Romanian Data Protection MCP

Romanian data protection data for AI compliance tools.

  

Query Romanian data protection data -- regulations, decisions, and requirements from ANSPDCP (National Supervisory Authority for Personal Data Processing) -- directly from Claude, Cursor, or any MCP-compatible client.

Built by Ansvar Systems -- Stockholm, Sweden

---

Quick Start

Use Remotely (via Ansvar Gateway, OAuth)

Connect via the Ansvar Gateway with OAuth — your client completes the OAuth flow on first connect. A free tier is available; sign up at ansvar.eu.

Endpoint: https://gateway.ansvar.eu/mcp

| Client | How to Connect | |--------|---------------| | Claude.ai | Settings > Connectors > Add Integration > paste URL | | Claude Code | claude mcp add ansvar-gateway --transport http https://gateway.ansvar.eu/mcp | | Claude Desktop | Add to config (see below) | | GitHub Copilot | Add to VS Code settings (see below) |

Claude Desktop -- add to claude_desktop_config.json:

{
  "mcpServers": {
    "ansvar-gateway": {
      "type": "url",
      "url": "https://gateway.ansvar.eu/mcp"
    }
  }
}

GitHub Copilot -- add to VS Code settings.json:

{
  "github.copilot.chat.mcp.servers": {
    "ansvar-gateway": {
      "type": "http",
      "url": "https://gateway.ansvar.eu/mcp"
    }
  }
}

Use Locally (npm)

npx @ansvar/romanian-data-protection-mcp

Claude Desktop -- add to claude_desktop_config.json:

macOS: ~/Library/Application Support/Claude/claude_desktop_config.json Windows: %APPDATA%\Claude\claude_desktop_config.json

{
  "mcpServers": {
    "romanian-data-protection-mcp": {
      "command": "npx",
      "args": ["-y", "@ansvar/romanian-data-protection-mcp"]
    }
  }
}

Cursor / VS Code:

{
  "mcp.servers": {
    "romanian-data-protection-mcp": {
      "command": "npx",
      "args": ["-y", "@ansvar/romanian-data-protection-mcp"]
    }
  }
}

---

Available Tools (6)

| Tool | Description | |------|-------------| | ro_dp_search_decisions | Full-text search across ANSPDCP decisions (sanctions, warnings, and administrative decisions). Returns matching decis... | | ro_dp_get_decision | Get a specific ANSPDCP decision by reference number (e.g., | | ro_dp_search_guidelines | Search ANSPDCP guidance documents: guidelines, opinions, recommendations, and FAQs. Covers GDPR implementation, DPIA ... | | ro_dp_get_guideline | Get a specific ANSPDCP guidance document by its database ID. | | ro_dp_list_topics | List all covered data protection topics with Romanian and English names. Use topic IDs to filter decisions and guidel... | | ro_dp_about | Return metadata about this MCP server: version, data source, coverage, and tool list. |

All tools return structured data with source references and timestamps.

---

Data Sources and Freshness

All content is sourced from official Romanian regulatory publications:

• ANSPDCP (National Supervisory Authority for Personal Data Processing) -- Official regulatory authority

Data Currency

• Database updates are periodic and may lag official publications
• Freshness checks run via GitHub Actions workflows
• Last-updated timestamps in tool responses indicate data age

See sources.yml for full provenance metadata.

---

Security

This project uses multiple layers of automated security scanning:

| Scanner | What It Does | Schedule | |---------|-------------|----------| | CodeQL | Static analysis for security vulnerabilities | Weekly + PRs | | Semgrep | SAST scanning (OWASP top 10, secrets, TypeScript) | Every push | | Gitleaks | Secret detection across git history | Every push | | Trivy | CVE scanning on filesystem and npm dependencies | Daily | | Docker Security | Container image scanning + SBOM generation | Daily | | Socket.dev | Supply chain attack detection | PRs | | Dependabot | Automated dependency updates | Weekly |

See SECURITY.md for the full policy and vulnerability reporting.

---

Important Disclaimers

Not Regulatory Advice

THIS TOOL IS NOT REGULATORY OR LEGAL ADVICE Regulatory data is sourced from official publications by ANSPDCP (National Supervisory Authority for Personal Data Processing). However: - This is a research tool, not a substitute for professional regulatory counsel - Verify all references against primary sources before making compliance decisions - Coverage may be incomplete -- do not rely solely on this for regulatory research

Before using professionally, read: DISCLAIMER.md | PRIVACY.md

Confidentiality

Queries go through the Claude API. For privileged or confidential matters, use on-premise deployment. See PRIVACY.md for details.

---

Development

Setup

git clone https://github.com/Ansvar-Systems/romanian-data-protection-mcp
cd romanian-data-protection-mcp
npm install
npm run build
npm test

Running Locally

npm run dev                                       # Start MCP server
npx @anthropic/mcp-inspector node dist/index.js   # Test with MCP Inspector

Data Management

npm run build:db       # Rebuild SQLite database from seed data
npm run check-updates  # Check for new regulatory data

---

Related Projects

This server is part of Ansvar's MCP fleet -- 276 MCP servers covering law, regulation, and compliance across 119 jurisdictions.

Law MCPs

Full national legislation for 108 countries. Example: @ansvar/swedish-law-mcp -- 2,415 Swedish statutes with EU cross-references.

Sector Regulator MCPs

National regulatory authority data for 29 EU/EFTA countries across financial regulation, data protection, cybersecurity, and competition. This MCP is one of 116 sector regulator servers.

Domain MCPs

Specialized compliance domains: EU Regulations, Security Frameworks, Automotive Cybersecurity, OT/ICS Security, Sanctions, and more.

Browse the full fleet at ansvar.eu (access via the Ansvar Gateway, OAuth).

---

Contributing

Contributions welcome! See CONTRIBUTING.md for guidelines.

---

License

Apache License 2.0. See LICENSE for details.

Data Licenses

Regulatory data sourced from official government publications. See sources.yml for per-source licensing details.

---

About Ansvar Systems

We build AI-powered compliance and legal research tools for the European market. Our MCP fleet provides structured, verified regulatory data to AI assistants -- so compliance professionals can work with accurate sources instead of guessing.

ansvar.eu -- Stockholm, Sweden

---

<p align="center"> _{Built with care in Stockholm, Sweden} </p>