Data privacy MCP servers

A server here detects or redacts personal data (PII), consent management or privacy law.

Not here: general security and servers that merely promise privacy.

375servers
155 remote220 localTagged by Odel's AI, which can make mistakes

Best fit

198 made for this, ranked by starsRemoteLocal
  1. Compliance @rulemesh/complianceEngineered GDPR compliance for engineers and AI agents: pull rules, implement, submit evidence.7% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
  2. Mcpscopeconsent @clauxel/mcpscopeconsent-mcpRemote MCP for MCP consent scope receipt, structured receipts, audit logs, and reviewer-ready eviden8% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.
  3. Tracepiishield @clauxel/tracepiishield-mcpPII scanning and redaction receipts for LLM traces and tool payloads.9% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.
  4. Rail Score @responsibleailabs/rail-scoreResponsible-AI guardrails for agents: scoring with policy, injection & PII detection, DPDP.6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  5. DocMorph Studio @docmorph/docmorph-studioRender Mermaid diagrams, Markdown to PDF and outlines, image OCR, and media metadata cleanup.7% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  6. Praxikon @praxikon/praxikonEU AI Act and GDPR checks with sources: classify an AI system, trace each duty, find the supervisor.3% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  7. Data Breach Notification Deadlines @nero-engine/breach-notification-deadlinesWho to notify after a data breach and by what date: all US states, SEC, HIPAA, GDPR, UK. Sourced.3% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  8. IGNOREO @ignoreo/toolsPaid tools for AI agents over x402: privacy scan, payment-address check, locks, seller marketplace7% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  9. Pınar Eldem Hukuk & Danışmanlık @pinareldem/hukukTurkish law (KVKK) pre-launch legal check for AI-built apps; Istanbul law office info.3% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  10. ScanBase @scanbase/scanbaseWebsite compliance checks for Russian personal data law 152-FZ: score, violations, fix instructions.Not assessed yet.Runs on your machine, installed from npm.
  11. Singapore law @ansvar/singapore-law-mcpSingapore law database — PDPA, Cybersecurity Act, Computer Misuse Act with full-text search5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
  12. Canadian Law @ansvar/canadian-law-mcpCanadian federal law database — PIPEDA, CASL, cybercrime, corporate law with full-text search6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
  13. Xither — AI vendor record @xither/recordRead-only record of AI vendor sub-processor lists, DPA notice windows and model retirements3% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  14. AI Metadata Cleaner @aimetadatacleaner/metadata-cleanerRemove GPS, device details, dates and AI labels from video, PDF, RAW and photo files.11% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
  15. Redaction @secureai/redactionTakes the people out of text before a model sees it, and puts them back in the reply.10% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.
  16. Cookie Consent Compliance Scanner @vincentn-waivern/cookie-checker-gdpr-ccpa-gcmv2Cookie consent scanner: GDPR, CCPA, GCMv2. PASS/FAIL compliance checklists with fix recommendations.9% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.
  17. Tork Governance @torkjacobs/tork-governanceAI agent governance for MCP: PII detection, policy enforcement, compliance, and kill switch.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
  18. GeraCompliance @geraservicesuk/mcp-geracomplianceEU AI Act and GDPR compliance: checks, audits, generate policies.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
  19. GeraGuard @geraservicesuk/mcp-geraguardPrivacy protection: scans, tracker detection, data broker opt-outs.9% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
  20. Public @myprivacyagent/publicRead-only opt-out guides, removal routes for 950+ data brokers, and privacy library search.5% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  21. PromptGuard @promptguard/securityScan prompts for injection attacks, redact PII, and audit LLM SDK usage from any MCP client9% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
  22. movahedi.ca Privacy Data @movahedi/privacyCanadian privacy enforcement, glossary, and Quebec Law 25 guidance for AI agents.3% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  23. BoundaryAI @boundaryai/boundaryaiDeterministic runtime safety for AI agents: scan PII, gate tool actions, verify LLM output.14% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.
  24. RegSentry Website Tracking Inspector @regsentry/tracking-inspectorInspect a public site's tracking signals, grade consent evidence, and get remediation playbooks.4% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.