Skip to content
mcp/skillhub

Double AIgents DSAR service MCP Server

by jimmyboy-gitcom.doubleaigents.www/dsarv1.2.0

GDPR DSAR deadlines, breach triage, AI tool checks, HR retention and letters (UK/EU/CH)

0remoteofficial registry

context tax

~2,363 tok/turn10 tools

security

97/100

cold start

hosted

freshness

Active1d ago

Our reading of Double AIgents DSAR service, from the data

Double AIgents DSAR service is an MCP server from jimmyboy-git, listed in the official MCP Registry.

Its 10 tools add about 2,363 tokens to every model turn (measured 2026-10-19).

Maintenance is active: the last public signal was in the last day (2026-10-18).

It runs as a hosted endpoint, so there is nothing to install.

Install Double AIgents DSAR service MCP server

Install in Claude Code

claude mcp add --transport http doubleaigents-dsar https://www.doubleaigents.com/api/mcp

Remote endpoints

  • streamable-httphttps://www.doubleaigents.com/api/mcp

Context tax

Connecting this server adds ~2,363 tokens of tool definitions to every model turn (moderate, 10 tools). Measured 2026-10-19 via its hosted endpoint; o200k tokenizer, worst case for clients that load all tools up front. How we measure

ModelPer 1,000 turnsWith prompt caching
Claude Opus 5.5$9.45$0.473
Claude Sonnet 5.5$4.73$0.473
Claude Haiku 5.5$0.236—

Input prices as of 2026-10-06. Excludes your own prompt and output.

Tools (10)

  • breach_triage416 tok

    A likely-reportability view on a personal data breach (UK, EU/EEA, Switzerland), following the ICO guide "Personal data breaches: a guide" and EDPB Guidelines 9/2022: whether notifying the regulator and telling the people affected is likely or unlikely to be required, the factors behind that view, and the notification deadline. The controller decides. General information, not legal advice. Do not pass names or other personal data.

  • ai_tool_check377 tok

    Screens a planned use of an AI tool: whether a DPIA is likely to be required (Art. 35(3), the ICO high-risk list, the WP248 criteria; FADP Art. 22 for Switzerland), EU AI Act risk flags (Annex III high-risk areas, especially employment; Art. 5 prohibited practices such as emotion recognition at work; current application dates after the Digital Omnibus), and automated decision rules (GDPR Art. 22, UK GDPR Arts 22A to 22D). Findings with sources. The use_case text is not stored or returned. General information, not legal advice.

  • dsar_request_scoping235 tok

    Explains how to start free scoping and returns a prefilled email (mailto URL) to james@doubleaigents.com. Sends nothing and stores nothing. Do not pass the requester's personal data or the request letter.

  • dsar_letter_template215 tok

    Plain-text letter template, in British English with [placeholders], for an acknowledgement, an extension of time or a request for clarification of a data subject access request, under UK, EU/EEA or Swiss law. Fills in the dates if received_date is given. General information, not legal advice.

  • breach_clock210 tok

    When a personal data breach must be notified to the regulator: 72 hours from awareness in the UK and EU/EEA (Art. 33), "as soon as possible" in Switzerland (revised FADP Art. 24). Gives the deadline, the rule, the processor and individual-notification position, and the facts the regulator will ask for. The controller decides whether to notify. General information, not legal advice.

  • hr_retention193 tok

    Recommended retention period for a common UK HR record, whether it is statutory or only recommended, and the source (HMRC, Home Office, RIDDOR 2013, Working Time Regulations, Limitation Act 1980, ICO, DBS). UK only for now. General information, not legal advice.

  • dsar_deadline167 tok

    Calculate the statutory deadline for answering a data subject access request in the UK, the EU/EEA or Switzerland, with the rule that applies and the extension position. General information, not legal advice.

  • dsar_search_checklist147 tok

    Where to search when answering a subject access request, especially from an employee: Microsoft 365 (Exchange and archives, shared mailboxes, Teams, OneDrive, SharePoint), other collaboration tools, HR, payroll, recruitment, CCTV, access logs, devices, line manager notes, paper files, occupational health and backups; search-term tips; and the search standard (UK GDPR Art. 15(1A) reasonable and proportionate searches). General information, not legal advice.

  • dsar_quote130 tok

    Fixed price from Double AIgents for preparing a DSAR response, by pack size in pages after de-duplication. Also gives the retainer price (15% off). Excludes VAT.

  • dsar_service_info69 tok

    What the Double AIgents DSAR service covers: scoping, collection guidance, de-duplication, redaction, exemption recommendations, two independent reviews, secure delivery, data handling, jurisdictions and partner arrangements.

Security signals

97/100 — no known issues found as of 2026-10-19, from the checks below. This is not a guarantee of safety; review what a server can do before connecting it.

Deductions

  • No security policy (SECURITY.md)-3

Checks

  • ✓Repository hygiene (archived, activity, license, security policy)
  • ✓Tool descriptions (prompt-injection and hidden-text heuristics)
  • ○Package metadata (install scripts, provenance) — pending
  • ○Source scan (secrets, CVEs, risky code) by vectra-guard — pending

Scan it yourself before installing with vectra-guard, the open-source agent security CLI. Scoring rules

Freshness

Active — last maintenance signal 1d ago. The newest of the signals below sets the band.

  1. Last commit (default branch)

    2026-10-18 · 1d ago · GitHub

  2. Latest release

    no data · GitHub

  3. Package published

    no data · npm/PyPI

  4. Registry entry updated

    2026-10-18 · 1d ago · official registry · v1.2.0

FAQ

›How do I install the Double AIgents DSAR service MCP server in Claude Code?

Run: claude mcp add --transport http doubleaigents-dsar https://www.doubleaigents.com/api/mcp. For Cursor, VS Code, Claude Desktop and Windsurf, use the install tabs above.

›Does Double AIgents DSAR service require an API key?

No required environment variables are declared in its published metadata.

›Can I use Double AIgents DSAR service as a remote (hosted) MCP server?

Yes. It is a hosted MCP server; connect to its URL with any client that supports remote MCP.

›Is Double AIgents DSAR service in the official MCP registry?

Yes, as com.doubleaigents.www/dsar.

›How many tokens does Double AIgents DSAR service add to my context?

Its tool definitions total about 2,363 tokens, resent on every turn.

Sources and method

Official MCP Registry entry
updated 2026-10-18
GitHub repository
fetched 2026-10-19
Last checked against all sources
2026-10-19

The description, packages and links come from the maintainer's own published metadata. Token cost, security signals, freshness and the reading above are MCPSkillHub's own measurements; see the methodology. Spot an error? Request a correction or claim the listing.