Tilt Base
Tilt Legal's managed legal skills and your organisation's custom skills, for your AI agent.
作者による説明(英語の原文)
GDPR platform: your assistant fills in VVT, TOMs, AVV and DSFA, your DSB reviews them.
この3つを1つのスコアにまとめることはしません。意見、測定、人気はそれぞれ別のものだからです。
このサーバーのやさしい解説はまだ書いていません。以下はレジストリから読み取った事実です。
使っているAIアプリを選んで、設定をコピーしてください。
必要なもの
どのアプリを使っていますか?
上でアプリを選んでください。選んだアプリを覚えておくので、次からはボタンに「…にインストール」と表示されます。
ウェブ、デスクトップ、モバイルのClaudeで使えます:
https://mcp.fraghugo.de/mcpターミナルでこれを実行します
claude mcp add --transport http frag-hugo https://mcp.fraghugo.de/mcpプロジェクトの .cursor/mcp.json、または ~/.cursor/mcp.json に貼り付けます
{
"mcpServers": {
"frag-hugo": {
"url": "https://mcp.fraghugo.de/mcp"
}
}
}ブラウザがアプリを開いてよいか確認し、そのあとアプリが設定を表示して確認を求めます。キーの値は空欄のままなので、自分で入力してください。
プロジェクトの .vscode/mcp.json に貼り付けます
{
"servers": {
"frag-hugo": {
"type": "http",
"url": "https://mcp.fraghugo.de/mcp"
}
}
}ブラウザがアプリを開いてよいか確認し、そのあとアプリが設定を表示して確認を求めます。キーの値は空欄のままなので、自分で入力してください。
ChatGPTがつなげるのは、インターネット上のサーバーだけです:
https://mcp.fraghugo.de/mcpメニューの名前は、プランや時期によって少し違うことがあります。
選んだアプリは、この端末のCookieに保存されます。アカウントは不要です。
この設定は、作者のレジストリ登録情報から作成しています。READMEと違う場合は、READMEに従ってください。
ツールの名前と説明は、サーバーが2026年11月9日に返したそのままの内容です。書いたのは作者で、私たちではありません。プレーンテキストとして表示しています。
search_gdpr_finesSearches the frag.hugo database of documented GDPR fines (Germany and Europe), each case with authority, amount, GDPR articles, a short summary and the official source. Use it for questions such as "which fines were imposed for Art. 32" or "fines against telecom companies in Germ
get_compliance_deadlinesLists dated compliance deadlines from the frag.hugo deadline calendar (GDPR, NIS2, AI Act, CRA, DORA, Data Act, accessibility act and more), each with legal provision, status, what to do and the official source. Without date filters it returns the next upcoming deadlines from tod
check_software_gdprLooks up whether frag.hugo has reviewed a software or cloud service for GDPR use in companies (contract partner, data processing agreement, subprocessors, data location, third-country transfer, AI training, certificates, admin controls, deletion, data subject rights). Returns the
get_subprocessor_changesShows the subprocessor lists of 17 widely used cloud providers (Microsoft 365, Google Workspace, AWS, Salesforce, HubSpot, Stripe and others) as monitored daily by frag.hugo: date of the last change, number of entries, names and links to the official list and the data processing
find_supervisory_authorityFinds the competent German data protection supervisory authority by federal state, postcode (PLZ) of the main establishment or authority ID, with competence, website, key figures from the latest activity report (with evidence links), focus topics and notes for SMEs. In Bavaria, p
get_cyber_threat_pictureSummarises how many organisations from Germany ransomware groups have named on their leak sites in the last 30 days or 12 months, by industry and group, with the frag.hugo monthly assessment and method. Counts are perpetrator claims from the RansomLook inventory (CIRCL, CC BY 4.0
check_email_securityChecks the public DNS records that protect a domain against e-mail spoofing: SPF, DKIM (common selectors), DMARC, DNSSEC, MTA-STS, TLS-RPT, BIMI and CAA. Returns an overall assessment, one finding per check and recommendations. Use it for a company domain, not for single mailboxe
start_website_checkStarts the free frag.hugo website check (Hugo Check) for a public URL: cookies and tracking before consent, consent banner, Google Fonts, privacy policy and imprint, TLS and security headers, e-mail records, accessibility and shop duties. Returns the result directly if it is read
get_website_check_resultReturns the result of a website check started with start_website_check: status per category and up to eight most important findings with explanation, or "still running". Only scans started through this connector within the last 24 hours can be fetched.
vendor_profileCollects what frag.hugo publishes about a vendor for a due-diligence note: e-mail security of its domain, the GDPR review verdict if one exists, the subprocessor monitor entry, documented GDPR fines matched by company name, incidents published on fraghugo.de, and optionally a web
my_privacy_deadlinesLists the open data protection deadlines of the organisation connected to this frag.hugo account: data breaches with their 72-hour reporting deadline (Art. 33 GDPR), data subject requests with their one-month deadline (Art. 12(3) GDPR, incl. extensions) and records of processing
report_data_breachRecords a personal data breach in the connected frag.hugo account and starts the 72-hour deadline of Art. 33 GDPR. Step 1 (without `bestaetigung`): returns a preview with the deadline, the competent supervisory authority of the organisation, missing mandatory details for that aut
create_data_subject_requestLogs a data subject request (access, erasure, rectification, restriction, portability, objection) in the connected frag.hugo account and calculates the one-month deadline of Art. 12(3) GDPR. Step 1 (without `bestaetigung`): preview with the deadline, the possible extension, a not
plan_software_introductionPrepares the data protection paperwork for introducing a new software or cloud service in the connected frag.hugo account. Step 1 (without `bestaetigung`): preview with the frag.hugo GDPR test result for the service (if reviewed), the matching template for the record of processin
誰でも見られる情報をチェックしており、コードは読んでいません。当てはまらない項目は数に入れていません。 · 2026年11月9日にチェック
レジストリ名はドメイン fraghugo.de で確認済みです(レジストリがドメインの所有を確認しています)
このリポジトリはまだGitHubから読み取っていません
このリポジトリはまだGitHubから読み取っていません
188ミリ秒で応答(HTTP 200)
サインイン不要
14件のツールの説明を読み、AIへの隠れた指示は見つかりませんでした
レジストリでこのカテゴリにある有効なすべてのサーバーと比較しています。スターは、公開者がリポジトリの所有者である場合だけ数えます。
当てはまる基本チェック3項目のうち3項目に合格しました。コードは読んでいません。キーやトークンを追加する前に、サーバーがどんなアクセスを求めているかを確認し、必要な権限だけを持つキーを使ってください。
レジストリには必須のキーは載っていません。ただし、最初に使うときにサインインを求めるサーバーもあります。
作者のクラウドで動きます。インストール不要でインターネット経由でつながりますが、送った内容は作者のサーバーを通ります。
GitHubリポジトリの最終更新は–、最新バージョン(1.0.0)がレジストリに届いたのは今日です。
Claude Desktop、Claude Code、Cursor、VS CodeなどのMCP対応アプリで使えます。URLでつながるので、リモートMCPサーバーに対応したアプリ(開発者モードのChatGPTなど)でも使えます。
同じカテゴリには:Tilt Base, Korea Data MCP, CaseNode Case Law API
同じカテゴリで、ほかの作者が作ったサーバー。スターの多い順。
カードの見方:↓ 週あたりのダウンロードi★ GitHubスターi3つの柱:レビュー · チェック · 利用状況i更新=最新バージョンをレジストリに公開した日i
Tilt Legal's managed legal skills and your organisation's custom skills, for your AI agent.
Korean public data: corporate filings, stock prices, apartments, statutes, economic statistics
UK case law: 290k+ judgments, 2.5M citation links, citation validation. Free key at casenode.ai
作者のリポジトリから書かれたとおりにコピーしたものです。PopNx MCPは内容を確認・推奨していません。HTML、画像、スクリプトは取り除いています。リンクはこのサイトの外へ移動します。
German data protection in Claude: GDPR fines, deadlines, software checks and supervisory authorities. With a frag.hugo account, Claude also fills in your data protection records for you: records of processing, vendors and processor agreements, TOMs, employees, trainings, phishing exercises and more.
This plugin connects Claude to the frag.hugo MCP server (https://mcp.fraghugo.de/mcp) and adds six skills that carry the working method of a German data protection officer (Datenschutzbeauftragter): which questions to ask in which order, and when to call which tool.
Skills
| Skill | Use it when |
|---|---|
datenpanne-einschaetzen | A personal data breach happened and you need to know whether and where to report it (Art. 33/34 GDPR, EDPB Guidelines 9/2022, 72-hour deadline, the competent German state authority and its mandatory fields). |
betroffenenanfrage-beantworten | Someone asked for access, erasure, rectification, restriction, portability or objected (Art. 12, 15–22 GDPR): identity check, one-month deadline and extension, exceptions, reply draft. |
ki-einsatz-pruefen | You want to introduce or review an AI tool: GDPR fitness from the frag.hugo DSGVO-Prüfstand, role and risk class under the EU AI Act, prohibited practices, Art. 50 transparency, Art. 4 AI literacy, documentation. |
datenschutz-einrichten | You are setting up data protection in frag.hugo: company details, vendors (DPA/AVV), records of processing (VVT), TOMs, employees and training, in that order, from the frag.hugo templates, ending with the review by your data protection officer. |
mitarbeitende-schulen | New employees join, or trainings are due: add people, invite them, assign Hugo Learn trainings and Hugo Safe safety briefings, send reminders, hand out policies for acknowledgement. |
sicherheitsfragebogen-beantworten | A customer sent you a security questionnaire: every answer comes from a documented fact in frag.hugo with its source; gaps are listed, not guessed. |
Tools without an account: GDPR fines search, compliance deadlines (GDPR, NIS2/BSIG, AI Act, CRA), software GDPR check (DSGVO-Prüfstand), subprocessor changes, supervisory authority finder, ransomware picture for Germany, email security check, website privacy check and vendor profile.
Tools with a frag.hugo account: your status and next step, open deadlines, data breaches and data subject requests, and filling in every area you have booked: records of processing (VVT), vendors and processor agreements (AVV), TOMs, retention rules, DPIA, privacy policy, AI register, NIS2, CRA products, employees, Hugo Learn trainings and Hugo Safe briefings, policies for acknowledgement, phishing exercises, the onboarding questionnaire and your security profile. Claude never gets more rights than you have in the app. Anything that e-mails people, deletes or submits shows a preview first and runs only after you confirm. Every change is logged; created, changed or deleted entries can be restored for 90 days (in Claude with undo_changes, again with a preview first, in the app under Settings → AI assistants, in German „Einstellungen → KI-Assistenten“). Your data protection officer reviews what you submit.
Commands: in Claude, the server also offers six guided workflows (set up data protection, onboard employees, introduce software, plan a phishing exercise, answer a security questionnaire, annual check).
In Claude Code:
/plugin marketplace add Jens-KI-007/fraghugo-claude-plugin
/plugin install fraghugo@fraghugo
Or load it for one session from a local copy: claude --plugin-dir ./fraghugo-claude-plugin.
The public tools work right away. For the account tools, run /mcp, choose fraghugo and sign in with your frag.hugo account in the browser.
The skills and tools give orientation with sources. They are not legal advice for the individual case and they do not decide for you whether a breach must be reported — that assessment stays with the controller. Nothing is sent to a supervisory authority or to a data subject by this plugin.
Controller: frag.hugo Informationssicherheit GmbH, Hamburg, Germany — imprint and privacy notice: https://www.fraghugo.de/impressum/ and https://www.fraghugo.de/en/privacy-plugins/ (full German policy: https://www.fraghugo.de/datenschutzerklaerung/). Contact: support@fraghugo.de.
start_website_check, and vendor_profile when asked to check the website): the URL is sent to the frag.hugo scanner, which loads the website like a visitor. As with every Hugo Check, the scanner logs the URL, keeps the result available for retrieval, and stores which third-party services it found per domain. For one hour a hash of the URL is kept to return the same scan to repeated requests.MIT — see LICENSE.