Security & Testing

doubleaigents.com

An MCP server offering tools for UK/EU/EEA/Swiss data protection compliance, including DSAR deadline calculation, breach notification timing, and DSAR service pricing and scoping.

1 endpoint10 known toolsFirst detected October 18, 2026Last detected October 18, 2026

ENDPOINT 1

https://www.doubleaigents.com/api/mcp

No auth detected

MCP server metadata

Name: doubleaigents-dsar
Version: 1.2.0

Capabilities

tools

Server instructions

Double AIgents prepares responses to data subject access requests (DSARs) for organisations in the UK, the EU/EEA and Switzerland. Use dsar_deadline for the statutory response date, dsar_quote for our fixed price, dsar_service_info for what the service covers, dsar_letter_template for acknowledgement, extension and clarification letters, breach_clock for the personal data breach notification deadline, and dsar_request_scoping to give the user a prefilled email to start free scoping. Free data protection tools: breach_triage for a likely-reportability view on a personal data breach, ai_tool_check for DPIA and EU AI Act screening of an AI tool, hr_retention for UK retention periods for common HR records, and dsar_search_checklist for where to search when answering an employee DSAR. All tools are read-only; nothing sent to them is stored. We recommend; the controller decides. Do not send the requester's personal data or the request letter through these tools.

Known tools 10

dsar_deadline

Calculate the statutory deadline for answering a data subject access request in the UK, the EU/EEA or Switzerland, with the rule that applies and the extension position.

Inferred read-only

dsar_quote

Fixed price from Double AIgents for preparing a DSAR response, by pack size in pages after de-duplication.

Inferred read-only

dsar_service_info

What the Double AIgents DSAR service covers: scoping, collection guidance, de-duplication, redaction, exemption recommendations, two independent reviews, secure delivery, data handling, jurisdictions and partner arrangements.

Inferred read-only

dsar_request_scoping

Explains how to start free scoping and returns a prefilled email (mailto URL) to james@doubleaigents.

Potential side effects

breach_clock

When a personal data breach must be notified to the regulator: 72 hours from awareness in the UK and EU/EEA (Art.

Inferred read-only

dsar_letter_template

Plain-text letter template, in British English with [placeholders], for an acknowledgement, an extension of time or a request for clarification of a data subject access request, under UK, EU/EEA or Swiss law.

Inferred read-only

breach_triage

A likely-reportability view on a personal data breach (UK, EU/EEA, Switzerland), following the ICO guide "Personal data breaches: a guide" and EDPB Guidelines 9/2022: whether notifying the regulator and telling the people affected is likely or unlikely to be required, the factors behind that view, and the notification deadline.

Inferred read-only

ai_tool_check

Screens a planned use of an AI tool: whether a DPIA is likely to be required (Art.

Inferred read-only

hr_retention

Recommended retention period for a common UK HR record, whether it is statutory or only recommended, and the source (HMRC, Home Office, RIDDOR 2013, Working Time Regulations, Limitation Act 1980, ICO, DBS).

Inferred read-only

dsar_search_checklist

Where to search when answering a subject access request, especially from an employee: Microsoft 365 (Exchange and archives, shared mailboxes, Teams, OneDrive, SharePoint), other collaboration tools, HR, payroll, recruitment, CCTV, access logs, devices, line manager notes, paper files, occupational health and backups; search-term tips; and the search standard (UK GDPR Art.

Inferred read-only

CONNECT WITH APPROVAL

Client installation

Review this server and its permissions before adding it. Secret placeholders must be set locally.

Codex

~/.codex/config.toml

[mcp_servers.doubleaigents-dsar]
url = "https://www.doubleaigents.com/api/mcp"
enabled = true

Claude Code

.mcp.json

{
  "mcpServers": {
    "doubleaigents-dsar": {
      "type": "http",
      "url": "https://www.doubleaigents.com/api/mcp"
    }
  }
}

Claude Desktop

Settings → Connectors → Add custom connector

Name: doubleaigents-dsar
Remote MCP URL: https://www.doubleaigents.com/api/mcp

Add this remote URL as a custom connector in Claude Desktop. Availability depends on the user plan and workspace policy.

Cursor

.cursor/mcp.json

{
  "mcpServers": {
    "doubleaigents-dsar": {
      "url": "https://www.doubleaigents.com/api/mcp"
    }
  }
}

Visual Studio Code

.vscode/mcp.json

Add to Visual Studio Code

{
  "servers": {
    "doubleaigents-dsar": {
      "type": "http",
      "url": "https://www.doubleaigents.com/api/mcp"
    }
  }
}

Generic MCP

Client-specific MCP configuration

{
  "name": "doubleaigents-dsar",
  "transport": "streamable-http",
  "url": "https://www.doubleaigents.com/api/mcp"
}

MCP Inspector

Run the official MCP Inspector locally and enter the indexed Streamable HTTP endpoint.

TRUST AND VERIFICATION EVIDENCE

Loading Trust v2 evidence…

Checking the associated registrable domain. The BuiltWith key remains server-side.

Indexed

Evidence is source-attributed and does not guarantee that a third-party server is safe. Risk labels are conservative metadata heuristics.