com.doubleaigents.www由 www.doubleaigents.com 發布官方發布者v1.2.0更新於 Oct 25, 2026
GDPR DSAR deadlines, breach triage, AI tool checks, HR retention and letters (UK/EU/CH)
公開、唯讀的 MCP 伺服器，為助理提供英國、歐盟/歐洲經濟區與瑞士的資料保護參考工具，涵蓋 DSAR、資料外洩、AI 工具審查與人資留存
Web executable，透過 Streamable HTTP。 遠端服務在工作區中設定後即可從網頁執行環境執行。
把這段提示詞貼上到 Claude Code、Codex、Cursor 等代理程式，或 SourceWeft 對話中。代理程式會讀取該伺服器的安裝指南，先向你展示發布者、端點和登入方式，經你同意後再把它新增到你的客戶端。金鑰不會寫進任何命令。
閱讀 https://sourceweft.com/mcp/com.doubleaigents.www%2Fdsar/install.md，並按其中說明把這個 MCP 伺服器接入我的客戶端。修改任何設定之前，先告訴我它的發布者、端點和登入方式，等我確認。不要把 API 金鑰寫進命令或我會提交的檔案；問我金鑰應從哪裡取得。把它新增到你客戶端的 mcpServers 設定中。
{
"mcpServers": {
"double-aigents-dsar-service": {
"type": "http",
"url": "https://www.doubleaigents.com/api/mcp"
}
}
}A public, read-only MCP server for GDPR subject access requests (DSARs) and personal data breaches, for the UK, the EU and Switzerland.
Endpoint (Streamable HTTP, no auth, no key): https://www.doubleaigents.com/api/mcp
Official MCP registry: com.doubleaigents.www/dsar
General information, not legal advice. The controller decides.
Claude Code:
Any MCP client that supports Streamable HTTP: point it at the endpoint above.
Stateless. No storage, no accounts. Usage is counted as one log line per call (time, method, tool name, success); no arguments, IP addresses or user agents are logged.
api/mcp.ts (the Vercel serverless function) and src/lib/dpTools.ts (the shared rules, also used by the free tools page at https://www.doubleaigents.com/free-tools) are mirrored from our site. No dependencies.
Double AIgents Ltd, registered in England and Wales, company no. 17513072, ICO registration ZC272947. Contact: [email protected].
MIT licence.
來源：README.md，提交 f63a642
DSAR response deadline
Calculate the statutory deadline for answering a data subject access request in the UK, the EU/EEA or Switzerland, with the rule that applies and the extension position. General information, not legal advice.
extendedjurisdiction必填received_date必填DSAR fixed-price quote
Fixed price from Double AIgents for preparing a DSAR response, by pack size in pages after de-duplication. Also gives the retainer price (15% off). Excludes VAT.
pages必填currencyDSAR service information
What the Double AIgents DSAR service covers: scoping, collection guidance, de-duplication, redaction, exemption recommendations, two independent reviews, secure delivery, data handling, jurisdictions and partner arrangements.
無需輸入參數。
Start DSAR scoping
Explains how to start free scoping and returns a prefilled email (mailto URL) to [email protected]. Sends nothing and stores nothing. Do not pass the requester's personal data or the request letter.
contact_name必填jurisdiction必填organisation必填approx_volumecontact_email必填date_received必填Personal data breach notification clock
When a personal data breach must be notified to the regulator: 72 hours from awareness in the UK and EU/EEA (Art. 33), "as soon as possible" in Switzerland (revised FADP Art. 24). Gives the deadline, the rule, the processor and individual-notification position, and the facts the regulator will ask for. The controller decides whether to notify. General information, not legal advice.
aware_at必填jurisdiction必填DSAR letter template
Plain-text letter template, in British English with [placeholders], for an acknowledgement, an extension of time or a request for clarification of a data subject access request, under UK, EU/EEA or Swiss law. Fills in the dates if received_date is given. General information, not legal advice.
kind必填due_datejurisdiction必填received_datePersonal data breach triage
A likely-reportability view on a personal data breach (UK, EU/EEA, Switzerland), following the ICO guide "Personal data breaches: a guide" and EDPB Guidelines 9/2022: whether notifying the regulator and telling the people affected is likely or unlikely to be required, the factors behind that view, and the notification deadline. The controller decides. General information, not legal advice. Do not pass names or other personal data.
aware_at必填encrypted必填recipient必填recoverable必填jurisdiction必填people_affected必填special_category必填AI tool check: DPIA and EU AI Act screening
Screens a planned use of an AI tool: whether a DPIA is likely to be required (Art. 35(3), the ICO high-risk list, the WP248 criteria; FADP Art. 22 for Switzerland), EU AI Act risk flags (Annex III high-risk areas, especially employment; Art. 5 prohibited practices such as emotion recognition at work; current application dates after the Digital Omnibus), and automated decision rules (GDPR Art. 22, UK GDPR Arts 22A to 22D). Findings with sources. The use_case text is not stored or returned. General information, not legal advice.
use_case必填large_scale必填jurisdiction必填new_technology必填special_category必填employees_or_candidates必填processes_personal_data必填automated_decisions_with_significant_effect必填HR record retention periods (UK)
Recommended retention period for a common UK HR record, whether it is statutory or only recommended, and the source (HMRC, Home Office, RIDDOR 2013, Working Time Regulations, Limitation Act 1980, ICO, DBS). UK only for now. General information, not legal advice.
record_type必填jurisdictionDSAR search checklist
Where to search when answering a subject access request, especially from an employee: Microsoft 365 (Exchange and archives, shared mailboxes, Teams, OneDrive, SharePoint), other collaboration tools, HR, payroll, recruitment, CCTV, access logs, devices, line manager notes, paper files, occupational health and backups; search-term tips; and the search standard (UK GDPR Art. 15(1A) reasonable and proportionate searches). General information, not legal advice.
organisation_type必填已滿足適用檢查項的 100%
該評分衡量此收錄條目的完整程度，依據註冊中心條目、端點與公開來源計算得出。它不是對伺服器本身的評價，也不表示伺服器安全或目前可用：可連通性是帶日期的檢查結果，評分也不包含安裝量或使用者評價。
claude mcp add --transport http doubleaigents-dsar https://www.doubleaigents.com/api/mcp