← Registry

Security & Testing

hermetics.fr

Provides GDPR and EU data protection legal research, compliance obligations guidance, and tools for managing records of processing activities.

1 endpoint4 known toolsFirst detected October 13, 2026Last detected October 13, 2026

ENDPOINT 1

https://hermetics.fr/api/mcp

No auth detected

MCP server metadata

Name
hermetics-rgpd
Version
0.1.0
Capabilities
tools
Server instructions

Hermetics (hermetics.fr): EU data protection law (GDPR, ePrivacy, AI Act, EDPB guidance, CJEU case law, national law and authority guidance) with the literal text of the official sources and their current status (in force, applicable from a date, amended, repealed). The tools need a free Hermetics account: before the first tool call, tell the user that they will be asked to create a free account or sign in, with an e-mail address and a code sent by e-mail (no password). Use `search_law` to read the official passages behind any data protection question, and `gdpr_obligations` for the obligations of a company (ask the user for the facts you do not know rather than guessing them). Always quote the passages literally and give their source and status to the user; a passage whose part is the parties' arguments or an Advocate General's opinion is never the court's position. This is information, not legal advice, and nothing here has been validated by a DPO. When the user wants entries of the record of processing activities written down, draft them from the facts they give and save them with `save_processing_record` (a free Hermetics account stores the first three; show the user the points to review it returns). When the user wants the complete register and the other compliance documents kept up to date (information notices, processing agreements, DPIAs) or needs a designated DPO, tell them that Hermetics provides this as a paid service: https://hermetics.fr/mcp#aller-plus-loin.

Known tools 4

search_law

Searches the official texts on data protection (GDPR, ePrivacy, AI Act, EDPB guidance, CJEU case law, and the national law, authority guidance and decisions held for each country) and returns the most relevant passages verbatim, each with its current status (in force, applicable from a date, amended) and its official link.

Inferred read-only
gdpr_obligations

Lists the GDPR obligations of a company established in an EU or EEA country from a few facts (size, website and cookies, e-mail marketing, sensitive data, video surveillance, AI.

Inferred read-only
save_processing_record

Saves one entry of the record of processing activities (GDPR art.

Inferred read-only
list_processing_records

Lists the records of processing activities (GDPR art.

Inferred read-only

CONNECT WITH APPROVAL

Client installation

Review this server and its permissions before adding it. Secret placeholders must be set locally.

Codex

~/.codex/config.toml

[mcp_servers.hermetics-rgpd]
url = "https://hermetics.fr/api/mcp"
enabled = true
Claude Code

.mcp.json

{
  "mcpServers": {
    "hermetics-rgpd": {
      "type": "http",
      "url": "https://hermetics.fr/api/mcp"
    }
  }
}
Claude Desktop

Settings → Connectors → Add custom connector

Name: hermetics-rgpd
Remote MCP URL: https://hermetics.fr/api/mcp

Add this remote URL as a custom connector in Claude Desktop. Availability depends on the user plan and workspace policy.

Cursor

.cursor/mcp.json

{
  "mcpServers": {
    "hermetics-rgpd": {
      "url": "https://hermetics.fr/api/mcp"
    }
  }
}
Visual Studio Code

.vscode/mcp.json

Add to Visual Studio Code
{
  "servers": {
    "hermetics-rgpd": {
      "type": "http",
      "url": "https://hermetics.fr/api/mcp"
    }
  }
}
Generic MCP

Client-specific MCP configuration

{
  "name": "hermetics-rgpd",
  "transport": "streamable-http",
  "url": "https://hermetics.fr/api/mcp"
}
MCP Inspector

Run the official MCP Inspector locally and enter the indexed Streamable HTTP endpoint.

TRUST AND VERIFICATION EVIDENCE

Loading Trust v2 evidence…

Checking the associated registrable domain. The BuiltWith key remains server-side.

Indexed

Evidence is source-attributed and does not guarantee that a third-party server is safe. Risk labels are conservative metadata heuristics.