Compliance Checker

@guardbee/mcp-compliance-checker

🇬🇧 English | 🇹🇷 Türkçe | 🇨🇳 中文 | 🇯🇵 日本語 | 🇰🇷 한국어 | 🇧🇷 Português | 🇪🇸 Español | 🇩🇪 Deutsch

An MCP server that runs KVKK (Turkish data protection law), GDPR, and CCPA compliance checks via the GuardBee API, analyzes privacy policies, and compares legal requirements. Three of its tools work without an API key.

Telemetry is off by default. With GUARDBEE_TELEMETRY=1 it sends the server, tool, success, duration and short parameter values such as a file path; longer strings and fields like content, token or password are replaced with a placeholder. See @guardbee/mcp-telemetry.

A GuardBee API key is required for the check_compliance and get_compliance_findings tools. Get one at app.guardbee.ai/developers.

---

Features

• KVKK / GDPR / CCPA Scanning — triggers a compliance-focused scan via the GuardBee API and fetches findings
• Privacy Policy Analysis — fetches policy text from a URL; 10 compliance signals, a score (0-100), and a letter grade
• Cookie Banner Detection — detects OneTrust, Cookiebot, Axeptio, and 10+ CMP platforms
• Requirements Catalog — 21 requirements with legal-article references across KVKK (9), GDPR (8), CCPA (4)
• Framework Comparison — common and differing articles across KVKK / GDPR / CCPA
• Key-Free Tools — analyze_privacy_policy, list_requirements, compare_frameworks work offline

---

Quick Start

npm install -g @guardbee/mcp-compliance-checker

Add to claude_desktop_config.json:

{

"mcpServers": { "guardbee-compliance-checker": { "command": "npx", "args": ["-y", "@guardbee/mcp-compliance-checker"], "env": { "GUARDBEE_API_KEY": "gb_..." } } } }

Get your API key at app.guardbee.ai/developers.

---

MCP Tools

Example Usage

You can ask Claude:

"Check example.com's KVKK compliance"

"List GDPR requirements"

"Compare the differences between KVKK and GDPR"

"Analyze the privacy policy at https://example.com/privacy"

Example Output

Privacy Policy Analysis: https://example.com/privacy

────────────────────────────────────────────────────── Score : 72/100 Grade: C

✅ Data controller identity disclosed ✅ Purpose of processing stated ✅ Retention periods mentioned ✅ Cookie policy present ❌ Legal basis for processing not stated ❌ Data subject rights not listed (access, erasure, portability) ❌ International transfer safeguards missing ❌ Contact information for DPO missing

Recommendation: Add legal basis statements and data subject rights section.

---

Supported Frameworks

---

Privacy Policy Scoring

The analyze_privacy_policy tool looks for 10 signals in the policy text:

Grades: A (90-100) · B (75-89) · C (60-74) · D (45-59) · F (0-44)

---

Environment Variables

---

Development

npm install

npm test # unit tests npm run build # TypeScript compile

---

License

MIT — GuardBee

Feedback

Questions, ideas, or a false positive? Start a thread in GitHub Discussions or open an issue. If GuardBee is useful to you, a ⭐ on the repository helps others find it.