Skip to content

Ansvar-Systems/swiss-data-protection-mcp

Swiss Data Protection MCP

▶ Try this MCP instantly via Ansvar Gateway

50 free queries/day · no card required · OAuth signup at ansvar.eu/gateway

One endpoint, one OAuth signup, access from any MCP-compatible client.

Connect

Claude Code (one line):

claude mcp add ansvar --transport http https://gateway.ansvar.eu/mcp

Claude Desktop / Cursor — add to claude_desktop_config.json (or mcp.json):

{
  "mcpServers": {
    "ansvar": {
      "type": "url",
      "url": "https://gateway.ansvar.eu/mcp"
    }
  }
}

Claude.ai — Settings → Connectors → Add custom connector → paste https://gateway.ansvar.eu/mcp

First request opens an OAuth flow at ansvar.eu/gateway. After signup, your client is bound to your account; tier (free / premium / team / company) determines fan-out, quota, and which downstream MCPs are reachable.


Self-host this MCP

You can also clone this repo and build the corpus yourself. The schema, fetcher, and tool implementations all live here. What is not in the repo is the pre-built database — TDM and standards-licensing constraints on the upstream sources mean we host the corpus on Ansvar infrastructure rather than redistribute it as a public artifact.

Build your own: run this repo's ingestion script (entry-point varies per repo — typically scripts/ingest.sh, npm run ingest, or make ingest; check the repo root).

Swiss data protection data for AI compliance tools.

License CI

Query Swiss data protection data -- regulations, decisions, and requirements from FDPIC/EDOB (Federal Data Protection and Information Commissioner) -- directly from Claude, Cursor, or any MCP-compatible client.

Built by Ansvar Systems -- Stockholm, Sweden


Available Tools (6)

Tool Description
ch_dp_search_decisions Full-text search across FDPIC decisions and opinions (Sachverhaltsdarstellungen, Empfehlungen). Returns matching deci...
ch_dp_get_decision Get a specific FDPIC decision or opinion by reference number.
ch_dp_search_guidelines Search FDPIC guidance documents: Leitfäden, Erläuterungen, and guidance on cloud computing, new DSG, video surveillan...
ch_dp_get_guideline Get a specific FDPIC guidance document by its database ID.
ch_dp_list_topics List all covered data protection topics with German and English names. Use topic IDs to filter decisions and guidelines.
ch_dp_about Return metadata about this MCP server: version, data source, coverage, and tool list.

All tools return structured data with source references and timestamps.


Data Sources and Freshness

All content is sourced from official Swiss regulatory publications:

  • FDPIC/EDOB (Federal Data Protection and Information Commissioner) -- Official regulatory authority

Data Currency

  • Database updates are periodic and may lag official publications
  • Freshness checks run via GitHub Actions workflows
  • Last-updated timestamps in tool responses indicate data age

See sources.yml for full provenance metadata.


Security

This project uses multiple layers of automated security scanning:

Scanner What It Does Schedule
CodeQL Static analysis for security vulnerabilities Weekly + PRs
Semgrep SAST scanning (OWASP top 10, secrets, TypeScript) Every push
Gitleaks Secret detection across git history Every push
Trivy CVE scanning on filesystem and npm dependencies Daily
Docker Security Container image scanning + SBOM generation Daily
Socket.dev Supply chain attack detection PRs
Dependabot Automated dependency updates Weekly

See SECURITY.md for the full policy and vulnerability reporting.


Important Disclaimers

Not Regulatory Advice

THIS TOOL IS NOT REGULATORY OR LEGAL ADVICE

Regulatory data is sourced from official publications by FDPIC/EDOB (Federal Data Protection and Information Commissioner). However:

  • This is a research tool, not a substitute for professional regulatory counsel
  • Verify all references against primary sources before making compliance decisions
  • Coverage may be incomplete -- do not rely solely on this for regulatory research

Before using professionally, read: DISCLAIMER.md | PRIVACY.md

Confidentiality

Queries go through the Claude API. For privileged or confidential matters, use on-premise deployment. See PRIVACY.md for details.


Development

Setup

git clone https://github.com/Ansvar-Systems/swiss-data-protection-mcp
cd swiss-data-protection-mcp
npm install
npm run build
npm test

Running Locally

npm run dev                                       # Start MCP server
npx @anthropic/mcp-inspector node dist/index.js   # Test with MCP Inspector

Data Management

npm run build:db       # Rebuild SQLite database from seed data
npm run check-updates  # Check for new regulatory data

More Ansvar MCPs

Full fleet at ansvar.eu/gateway.

Contributing

Contributions welcome! See CONTRIBUTING.md for guidelines.


License

Apache License 2.0. See LICENSE for details.

Data Licenses

Regulatory data sourced from official government publications. See sources.yml for per-source licensing details.


About Ansvar Systems

We build AI-powered compliance and legal research tools for the European market. Our MCP fleet provides structured, verified regulatory data to AI assistants -- so compliance professionals can work with accurate sources instead of guessing.

ansvar.eu -- Stockholm, Sweden


Built with care in Stockholm, Sweden

About

MCP server for FDPIC (Federal Data Protection and Information Commissioner) data protection decisions and guidelines

Resources

License

Code of conduct

Contributing

Security policy

Stars

Watchers

Forks

Packages

 
 
 

Contributors