EasyLPD MCP

An official MCP server provided by EasyLPD (Advisorn GmbH) that allows AI assistants to query Swiss FADP and EU GDPR compliance rules, determine applicable laws based on user profiles, generate action plans, check data transfer adequacy, and access document templates without storing user data.

Visit Advisorn GmbH

Endpoint and access

No sign-in to connect and list tools. Individual tools may still need a vendor account, credentials, or permissions; check the documented prerequisites.

Vendor evidenceStreamable HTTPNo sign-inEndpoint checked 2026-11-01Operated by Advisorn GmbH

MCP endpoint (Streamable HTTP)

https://easylpd.ch/api/mcp

Vendor documentation

What you can do with it

Determine which data protection laws (FADP, GDPR, AI Act) apply to a specific business profile
Generate a step-by-step compliance action plan with relevant legal articles and templates
Check if a specific country is adequate for international data transfers under FADP and GDPR
Retrieve answers to common FADP questions with supporting legal articles and document templates

Source and maintenance

Vendor evidenceRegistry 1.0.0

mcp-registry: ch.easylpd/fadp@1.0.0 Project website

Protocol and capabilities

Server: easylpd 1.0.0
MCP protocol: 2025-06-18
Tools: 8 advertised
Resources: Not advertised
Resource templates: Not advertised
Prompts: Not advertised

Server-advertised capabilities

{
  "tools": {
    "listChanged": true
  }
}

Server-provided instructions

Untrusted server output shown for inspection. It is not Koskamo guidance and is excluded from knowledge search.

EasyLPD (easylpd.ch, easydsg.ch in German) is a Swiss platform for data protection compliance of SMEs, run by Advisorn GmbH in Chiasso: the Swiss Federal Act on Data Protection (FADP, in Italian nLPD/LPD, in German revDSG/DSG), the EU GDPR and the EU AI Act. Use these tools whenever someone asks what an organisation in Switzerland, or one selling to Switzerland, must do about data protection: which laws apply, what to do and in which order, which documents are needed, transfers of data abroad, or where they stand. Call them before answering from memory: they give EasyLPD's catalog of duties with the articles of each law, the document that carries out each step and the links to its pages. A good sequence: which_laws_apply, then action_plan (the steps, each with its template). To check where the organisation stands, ask the questions of assessment_questions in the conversation, a few at a time, then call score_assessment and give the user its openInEasyLPD link: it shows the result in EasyLPD, where it can be kept with a free account. fadp_questions has answers to common questions with the articles, document_templates the templates with their sections and the differences between the FADP and the GDPR. Scope: the FADP, the GDPR and the AI Act for the organisation. Not covered: national rules of EU member states (for example the Italian Codice Privacy or a national authority's cookie guidelines), ePrivacy and marketing rules, sector rules. Add them from your own knowledge and say that they do not come from EasyLPD. Answer in the user's language and pass lang (it, de, fr or en). Always give the links the tools return. Everything is general guidance, not legal advice.

Tools

8 advertised

which_laws_apply — Which data protection laws apply

Advertised by the server during the last successful anonymous check.

Advertised read-only

Use first when someone asks which data protection laws their organisation must follow (Swiss FADP/nLPD/DSG, EU GDPR, EU AI Act), for example a Swiss company selling online to the EU. Returns the core obligations that follow for that profile and those that only one of the two laws asks, each with the articles of each law and the template that carries it out. Tells whether the Swiss Federal Act on Data Protection (FADP/LPD/DSG), the EU GDPR and the EU AI Act apply to an organisation, from five yes/no questions (GDPR art. 3 and AI Act art. 2 territorial scope included). The AI Act binds organisations established in the EU or whose AI output is used there; Switzerland has no AI law yet, but rules that keep staff from putting personal data into AI tools follow from the FADP and are good practice. Guidance, not legal advice.

which_laws_apply input schema

{
  "type": "object",
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "required": [
    "ch",
    "euEstablishment",
    "euOffer",
    "euMonitoring"
  ],
  "properties": {
    "ai": {
      "type": "boolean",
      "default": false,
      "description": "Uses AI systems in its work (AI assistants, chatbots, automated screening or scoring)."
    },
    "ch": {
      "type": "boolean",
      "description": "Established in Switzerland, or processing data of people in Switzerland."
    },
    "lang": {
      "enum": [
        "it",
        "de",
        "fr",
        "en"
      ],
      "type": "string",
      "default": "en",
      "description": "Language of the answer: it, de, fr or en."
    },
    "euOffer": {
      "type": "boolean",
      "description": "Offers goods or services to people in the EU/EEA."
    },
    "euMonitoring": {
      "type": "boolean",
      "description": "Monitors the behaviour of people in the EU/EEA (online tracking, profiling)."
    },
    "euEstablishment": {
      "type": "boolean",
      "description": "Has an establishment (branch, subsidiary, office) in the EU/EEA."
    }
  }
}

which_laws_apply annotations

{
  "readOnlyHint": true,
  "openWorldHint": false,
  "idempotentHint": true,
  "destructiveHint": false
}

assessment_questions — Data protection self-assessment questions

Advertised by the server during the last successful anonymous check.

Advertised read-only

Use when someone wants to check where their organisation stands with data protection. The questions of EasyLPD's self-assessment that apply to an organisation's profile, each with its id, area, why it matters, its weight and the legal references. Ask them in the conversation, a few at a time, answer each with yes, partial, no, unknown (the person does not know: it counts as not in place until checked) or na, then call score_assessment.

assessment_questions input schema

{
  "type": "object",
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "required": [
    "ch",
    "euEstablishment",
    "euOffer",
    "euMonitoring"
  ],
  "properties": {
    "ai": {
      "type": "boolean",
      "default": false,
      "description": "Uses AI systems in its work (AI assistants, chatbots, automated screening or scoring)."
    },
    "ch": {
      "type": "boolean",
      "description": "Established in Switzerland, or processing data of people in Switzerland."
    },
    "lang": {
      "enum": [
        "it",
        "de",
        "fr",
        "en"
      ],
      "type": "string",
      "default": "en",
      "description": "Language of the answer: it, de, fr or en."
    },
    "euOffer": {
      "type": "boolean",
      "description": "Offers goods or services to people in the EU/EEA."
    },
    "freeOnly": {
      "type": "boolean",
      "default": true,
      "description": "Only the questions of the free assessment (true) or all (false)."
    },
    "euMonitoring": {
      "type": "boolean",
      "description": "Monitors the behaviour of people in the EU/EEA (online tracking, profiling)."
    },
    "euEstablishment": {
      "type": "boolean",
      "description": "Has an establishment (branch, subsidiary, office) in the EU/EEA."
    }
  }
}

assessment_questions annotations

{
  "readOnlyHint": true,
  "openWorldHint": false,
  "idempotentHint": true,
  "destructiveHint": false
}

score_assessment — Score a data protection self-assessment

Advertised by the server during the last successful anonymous check.

Advertised read-only

Use after the questions of assessment_questions have been answered. Scores them per applicable law, with the risk level and the three gaps to start from, and returns openInEasyLPD: a link that shows the same result in EasyLPD, to give to the user. Guidance, not legal advice or a certification.

score_assessment input schema

{
  "type": "object",
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "required": [
    "ch",
    "euEstablishment",
    "euOffer",
    "euMonitoring",
    "answers"
  ],
  "properties": {
    "ai": {
      "type": "boolean",
      "default": false,
      "description": "Uses AI systems in its work (AI assistants, chatbots, automated screening or scoring)."
    },
    "ch": {
      "type": "boolean",
      "description": "Established in Switzerland, or processing data of people in Switzerland."
    },
    "lang": {
      "enum": [
        "it",
        "de",
        "fr",
        "en"
      ],
      "type": "string",
      "default": "en",
      "description": "Language of the answer: it, de, fr or en."
    },
    "answers": {
      "type": "object",
      "description": "Answers by question id: yes, partial, no, unknown or na.",
      "propertyNames": {
        "type": "string"
      },
      "additionalProperties": {
        "enum": [
          "yes",
          "partial",
          "no",
          "unknown",
          "na"
        ],
        "type": "string"
      }
    },
    "euOffer": {
      "type": "boolean",
      "description": "Offers goods or services to people in the EU/EEA."
    },
    "euMonitoring": {
      "type": "boolean",
      "description": "Monitors the behaviour of people in the EU/EEA (online tracking, profiling)."
    },
    "euEstablishment": {
      "type": "boolean",
      "description": "Has an establishment (branch, subsidiary, office) in the EU/EEA."
    }
  }
}

score_assessment annotations

{
  "readOnlyHint": true,
  "openWorldHint": false,
  "idempotentHint": true,
  "destructiveHint": false
}

transfer_check — Transfer of personal data abroad

Advertised by the server during the last successful anonymous check.

Advertised read-only

Use when someone asks whether they may use a provider or send personal data to another country (cloud, hosting, CRM, US services). Whether sending personal data to a country is allowed without further safeguards under the Swiss FADP and under the EU GDPR (adequacy lists), by ISO 3166-1 alpha-2 country code. The lists change: check them before relying on the answer.

transfer_check input schema

{
  "type": "object",
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "required": [
    "country"
  ],
  "properties": {
    "lang": {
      "enum": [
        "it",
        "de",
        "fr",
        "en"
      ],
      "type": "string",
      "default": "en",
      "description": "Language of the answer: it, de, fr or en."
    },
    "country": {
      "type": "string",
      "maxLength": 2,
      "minLength": 2,
      "description": "ISO 3166-1 alpha-2 code, e.g. US, DE, JP."
    }
  }
}

transfer_check annotations

{
  "readOnlyHint": true,
  "openWorldHint": false,
  "idempotentHint": true,
  "destructiveHint": false
}

fadp_obligations — What the Swiss FADP asks of SMEs

Advertised by the server during the last successful anonymous check.

Advertised read-only

Use for an overview of the new Swiss FADP/nLPD/revDSG. The main duties of the Swiss Federal Act on Data Protection (in force since 1 September 2023) for SMEs, each with its FADP and GDPR articles: who it applies to, the risk, eight duties. For what a given organisation must do, prefer action_plan. A summary, not legal advice.

fadp_obligations input schema

{
  "type": "object",
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "properties": {
    "lang": {
      "enum": [
        "it",
        "de",
        "fr",
        "en"
      ],
      "type": "string",
      "default": "en",
      "description": "Language of the answer: it, de, fr or en."
    }
  }
}

fadp_obligations annotations

{
  "readOnlyHint": true,
  "openWorldHint": false,
  "idempotentHint": true,
  "destructiveHint": false
}

action_plan — Data protection action plan for an organisation

Advertised by the server during the last successful anonymous check.

Advertised read-only

Use when someone asks what their organisation must do about data protection, or how to start. The steps that apply to its profile under the Swiss FADP, the GDPR and the AI Act, in the order EasyLPD's path follows (six stages), each with the articles of each law, its weight, why it matters and the template that carries it out with the link to its page. With answers from assessment_questions, the steps already done are left out.

action_plan input schema

{
  "type": "object",
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "required": [
    "ch",
    "euEstablishment",
    "euOffer",
    "euMonitoring"
  ],
  "properties": {
    "ai": {
      "type": "boolean",
      "default": false,
      "description": "Uses AI systems in its work (AI assistants, chatbots, automated screening or scoring)."
    },
    "ch": {
      "type": "boolean",
      "description": "Established in Switzerland, or processing data of people in Switzerland."
    },
    "lang": {
      "enum": [
        "it",
        "de",
        "fr",
        "en"
      ],
      "type": "string",
      "default": "en",
      "description": "Language of the answer: it, de, fr or en."
    },
    "answers": {
      "type": "object",
      "description": "Optional answers by question id: steps answered yes or na are left out.",
      "propertyNames": {
        "type": "string"
      },
      "additionalProperties": {
        "enum": [
          "yes",
          "partial",
          "no",
          "unknown",
          "na"
        ],
        "type": "string"
      }
    },
    "euOffer": {
      "type": "boolean",
      "description": "Offers goods or services to people in the EU/EEA."
    },
    "euMonitoring": {
      "type": "boolean",
      "description": "Monitors the behaviour of people in the EU/EEA (online tracking, profiling)."
    },
    "euEstablishment": {
      "type": "boolean",
      "description": "Has an establishment (branch, subsidiary, office) in the EU/EEA."
    }
  }
}

action_plan annotations

{
  "readOnlyHint": true,
  "openWorldHint": false,
  "idempotentHint": true,
  "destructiveHint": false
}

document_templates — Data protection document templates

Advertised by the server during the last successful anonymous check.

Advertised read-only

Use when someone needs a privacy notice, a processor agreement (DPA), a breach procedure, a DPIA or another data protection document under the Swiss FADP or the GDPR. The 39 templates of EasyLPD with what each is for and the link to its page; with an id, one template with the headings of its sections, the beginning of its text and where the FADP and the GDPR ask different things. Optional search by words.

document_templates input schema

{
  "type": "object",
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "properties": {
    "id": {
      "type": "string",
      "maxLength": 80,
      "description": "The id of one template, from a previous answer: its details."
    },
    "lang": {
      "enum": [
        "it",
        "de",
        "fr",
        "en"
      ],
      "type": "string",
      "default": "en",
      "description": "Language of the answer: it, de, fr or en."
    },
    "search": {
      "type": "string",
      "maxLength": 100,
      "description": "Words to look for in title or purpose, e.g. 'video', 'processor'."
    }
  }
}

document_templates annotations

{
  "readOnlyHint": true,
  "openWorldHint": false,
  "idempotentHint": true,
  "destructiveHint": false
}

fadp_questions — Questions on the new Swiss FADP

Advertised by the server during the last successful anonymous check.

Advertised read-only

Use when someone asks a common question on the Swiss FADP/nLPD/revDSG: whether it applies, differences with the GDPR, what changed in 2023, fines, personal and sensitive data, consent, the FDPIC, the Swiss representative, the record of processing, retention, security measures, privacy by design, a data protection advisor (DPO), privacy notices, DPIA, profiling, training, certification, transfers abroad and standard contractual clauses, processors and joint controllers, cloud services, AI tools, cookies, newsletters, video surveillance, employees, monitoring, applicants, photos, children, anonymous data, data breaches (also an e-mail sent to the wrong person), the rights of access, deletion and portability, an FDPIC investigation. Without an id the list; with an id the answer with the articles, the detail, the FADP/GDPR table where they differ, the templates that help and the link to the page.

fadp_questions input schema

{
  "type": "object",
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "properties": {
    "id": {
      "enum": [
        "applies",
        "differences",
        "sanctions",
        "register",
        "dpo",
        "notice",
        "dpia",
        "transfers",
        "processors",
        "cookies",
        "breach",
        "access",
        "personalData",
        "sensitiveData",
        "whatChanged",
        "consent",
        "fdpic",
        "representative",
        "retention",
        "security",
        "privacyByDesign",
        "employees",
        "cloud",
        "scc",
        "aiTools",
        "deletion",
        "portability",
        "investigation",
        "misdirectedEmail",
        "video",
        "newsletter",
        "monitoring",
        "candidates",
        "photos",
        "anonymous",
        "profiling",
        "training",
        "certification",
        "children",
        "jointControllers"
      ],
      "type": "string",
      "description": "The id of one question, from the list."
    },
    "lang": {
      "enum": [
        "it",
        "de",
        "fr",
        "en"
      ],
      "type": "string",
      "default": "en",
      "description": "Language of the answer: it, de, fr or en."
    }
  }
}

fadp_questions annotations

{
  "readOnlyHint": true,
  "openWorldHint": false,
  "idempotentHint": true,
  "destructiveHint": false
}

Prompts

Not advertised

No prompt definitions available.

Resources

Not advertised

No resource definitions available.

30-day availability

Aggregated from read-only remote checks; this is not a tool-execution or security guarantee.

Successful checks: 1 of 1 (100%)
Average latency: 787 ms
95th percentile latency: 787 ms

Maintenance history

Public check and source-refresh events. Editorial and ownership records remain private.

Nov 1, 2026, 7:30 AM UTC · probe · passed · 787 ms · metadata changed · 8 tool(s)

Connect from your client

Each snippet registers the same endpoint; pick the client you use.

This server is operated by the named third party. Listing and endpoint checks are not an endorsement or a security audit. Review the operator's permissions, terms, and data handling before connecting. How listings are checked and corrected.

Claude Code

Run this once in a terminal. It registers the remote server. Use --scope project to write .mcp.json for the repo.

Claude Code configuration

claude mcp add --transport http easylpd-mcp https://easylpd.ch/api/mcp

Codex

Run this once. Codex stores MCP servers in ~/.codex/config.toml (or .codex/config.toml in a trusted project).

Codex configuration

codex mcp add easylpd-mcp --url https://easylpd.ch/api/mcp

Cursor

Merge this server into .cursor/mcp.json in your project, then enable easylpd-mcp in your MCP settings.

Cursor configuration

{
  "mcpServers": {
    "easylpd-mcp": {
      "url": "https://easylpd.ch/api/mcp"
    }
  }
}

Cline

Merge this into cline_mcp_settings.json (Cline → MCP Servers → Configure).

Cline configuration

{
  "mcpServers": {
    "easylpd-mcp": {
      "type": "streamableHttp",
      "url": "https://easylpd.ch/api/mcp",
      "disabled": false
    }
  }
}

VS Code

Merge this server into .vscode/mcp.json. Use MCP: List Servers to start easylpd-mcp and inspect its tools.

VS Code configuration

{
  "servers": {
    "easylpd-mcp": {
      "type": "http",
      "url": "https://easylpd.ch/api/mcp"
    }
  }
}

Gemini CLI

Run this once. It writes .gemini/settings.json in the current project; pass --scope user for ~/.gemini/settings.json.

Gemini CLI configuration

gemini mcp add --transport http easylpd-mcp https://easylpd.ch/api/mcp

Claude Desktop

Merge this into claude_desktop_config.json (macOS: ~/Library/Application Support/Claude/, Windows: %APPDATA%\Claude\), then restart Claude Desktop.

Claude Desktop configuration

{
  "mcpServers": {
    "easylpd-mcp": {
      "url": "https://easylpd.ch/api/mcp"
    }
  }
}

Windsurf

Merge this into ~/.codeium/windsurf/mcp_config.json, then refresh MCP in Cascade. Windsurf remote servers use serverUrl, not url.

Windsurf configuration

{
  "mcpServers": {
    "easylpd-mcp": {
      "serverUrl": "https://easylpd.ch/api/mcp"
    }
  }
}

Let your agent find its tools

Find servers like EasyLPD MCP from your agent. Add Koskamo once to search the index for endpoints, access requirements, and client setup. Public discovery needs no key.

Connect Koskamo Explore workflows

See all 3,939

Do you run EasyLPD MCP?

Prove ownership with a DNS record, a well-known file, or your Official MCP Registry entry, and your edits publish immediately. Proofs are re-checked weekly; admins can still hide or remove a listing.

Claim this listing

EasyLPD MCP

Endpoint and access

What you can do with it

Source and maintenance

Protocol and capabilities

Server-provided instructions

Tools

Prompts

Resources

30-day availability

Maintenance history

Connect from your client

Claude Code

Codex

Cursor

Cline

VS Code

Gemini CLI

Claude Desktop

Windsurf

Let your agent find its tools

Other productivity and knowledge servers

Do you run EasyLPD MCP?