@Double AIgents Ltd
Basic information
Transport
Streamable HTTP
Authentication
None
Category
Productivity
Author
Double AIgents Ltd
Submitted by
JimmyBoy-Git
Free, read-only MCP server for GDPR subject access requests (DSARs) and data breaches in the UK, EU and Switzerland: DSAR deadlines, the 72-hour breach clock, letter templates and fixed quotes for outsourced DSARs. No key, no sign-up.
https://www.doubleaigents.com/api/mcpclaude mcp add double-aigents-dsar-gdpr-deadlines-breach-clock-letters --transport http https://www.doubleaigents.com/api/mcpCalculate the statutory deadline for answering a data subject access request in the UK, the EU/EEA or Switzerland, with the rule that applies and the extension position. General information, not legal advice.
Fixed price from Double AIgents for preparing a DSAR response, by pack size in pages after de-duplication. Also gives the retainer price (15% off). Excludes VAT.
What the Double AIgents DSAR service covers: scoping, collection guidance, de-duplication, redaction, exemption recommendations, two independent reviews, secure delivery, data handling, jurisdictions and partner arrangements.
Explains how to start free scoping and returns a prefilled email (mailto URL) to james@doubleaigents.com. Sends nothing and stores nothing. Do not pass the requester's personal data or the request letter.
When a personal data breach must be notified to the regulator: 72 hours from awareness in the UK and EU/EEA (Art. 33), "as soon as possible" in Switzerland (revised FADP Art. 24). Gives the deadline, the rule, the processor and individual-notification position, and the facts the regulator will ask for. The controller decides whether to notify. General information, not legal advice.
Plain-text letter template, in British English with [placeholders], for an acknowledgement, an extension of time or a request for clarification of a data subject access request, under UK, EU/EEA or Swiss law. Fills in the dates if received_date is given. General information, not legal advice.
A likely-reportability view on a personal data breach (UK, EU/EEA, Switzerland), following the ICO guide "Personal data breaches: a guide" and EDPB Guidelines 9/2022: whether notifying the regulator and telling the people affected is likely or unlikely to be required, the factors behind that view, and the notification deadline. The controller decides. General information, not legal advice. Do not pass names or other personal data.
Screens a planned use of an AI tool: whether a DPIA is likely to be required (Art. 35(3), the ICO high-risk list, the WP248 criteria; FADP Art. 22 for Switzerland), EU AI Act risk flags (Annex III high-risk areas, especially employment; Art. 5 prohibited practices such as emotion recognition at work; current application dates after the Digital Omnibus), and automated decision rules (GDPR Art. 22, UK GDPR Arts 22A to 22D). Findings with sources. The use_case text is not stored or returned. General information, not legal advice.
Recommended retention period for a common UK HR record, whether it is statutory or only recommended, and the source (HMRC, Home Office, RIDDOR 2013, Working Time Regulations, Limitation Act 1980, ICO, DBS). UK only for now. General information, not legal advice.
Where to search when answering a subject access request, especially from an employee: Microsoft 365 (Exchange and archives, shared mailboxes, Teams, OneDrive, SharePoint), other collaboration tools, HR, payroll, recruitment, CCTV, access logs, devices, line manager notes, paper files, occupational health and backups; search-term tips; and the search standard (UK GDPR Art. 15(1A) reasonable and proportionate searches). General information, not legal advice.
a## Double AIgents DSAR MCP server
Free, read-only tools for GDPR subject access requests and personal data breaches, for the UK, the EU and Switzerland. Streamable HTTP, no key, no sign-up.
Endpoint: https://www.doubleaigents.com/api/mcp
dsar_deadline: due date for a DSAR under UK GDPR (including the Data (Use and Access) Act 2025 rules), EU GDPR or Swiss revFADP, with extension rulesbreach_clock: the 72-hour breach notification deadline, to the hour; Swiss ruledsar_letter_template: acknowledgement, extension and clarification letters (UK/EU/CH wording)dsar_quote: fixed price for an outsourced DSAR by page count (GBP/EUR/CHF)dsar_service_info: what the Double AIgents DSAR service coversdsar_request_scoping: how to start a request (returns an email link; stores nothing)Claude Code:
claude mcp add --transport http doubleaigents-dsar https://www.doubleaigents.com/api/mcp
Stateless. No storage, no accounts. One log line per call (time, method, tool name, success); no arguments, IP addresses or user agents.
General information, not legal advice. The controller decides.
Double AIgents Ltd, England and Wales, company no. 17513072, ICO registration ZC272947.
The Double AIgents DSAR (GDPR deadlines, breach clock, letters) remote MCP server is a hosted Model Context Protocol endpoint at https://www.doubleaigents.com/api/mcp, so AI assistants can connect to it without installing or running anything locally.
Add the endpoint https://www.doubleaigents.com/api/mcp to any MCP-compatible client such as Claude Code, Cursor, or VS Code. The setup snippets on this page configure each client in one step.
No. Double AIgents DSAR (GDPR deadlines, breach clock, letters)'s MCP server does not require authentication — you can connect directly with the endpoint URL.
Double AIgents DSAR (GDPR deadlines, breach clock, letters) exposes a Streamable HTTP endpoint, the transport used by remote MCP servers and supported by all major MCP clients.
App Store keyword research, rank tracking, competitor analysis and authorized performance data.
Search and read public data from X/Twitter, Reddit, YouTube, Instagram, TikTok, Facebook, Threads, Bluesky, Trustpilot, Amazon, Google Maps, news, forums and the web. 90+ read-only tools plus ready-made research playbook
CVE prioritization using exploitation signals, plus agent heartbeat monitoring and state capsules. Some tools use API-key or x402 access.
Production remote MCP server with 35 safe web-intelligence tools: 32 paid x402 URL operations plus 3 free discovery/demo tools. Base Mainnet USDC, no account or API key; SSRF protection, strict schemas and idempotent set
Research competitors' winning ads, clone them for your brand and launch paused campaigns on Meta, Google and TikTok from chat.
Comments