KitScout

Categories › Business & Finance › Legal & compliance documents

frag.hugo

MCP serverVerified domain · fraghugo.deRemote● LiveFree to try

GDPR platform: your assistant fills in VVT, TOMs, AVV and DSFA, your DSB reviews them.

Install

Remote server: your requests and data go to mcp.fraghugo.de. Claude Code: claude mcp add --transport http frag-hugo https://mcp.fraghugo.de/mcp · Claude app: Settings → Connectors → Add custom connector.

What it can do

The tools this server listed when we connected to it, in its own words.

  • search_gdpr_fines — Searches the frag.hugo database of documented GDPR fines (Germany and Europe), each case with authority, amount, GDPR articles, a short summ
  • get_compliance_deadlines — Lists dated compliance deadlines from the frag.hugo deadline calendar (GDPR, NIS2, AI Act, CRA, DORA, Data Act, accessibility act and more),
  • check_software_gdpr — Looks up whether frag.hugo has reviewed a software or cloud service for GDPR use in companies (contract partner, data processing agreement,
  • get_subprocessor_changes — Shows the subprocessor lists of 17 widely used cloud providers (Microsoft 365, Google Workspace, AWS, Salesforce, HubSpot, Stripe and others
  • find_supervisory_authority — Finds the competent German data protection supervisory authority by federal state, postcode (PLZ) of the main establishment or authority ID,
  • get_cyber_threat_picture — Summarises how many organisations from Germany ransomware groups have named on their leak sites in the last 30 days or 12 months, by industr
  • check_email_security — Checks the public DNS records that protect a domain against e-mail spoofing: SPF, DKIM (common selectors), DMARC, DNSSEC, MTA-STS, TLS-RPT,
  • start_website_check — Starts the free frag.hugo website check (Hugo Check) for a public URL: cookies and tracking before consent, consent banner, Google Fonts, pr
  • get_website_check_result — Returns the result of a website check started with start_website_check: status per category and up to eight most important findings with exp
  • vendor_profile — Collects what frag.hugo publishes about a vendor for a due-diligence note: e-mail security of its domain, the GDPR review verdict if one exi
  • my_privacy_deadlines — Lists the open data protection deadlines of the organisation connected to this frag.hugo account: data breaches with their 72-hour reporting
  • report_data_breach — Records a personal data breach in the connected frag.hugo account and starts the 72-hour deadline of Art. 33 GDPR. Step 1 (without `bestaeti
  • create_data_subject_request — Logs a data subject request (access, erasure, rectification, restriction, portability, objection) in the connected frag.hugo account and cal
  • plan_software_introduction — Prepares the data protection paperwork for introducing a new software or cloud service in the connected frag.hugo account. Step 1 (without `

KitScout test notes

Not tested by KitScout yet. When our harness runs it, pros, cons and the tasks we tried appear here, with the date and evidence.

Similar tools