← Back to search

io.github.CSOAI-ORG/agent-data-residency-mcp

CSOAI-ORG streamable_http Scanned 25d ago

Agent data residency + GDPR Chapter V transfer-basis runtime guard. Programmatically answer 'whe...

MCP Registry ↗
C
74.2 / 100

Versions

1.0.1latest
first seen May 19, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 7

check_residency_policy
annotations: none low

Check if a cross-border data transfer between agents is permitted. Args: source_region: ISO country code or EU/EEA/UK (e.g., "DE", "FR", "US", "UK", "EU"). target_region: ISO country code or region of the receiving agent. data_classification: One of: personal, sensitive-personal, biometric, health, financial, special-category, public. api_key: Optional MEOK API key. Returns: JSON with verdict (permitted/restricted/prohibited), legal basis, required documentation.

api_key str source_region str target_region str data_classification str
get_transfer_basis
annotations: none low

List GDPR Chapter V transfer mechanisms. Args: transfer_type: Optional filter — one of: adequacy-decision, standard-contractual-clauses, binding-corporate-rules, derogations-specific-situations, uk-international-data-transfer-agreement. Returns: JSON with full transfer-basis matrix and applicable scenarios.

api_key str transfer_type str
list_adequacy_decisions
annotations: none low

Return all current EU adequacy decisions with status, date, and scope.

api_key str
check_eu_ai_act_data_governance
annotations: none low

Check EU AI Act Article 10 data-governance duties for an AI system. Args: system_type: One of: high-risk-systems, biometric-data. Returns: JSON with Article 10 duties + cross-references to GDPR Chapter V.

api_key str system_type str
log_transfer
annotations: none low

Log a cross-border data transfer for audit trail (Pro+). Args: source_region: Source country/region. target_region: Target country/region. data_classification: Data classification (personal, sensitive, etc.). transfer_basis: Legal basis used (adequacy, sccs, bcrs, etc.). purpose: Transfer purpose. Returns: JSON receipt with timestamp + transfer ID.

api_key str purpose str source_region str target_region str transfer_basis str data_classification str
search_regulation
annotations: none low

Full-text search across 410+ articles of real EU regulation text (EUR-Lex verified). Args: query: Search terms. FTS5 syntax supported (AND, OR, NEAR, phrase quoting). regulation: Optional filter - one of: eu-ai-act, dora, nis2, cra, csrd, gdpr. limit: Max results (default 10). Returns: Snippets from matching articles with regulation + article + relevance score. Verbatim from EUR-Lex Cellar — auditor-defensible quotes with `>>>match<<<` highlights.

limit int query str regulation str
list_regulations_in_db
annotations: none low

List all regulations in the local EUR-Lex FTS5 database.

Permissions 4

network medium
Server uses network capabilities via: urllib
filesystem low
Server uses filesystem capabilities via: open(), os, pathlib
database medium
Server uses database capabilities via: sqlite3
env_vars low
Server uses env_vars capabilities via: os.environ

Scan Findings 34

info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
low
Tool 'check_residency_policy' has no annotations annotation_checker · 100%
low
Tool 'get_transfer_basis' has no annotations annotation_checker · 100%
low
Tool 'list_adequacy_decisions' has no annotations annotation_checker · 100%
low
Tool 'check_eu_ai_act_data_governance' has no annotations annotation_checker · 100%
low
Tool 'log_transfer' has no annotations annotation_checker · 100%
low
Tool 'search_regulation' has no annotations annotation_checker · 100%
low
Tool 'list_regulations_in_db' has no annotations annotation_checker · 100%
medium
Vulnerable dependency: mcp@1.0.0 (GHSA-3qhf-m339-9g5v) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (GHSA-9h52-p55h-vw2f) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (GHSA-j975-95f5-7wqh) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (GHSA-jpw9-pfvf-9f58) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (GHSA-vj7q-gjh5-988w) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (PYSEC-2026-1616) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (PYSEC-2026-1617) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (PYSEC-2026-1618) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (PYSEC-2026-3482) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (PYSEC-2026-3483) dependency_analyzer · 95%
info
pyproject.toml metadata manifest_parser · 100%
info
Tool: check_residency_policy manifest_parser · 90%
info
Tool: get_transfer_basis manifest_parser · 90%
info
Tool: list_adequacy_decisions manifest_parser · 90%
info
Tool: check_eu_ai_act_data_governance manifest_parser · 90%
info
Tool: log_transfer manifest_parser · 90%
info
Tool: search_regulation manifest_parser · 90%
info
Tool: list_regulations_in_db manifest_parser · 90%
info
Required env vars (2) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 80%
low
Permission: filesystem access detected permission_analyzer · 80%
medium
Permission: database access detected permission_analyzer · 90%
low
Permission: env_vars access detected permission_analyzer · 90%
info
No dependency files found for SBOM generation sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%