Categories › Security › Code & dependency scanning
GDPR provider fiches and a static cookie scan before consent.
Remote server: your requests and data go to stacklegal.eu. Claude Code: claude mcp add --transport http stackl-gal https://stacklegal.eu/api/mcp · Claude app: Settings → Connectors → Add custom connector.
The tools this server listed when we connected to it, in its own words.
get_provider — Look up one StackLégal provider fiche by canonical slug, alias (for example ga), or exact catalog name. Returns the same object as GET /api/list_providers — List StackLégal provider fiches. Same payload as GET /api/v1/providers. Pass ids to request specific slugs, 81 at most, in that order. Omit scan_site — Fetch one public URL once, without a consent cookie, and report trackers present on the first HTML response and Set-Cookie headers. JavaScriNot tested by KitScout yet. When our harness runs it, pros, cons and the tasks we tried appear here, with the date and evidence.