GDPR Shift-Left Compliance MCP Server

A Model Context Protocol (MCP) server that brings GDPR compliance knowledge directly into your IDE, enabling developers and compliance teams to "shift left" - identifying and addressing data protection requirements early in the development lifecycle. Its 34 documented tools cover analyze, generate, dsr, code. It runs locally over stdio via the published package.

People connecting automation tools to Claude, Cursor, VS Code, or another MCP client. The project is written in Python.

VERIFIED ACTIVE

LAST COMMIT 2026-02-21 · ★ 2 · #154 OF 194 MAINTAINED AUTOMATION · VERIFIED 2026-08-25

MIT · Python servers · how we verify → /methodology

01 · Install GDPR Shift-Left Compliance

Claude Code

claude mcp add kevinrabun-gdprshiftleftmcp -- uvx gdpr-shift-left-mcp

Claude Desktop / Cursor / VS Code - add to config

{
  "mcpServers": {
    "kevinrabun-gdprshiftleftmcp": {
      "command": "uvx",
      "args": [
        "gdpr-shift-left-mcp"
      ]
    }
  }
}

Same JSON for Cursor. For VS Code, rename the top-level key from `mcpServers` to `servers`.

Using another client? Same JSON, different key

Claude Desktop · mcpServers

Cursor · mcpServers

VS Code · servers

Windsurf · mcpServers

Zed · context_servers

Cline · mcpServers

Roo Code · mcpServers

Continue · mcpServers

LibreChat · mcpServers

Gemini CLI · mcpServers

Codex CLI · mcp_servers

Full setup guides: every client.

02 · Evidence

Security posture

What to check before giving this server access to your agent - from the registry, GitHub, and our own probes. We don't score safety; we show what's verifiable.

runs as local process (stdio) - runs on your machine with your user's permissions

license MIT - declared in the repository

pypi package gdpr-shift-left-mcp - check the name against the project README before installing (PyPI has no namespace ownership)

registry namespace io.github.KevinRabun is GitHub-verified and matches the repo owner

03 · What GDPR Shift-Left Compliance can do

Prose above is summarized from the project's README and registry record - no invented capabilities.

What you can build

With this server connected, an agent can retrieve a GDPR article by number, list all articles in a chapter, retrieve a recital by number, and list all definitions.

Capability map

Tools grouped from the project's README - what GDPR Shift-Left Compliance lets an agent do.

read & search

10 tools - e.g. Retrieve a GDPR article by number; List all articles in a chapter; Full-text search across GDPR

get_article · list_chapter_articles · search_gdpr · get_recital · get_azure_mapping · get_definition…

Analyze

7 tools - e.g. Scan IaC for GDPR issues; Scan app code for GDPR issues; Detect controller/processor code patterns

analyze_infrastructure_code · analyze_application_code · analyze_code_for_role_indicators · analyze_cross_border_transfers · analyze_breach_readiness · analyze_data_flow…

Generate

4 tools - e.g. Generate DPIA document; Art. 30 ROPA template; DSR fulfilment workflow

generate_dpia_template · generate_ropa_template · generate_dsr_workflow · generate_dpa_checklist

Assess

3 tools - e.g. Check if DPIA is required; Assess retention policy; Assess data controller/processor role

assess_dpia_need · assess_retention_policy · assess_controller_processor_role

Dsr

3 tools - e.g. DSR handling guidance; DSR response timelines; Detect DSR implementation (access, erase, portability, etc.)

get_dsr_guidance · get_dsr_timeline · analyze_dsr_capabilities

Definitions

2 tools - e.g. List all definitions; Search definitions

list_definitions · search_definitions

Validate

2 tools - e.g. Validate ROPA completeness; Pass/fail GDPR validation

validate_ropa · validate_gdpr_config

Role

2 tools - e.g. Role-specific GDPR obligations; Common role classification scenarios

get_role_obligations · get_role_scenarios

Latest releases

v0.4.0 · 2026-02-11

Add README validation judges for documentation accuracy · Add risk justifications to cross-border transfer analysis

v0.3.0 · 2026-02-10

What's New in v0.3.0 · This release introduces controller/processor role classification - helping developers and technical PMs understand their GDPR role obligations. · New MCP Tools · | Tool | Description |…

v0.2.0 · 2026-02-09

GDPR Data Quality Improvements · Remove navigation artifacts from all 99 articles and 173 recitals · Fix recital text extraction with proper Unicode handling · Strip standalone paragraph numbers for clean prose…

04 · Who maintains GDPR Shift-Left Compliance

GDPR Shift-Left Compliance is maintained by kevinrabun. We track 3 MCP servers from kevinrabun - 3 actively maintained, 14 combined GitHub stars, oldest repo from Nov 2025. Full record: all servers from kevinrabun.

05 · Facts

repository: github.com/kevinrabun/gdprshiftleftmcp
category: automation - ranked #154 of 194 actively-maintained automation servers as of 2026-08-25.
registry: io.github.KevinRabun/GDPRShiftLeftMCP (active, first published 2026-02-06 · 4 versions)
packages: pypi:gdpr-shift-left-mcp

06 · GDPR Shift-Left Compliance FAQ

Is GDPR Shift-Left Compliance still maintained?

Yes - as of 2026-08-25, its last commit was 2026-02-21. We re-verify nightly.

What can GDPR Shift-Left Compliance do?

With this server connected, an agent can retrieve a GDPR article by number, list all articles in a chapter, retrieve a recital by number, and list all definitions.

How do I install GDPR Shift-Left Compliance?

Run `uvx gdpr-shift-left-mcp`. You can also paste the ready-made client config above.

Does GDPR Shift-Left Compliance run locally?

Yes - it's a stdio server: it runs on your machine (via uvx) with your user's permissions. Your data stays local unless the server itself calls external APIs.

07 · Alternatives to GDPR Shift-Left Compliance

Alternatives to GDPR Shift-Left Compliance

Maintained automation servers if GDPR Shift-Left Compliance isn't the fit.

More automation MCP servers · Agent Tool · Kontent Ai MCP Server · Sap Gui · L10n.dev - AI Localization Agent · Sys Knife

More Python MCP servers · Mockups Gallery · Argus Retrieval · Spotify Bulk Actions MCP · Viznoir · Reddit Research MCP · see all