule that applies and the extension position. General information, not legal advice.
extendedjurisdiction必填received_date必填DSAR fixed-price quote
Fixed price from Double AIgents for preparing a DSAR response, by pack size in pages after de-duplication. Also gives the retainer price (15% off). Excludes VAT.
pages必填currencyDSAR service information
What the Double AIgents DSAR service covers: scoping, collection guidance, de-duplication, redaction, exemption recommendations, two independent reviews, secure delivery, data handling, jurisdictions and partner arrangements.
无需输入参数。
Start DSAR scoping
Explains how to start free scoping and returns a prefilled email (mailto URL) to [email protected]. Sends nothing and stores nothing. Do not pass the requester's personal data or the request letter.
contact_name必填jurisdiction必填organisation必填approx_volumecontact_email必填date_received必填Personal data breach notification clock
When a personal data breach must be notified to the regulator: 72 hours from awareness in the UK and EU/EEA (Art. 33), "as soon as possible" in Switzerland (revised FADP Art. 24). Gives the deadline, the rule, the processor and individual-notification position, and the facts the regulator will ask for. The controller decides whether to notify. General information, not legal advice.
aware_at必填jurisdiction必填DSAR letter template
Plain-text letter template, in British English with [placeholders], for an acknowledgement, an extension of time or a request for clarification of a data subject access request, under UK, EU/EEA or Swiss law. Fills in the dates if received_date is given. General information, not legal advice.
kind必填due_datejurisdiction必填received_datePersonal data breach triage
A likely-reportability view on a personal data breach (UK, EU/EEA, Switzerland), following the ICO guide "Personal data breaches: a guide" and EDPB Guidelines 9/2022: whether notifying the regulator and telling the people affected is likely or unlikely to be required, the factors behind that view, and the notification deadline. The controller decides. General information, not legal advice. Do not pass names or other personal data.
aware_at必填encrypted必填recipient必填recoverable必填jurisdiction必填people_affected必填special_category必填AI tool check: DPIA and EU AI Act screening
Screens a planned use of an AI tool: whether a DPIA is likely to be required (Art. 35(3), the ICO high-risk list, the WP248 criteria; FADP Art. 22 for Switzerland), EU AI Act risk flags (Annex III high-risk areas, especially employment; Art. 5 prohibited practices such as emotion recognition at work; current application dates after the Digital Omnibus), and automated decision rules (GDPR Art. 22, UK GDPR Arts 22A to 22D). Findings with sources. The use_case text is not stored or returned. General information, not legal advice.
use_case必填large_scale必填jurisdiction必填new_technology必填special_category必填employees_or_candidates必填processes_personal_data必填automated_decisions_with_significant_effect必填HR record retention periods (UK)
Recommended retention period for a common UK HR record, whether it is statutory or only recommended, and the source (HMRC, Home Office, RIDDOR 2013, Working Time Regulations, Limitation Act 1980, ICO, DBS). UK only for now. General information, not legal advice.
record_type必填jurisdictionDSAR search checklist
Where to search when answering a subject access request, especially from an employee: Microsoft 365 (Exchange and archives, shared mailboxes, Teams, OneDrive, SharePoint), other collaboration tools, HR, payroll, recruitment, CCTV, access logs, devices, line manager notes, paper files, occupational health and backups; search-term tips; and the search standard (UK GDPR Art. 15(1A) reasonable and proportionate searches). General information, not legal advice.
organisation_type必填已满足适用检查项的 100%
该评分衡量此收录条目的完整程度，依据注册中心条目、端点与公开来源计算得出。它不是对服务器本身的评价，也不表示服务器安全或当前可用：可连通性是带日期的检查结果，评分也不包含安装量或用户评价。
claude mcp add --transport http doubleaigents-dsar https://www.doubleaigents.com/api/mcp