Romanian Data Protection MCP

Romanian data protection data for AI compliance tools.

Query Romanian data protection data -- regulations, decisions, and requirements from ANSPDCP (National Supervisory Authority for Personal Data Processing) -- directly from Claude, Cursor, or any MCP-compatible client.

Built by Ansvar Systems -- Stockholm, Sweden

Quick Start

Use Remotely (via Ansvar Gateway, OAuth)

Connect via the Ansvar Gateway with OAuth — your client completes the OAuth flow on first connect. A free tier is available; sign up at ansvar.eu.

Endpoint: https://gateway.ansvar.eu/mcp

Client	How to Connect
Claude.ai	Settings > Connectors > Add Integration > paste URL
Claude Code	`claude mcp add ansvar-gateway --transport http https://gateway.ansvar.eu/mcp`
Claude Desktop	Add to config (see below)
GitHub Copilot	Add to VS Code settings (see below)

Claude Desktop -- add to claude_desktop_config.json:

{
  "mcpServers": {
    "ansvar-gateway": {
      "type": "url",
      "url": "https://gateway.ansvar.eu/mcp"
    }
  }
}

GitHub Copilot -- add to VS Code settings.json:

{
  "github.copilot.chat.mcp.servers": {
    "ansvar-gateway": {
      "type": "http",
      "url": "https://gateway.ansvar.eu/mcp"
    }
  }
}

Use Locally (npm)

npx @ansvar/romanian-data-protection-mcp

Claude Desktop -- add to claude_desktop_config.json:

macOS: ~/Library/Application Support/Claude/claude_desktop_config.jsonWindows: %APPDATA%\Claude\claude_desktop_config.json

{
  "mcpServers": {
    "romanian-data-protection-mcp": {
      "command": "npx",
      "args": ["-y", "@ansvar/romanian-data-protection-mcp"]
    }
  }
}

Cursor / VS Code:

{
  "mcp.servers": {
    "romanian-data-protection-mcp": {
      "command": "npx",
      "args": ["-y", "@ansvar/romanian-data-protection-mcp"]
    }
  }
}

Available Tools (6)

Tool	Description
`ro_dp_search_decisions`	Full-text search across ANSPDCP decisions (sanctions, warnings, and administrative decisions). Returns matching decis...
`ro_dp_get_decision`	Get a specific ANSPDCP decision by reference number (e.g.,
`ro_dp_search_guidelines`	Search ANSPDCP guidance documents: guidelines, opinions, recommendations, and FAQs. Covers GDPR implementation, DPIA ...
`ro_dp_get_guideline`	Get a specific ANSPDCP guidance document by its database ID.
`ro_dp_list_topics`	List all covered data protection topics with Romanian and English names. Use topic IDs to filter decisions and guidel...
`ro_dp_about`	Return metadata about this MCP server: version, data source, coverage, and tool list.

All tools return structured data with source references and timestamps.

Data Sources and Freshness

All content is sourced from official Romanian regulatory publications:

ANSPDCP (National Supervisory Authority for Personal Data Processing) -- Official regulatory authority

Data Currency

Database updates are periodic and may lag official publications
Freshness checks run via GitHub Actions workflows
Last-updated timestamps in tool responses indicate data age

See sources.yml for full provenance metadata.

Security

This project uses multiple layers of automated security scanning:

Scanner	What It Does	Schedule
CodeQL	Static analysis for security vulnerabilities	Weekly + PRs
Semgrep	SAST scanning (OWASP top 10, secrets, TypeScript)	Every push
Gitleaks	Secret detection across git history	Every push
Trivy	CVE scanning on filesystem and npm dependencies	Daily
Docker Security	Container image scanning + SBOM generation	Daily
Socket.dev	Supply chain attack detection	PRs
Dependabot	Automated dependency updates	Weekly

See SECURITY.md for the full policy and vulnerability reporting.

Important Disclaimers

Not Regulatory Advice

THIS TOOL IS NOT REGULATORY OR LEGAL ADVICE

Regulatory data is sourced from official publications by ANSPDCP (National Supervisory Authority for Personal Data Processing). However:

This is a research tool, not a substitute for professional regulatory counsel

Verify all references against primary sources before making compliance decisions

Coverage may be incomplete -- do not rely solely on this for regulatory research

Before using professionally, read: DISCLAIMER.md | PRIVACY.md

Confidentiality

Queries go through the Claude API. For privileged or confidential matters, use on-premise deployment. See PRIVACY.md for details.

Development

Setup

git clone https://github.com/Ansvar-Systems/romanian-data-protection-mcp
cd romanian-data-protection-mcp
npm install
npm run build
npm test

Running Locally

npm run dev                                       # Start MCP server
npx @anthropic/mcp-inspector node dist/index.js   # Test with MCP Inspector

Data Management

npm run build:db       # Rebuild SQLite database from seed data
npm run check-updates  # Check for new regulatory data

Related Projects

This server is part of Ansvar's MCP fleet -- 276 MCP servers covering law, regulation, and compliance across 119 jurisdictions.

Law MCPs

Full national legislation for 108 countries. Example: @ansvar/swedish-law-mcp -- 2,415 Swedish statutes with EU cross-references.

Sector Regulator MCPs

National regulatory authority data for 29 EU/EFTA countries across financial regulation, data protection, cybersecurity, and competition. This MCP is one of 116 sector regulator servers.

Domain MCPs

Specialized compliance domains: EU Regulations, Security Frameworks, Automotive Cybersecurity, OT/ICS Security, Sanctions, and more.

Browse the full fleet at ansvar.eu (access via the Ansvar Gateway, OAuth).

Contributing

Contributions welcome! See CONTRIBUTING.md for guidelines.

License

Apache License 2.0. See LICENSE for details.

Data Licenses

Regulatory data sourced from official government publications. See sources.yml for per-source licensing details.

About Ansvar Systems

We build AI-powered compliance and legal research tools for the European market. Our MCP fleet provides structured, verified regulatory data to AI assistants -- so compliance professionals can work with accurate sources instead of guessing.

ansvar.eu -- Stockholm, Sweden

_{Built with care in Stockholm, Sweden}

Romanian Data Protection MCP