Private Law Wiki
Sourced answers, search and bank-case assessment for wiki.private.law by the Mothership runtime.
Beschreibung vom Entwickler (englisches Original)
GDPR platform: your assistant fills in VVT, TOMs, AVV and DSFA, your DSB reviews them.
Diese drei werden nie zu einer Punktzahl zusammengefasst: Meinungen, Messungen und Beliebtheit sind verschiedene Dinge.
Für diesen Server haben wir noch keine Zusammenfassung in einfacher Sprache geschrieben. Unten stehen die Fakten, die wir aus der Registry gelesen haben.
Wähle die KI-App, die du nutzt, und kopiere die Einstellungen.
Du brauchst
Welche App nutzt du?
Wähle oben deine App. Wir merken sie uns, damit der Button beim nächsten Mal „In … installieren“ anzeigt.
Funktioniert in Claude im Web, auf dem Desktop und auf dem Handy:
https://mcp.fraghugo.de/mcpFühre das in deinem Terminal aus
claude mcp add --transport http frag-hugo https://mcp.fraghugo.de/mcpIn .cursor/mcp.json in deinem Projekt oder in ~/.cursor/mcp.json einfügen
{
"mcpServers": {
"frag-hugo": {
"url": "https://mcp.fraghugo.de/mcp"
}
}
}Dein Browser fragt, ob er die App öffnen darf, dann zeigt die App die Einstellungen und bittet dich um Bestätigung. Schlüsselwerte bleiben leer, damit du sie selbst einträgst.
In .vscode/mcp.json in deinem Projekt einfügen
{
"servers": {
"frag-hugo": {
"type": "http",
"url": "https://mcp.fraghugo.de/mcp"
}
}
}Dein Browser fragt, ob er die App öffnen darf, dann zeigt die App die Einstellungen und bittet dich um Bestätigung. Schlüsselwerte bleiben leer, damit du sie selbst einträgst.
ChatGPT verbindet sich nur mit Servern im Internet:
https://mcp.fraghugo.de/mcpMenünamen können sich je nach Tarif und mit der Zeit leicht unterscheiden.
Deine Auswahl bleibt in einem Cookie auf diesem Gerät; kein Konto nötig.
Diese Einstellungen werden aus dem Registry-Eintrag des Entwicklers erzeugt. Wenn in der README etwas anderes steht, folge der README.
Tool-Namen und -Beschreibungen genau so, wie der Server sie am 9. Nov. 2026 gemeldet hat. Geschrieben hat sie der Entwickler, nicht wir; wir zeigen sie als reinen Text.
search_gdpr_finesSearches the frag.hugo database of documented GDPR fines (Germany and Europe), each case with authority, amount, GDPR articles, a short summary and the official source. Use it for questions such as "which fines were imposed for Art. 32" or "fines against telecom companies in Germ
get_compliance_deadlinesLists dated compliance deadlines from the frag.hugo deadline calendar (GDPR, NIS2, AI Act, CRA, DORA, Data Act, accessibility act and more), each with legal provision, status, what to do and the official source. Without date filters it returns the next upcoming deadlines from tod
check_software_gdprLooks up whether frag.hugo has reviewed a software or cloud service for GDPR use in companies (contract partner, data processing agreement, subprocessors, data location, third-country transfer, AI training, certificates, admin controls, deletion, data subject rights). Returns the
get_subprocessor_changesShows the subprocessor lists of 17 widely used cloud providers (Microsoft 365, Google Workspace, AWS, Salesforce, HubSpot, Stripe and others) as monitored daily by frag.hugo: date of the last change, number of entries, names and links to the official list and the data processing
find_supervisory_authorityFinds the competent German data protection supervisory authority by federal state, postcode (PLZ) of the main establishment or authority ID, with competence, website, key figures from the latest activity report (with evidence links), focus topics and notes for SMEs. In Bavaria, p
get_cyber_threat_pictureSummarises how many organisations from Germany ransomware groups have named on their leak sites in the last 30 days or 12 months, by industry and group, with the frag.hugo monthly assessment and method. Counts are perpetrator claims from the RansomLook inventory (CIRCL, CC BY 4.0
check_email_securityChecks the public DNS records that protect a domain against e-mail spoofing: SPF, DKIM (common selectors), DMARC, DNSSEC, MTA-STS, TLS-RPT, BIMI and CAA. Returns an overall assessment, one finding per check and recommendations. Use it for a company domain, not for single mailboxe
start_website_checkStarts the free frag.hugo website check (Hugo Check) for a public URL: cookies and tracking before consent, consent banner, Google Fonts, privacy policy and imprint, TLS and security headers, e-mail records, accessibility and shop duties. Returns the result directly if it is read
get_website_check_resultReturns the result of a website check started with start_website_check: status per category and up to eight most important findings with explanation, or "still running". Only scans started through this connector within the last 24 hours can be fetched.
vendor_profileCollects what frag.hugo publishes about a vendor for a due-diligence note: e-mail security of its domain, the GDPR review verdict if one exists, the subprocessor monitor entry, documented GDPR fines matched by company name, incidents published on fraghugo.de, and optionally a web
my_privacy_deadlinesLists the open data protection deadlines of the organisation connected to this frag.hugo account: data breaches with their 72-hour reporting deadline (Art. 33 GDPR), data subject requests with their one-month deadline (Art. 12(3) GDPR, incl. extensions) and records of processing
report_data_breachRecords a personal data breach in the connected frag.hugo account and starts the 72-hour deadline of Art. 33 GDPR. Step 1 (without `bestaetigung`): returns a preview with the deadline, the competent supervisory authority of the organisation, missing mandatory details for that aut
create_data_subject_requestLogs a data subject request (access, erasure, rectification, restriction, portability, objection) in the connected frag.hugo account and calculates the one-month deadline of Art. 12(3) GDPR. Step 1 (without `bestaetigung`): preview with the deadline, the possible extension, a not
plan_software_introductionPrepares the data protection paperwork for introducing a new software or cloud service in the connected frag.hugo account. Step 1 (without `bestaetigung`): preview with the frag.hugo GDPR test result for the service (if reviewed), the matching template for the record of processin
Wir prüfen Informationen, die jeder sehen kann; den Code haben wir nicht gelesen. Checks, die nicht zutreffen, werden nicht mitgezählt. · Geprüft am 9. Nov. 2026
Der Registry-Name wurde über die Domain fraghugo.de bestätigt (die Registry prüft, wem die Domain gehört)
Dieses Repo haben wir noch nicht von GitHub gelesen
Dieses Repo haben wir noch nicht von GitHub gelesen
Antwort in 188 ms (HTTP 200)
Keine Anmeldung nötig
Wir haben 14 Tool-Beschreibungen gelesen und keine versteckten Anweisungen an die KI gefunden
Verglichen mit allen aktiven Servern dieser Kategorie in der Registry. Sterne zählen nur, wenn dem Herausgeber das Repo gehört.
Er hat 3 von 3 zutreffenden Basischecks bestanden. Den Code haben wir nicht gelesen. Bevor du einen Schlüssel oder Token hinzufügst, sieh nach, welche Zugriffe der Server verlangt, und nutze einen Schlüssel, der nur die Berechtigungen hat, die du brauchst.
Die Registry nennt keinen erforderlichen Schlüssel, manche Server bitten dich aber bei der ersten Nutzung, dich anzumelden.
Er läuft in der Cloud des Entwicklers. Du verbindest dich übers Internet, ohne etwas zu installieren, aber was du sendest, läuft über die Server des Entwicklers.
Das GitHub-Repo wurde zuletzt – geändert, und die neueste Version (1.0.0) kam heute in die Registry.
Apps, die MCP unterstützen, etwa Claude Desktop, Claude Code, Cursor und VS Code. Er verbindet sich per URL, also funktionieren auch Apps, die Remote-MCP-Server akzeptieren, zum Beispiel ChatGPT im Entwicklermodus.
In derselben Kategorie: Private Law Wiki, Thai Legal, Slovenia Company Check
Server derselben Kategorie von anderen Entwicklern, sortiert nach Sternen.
So liest du eine Karte:↓ Downloads pro Wochei★ GitHub-SterneiDrei Säulen: Bewertungen · Checks · NutzungiAktualisiert = neueste Version in der Registry veröffentlichti
Sourced answers, search and bank-case assessment for wiki.private.law by the Mothership runtime.
Thai legal search MCP — statutes, gazette, opinions, court cases. Pro: court-jurisdiction rulings.
Slovenia company checks: status, bankruptcy flag from the name, VAT revocation, LEI and sanctions.
Unverändert aus dem Repo des Entwicklers übernommen. PopNx MCP hat den Inhalt weder geprüft noch empfiehlt es ihn. HTML, Bilder und Skripte wurden entfernt. Links führen von dieser Website weg.
German data protection in Claude: GDPR fines, deadlines, software checks and supervisory authorities. With a frag.hugo account, Claude also fills in your data protection records for you: records of processing, vendors and processor agreements, TOMs, employees, trainings, phishing exercises and more.
This plugin connects Claude to the frag.hugo MCP server (https://mcp.fraghugo.de/mcp) and adds six skills that carry the working method of a German data protection officer (Datenschutzbeauftragter): which questions to ask in which order, and when to call which tool.
Skills
| Skill | Use it when |
|---|---|
datenpanne-einschaetzen | A personal data breach happened and you need to know whether and where to report it (Art. 33/34 GDPR, EDPB Guidelines 9/2022, 72-hour deadline, the competent German state authority and its mandatory fields). |
betroffenenanfrage-beantworten | Someone asked for access, erasure, rectification, restriction, portability or objected (Art. 12, 15–22 GDPR): identity check, one-month deadline and extension, exceptions, reply draft. |
ki-einsatz-pruefen | You want to introduce or review an AI tool: GDPR fitness from the frag.hugo DSGVO-Prüfstand, role and risk class under the EU AI Act, prohibited practices, Art. 50 transparency, Art. 4 AI literacy, documentation. |
datenschutz-einrichten | You are setting up data protection in frag.hugo: company details, vendors (DPA/AVV), records of processing (VVT), TOMs, employees and training, in that order, from the frag.hugo templates, ending with the review by your data protection officer. |
mitarbeitende-schulen | New employees join, or trainings are due: add people, invite them, assign Hugo Learn trainings and Hugo Safe safety briefings, send reminders, hand out policies for acknowledgement. |
sicherheitsfragebogen-beantworten | A customer sent you a security questionnaire: every answer comes from a documented fact in frag.hugo with its source; gaps are listed, not guessed. |
Tools without an account: GDPR fines search, compliance deadlines (GDPR, NIS2/BSIG, AI Act, CRA), software GDPR check (DSGVO-Prüfstand), subprocessor changes, supervisory authority finder, ransomware picture for Germany, email security check, website privacy check and vendor profile.
Tools with a frag.hugo account: your status and next step, open deadlines, data breaches and data subject requests, and filling in every area you have booked: records of processing (VVT), vendors and processor agreements (AVV), TOMs, retention rules, DPIA, privacy policy, AI register, NIS2, CRA products, employees, Hugo Learn trainings and Hugo Safe briefings, policies for acknowledgement, phishing exercises, the onboarding questionnaire and your security profile. Claude never gets more rights than you have in the app. Anything that e-mails people, deletes or submits shows a preview first and runs only after you confirm. Every change is logged; created, changed or deleted entries can be restored for 90 days (in Claude with undo_changes, again with a preview first, in the app under Settings → AI assistants, in German „Einstellungen → KI-Assistenten“). Your data protection officer reviews what you submit.
Commands: in Claude, the server also offers six guided workflows (set up data protection, onboard employees, introduce software, plan a phishing exercise, answer a security questionnaire, annual check).
In Claude Code:
/plugin marketplace add Jens-KI-007/fraghugo-claude-plugin
/plugin install fraghugo@fraghugo
Or load it for one session from a local copy: claude --plugin-dir ./fraghugo-claude-plugin.
The public tools work right away. For the account tools, run /mcp, choose fraghugo and sign in with your frag.hugo account in the browser.
The skills and tools give orientation with sources. They are not legal advice for the individual case and they do not decide for you whether a breach must be reported — that assessment stays with the controller. Nothing is sent to a supervisory authority or to a data subject by this plugin.
Controller: frag.hugo Informationssicherheit GmbH, Hamburg, Germany — imprint and privacy notice: https://www.fraghugo.de/impressum/ and https://www.fraghugo.de/en/privacy-plugins/ (full German policy: https://www.fraghugo.de/datenschutzerklaerung/). Contact: support@fraghugo.de.
start_website_check, and vendor_profile when asked to check the website): the URL is sent to the frag.hugo scanner, which loads the website like a visitor. As with every Hugo Check, the scanner logs the URL, keeps the result available for retrieval, and stores which third-party services it found per domain. For one hour a hash of the URL is kept to return the same scan to repeated requests.MIT — see LICENSE.