# EasyLPD: Swiss data protection (FADP) and GDPR (remote · easylpd.ch)

Swiss FADP (nLPD/revDSG) and GDPR: which laws apply, action plan, templates, transfers abroad.

- Trust score: 75/100 (medium)
- Change this week: +3
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-11-05

## Components

- remote · `easylpd.ch`: 75/100 (this document), [markdown](https://verifymcp.io/servers/ch-easylpd-fadp/api-mcp.md), [page](https://verifymcp.io/servers/ch-easylpd-fadp/api-mcp)

## Channel facts

- Endpoint: `https://easylpd.ch/api/mcp`
- Transports: `streamable-http`
- Auth: `none`
- Version: `1.0.0`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-11-05.

- **Endpoint Security**: 83/100
  - The endpoint's TLS certificate is valid, in date, and uses a strong key.
  - No authorisation is required to call this server. Every tool declares its destructiveHint and none is destructive, so open access doesn't expose one.
  - HTTPS is enforced; there's no plaintext access path.
  - The HSTS (Strict-Transport-Security) header is present.
  - DNSSEC is configured correctly; the domain's records validate against the full chain to the root.
- **Transport & Reachability**: 100/100
  - Verified streamable-http transport via a live MCP handshake.
- **Schema Quality & AI Usability**: 61/100
  - AI-judged instruction clarity (excellent).
  - Context-footprint check failed: tool/resource definitions use about 2097 tokens (~262/item across 8 items; 8 tools + 0 resources), over budget; trim descriptions and params.
  - Usage-examples check failed: none of the tools include examples.
- **Stability & Change Management**: 33/100
  - Stability observed for 10 of 30 days with no destabilising changes; credit accrues until the full window elapses.
- **Tool Coverage**: 100/100
  - 100% of tools have a non-trivial description (not blank, and not just the tool's name).
  - 100% of tool parameters carry a description.
- **Tool Safety**: 75/100
  - No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.
  - 0 of 1 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation; "transfer_check" implies "transfer" and declares readOnlyHint instead, contradicting what its own name says it does.
  - An AI judge read all 9 captured unit(s) of tool text and found none that tries to manipulate the model reading it.
- **Capabilities**: 100/100
  - Implements a current MCP spec version (2026-07-28).

## Install

### How do I install the EasyLPD: Swiss data protection (FADP) and GDPR MCP server?

EasyLPD: Swiss data protection (FADP) and GDPR is a hosted endpoint at https://easylpd.ch/api/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

### Claude

```bash
claude mcp add --transport http ch-easylpd-fadp 'https://easylpd.ch/api/mcp'
```

### Cursor

```json
{
  "mcpServers": {
    "ch-easylpd-fadp": {
      "url": "https://easylpd.ch/api/mcp"
    }
  }
}
```

### VS Code

```json
{
  "servers": {
    "ch-easylpd-fadp": {
      "type": "http",
      "url": "https://easylpd.ch/api/mcp"
    }
  }
}
```

### Codex

```toml
[mcp_servers.ch-easylpd-fadp]
url = "https://easylpd.ch/api/mcp"
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "ch-easylpd-fadp": {
      "type": "remote",
      "url": "https://easylpd.ch/api/mcp",
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add ch-easylpd-fadp --url 'https://easylpd.ch/api/mcp' --transport streamable-http
```

### Hermes

```yaml
mcp_servers:
  ch-easylpd-fadp:
    url: "https://easylpd.ch/api/mcp"
```

### Netclaw

```json
{
  "McpServers": {
    "ch-easylpd-fadp": {
      "Transport": "http",
      "Url": "https://easylpd.ch/api/mcp"
    }
  }
}
```

### Vellum

```bash
assistant mcp add ch-easylpd-fadp -t streamable-http -u 'https://easylpd.ch/api/mcp'
```

### Other

```json
{
  "mcpServers": {
    "ch-easylpd-fadp": {
      "type": "http",
      "url": "https://easylpd.ch/api/mcp"
    }
  }
}
```

The mcpServers block is a cross-client convention. Remote transports vary, so check your client's docs.

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-11-04 (score 75, +1)

No change was recorded against any check on this day. Stability & Change Management went from 27 to 30. That category is still filling its 30-day observation window: 8 days of observed history at the previous scan, 9 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-11-02 (score 74, +1)

No change was recorded against any check on this day. Stability & Change Management went from 20 to 23. That category is still filling its 30-day observation window: 6 days of observed history at the previous scan, 7 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-10-30 (score 73, +1)

No change was recorded against any check on this day. Stability & Change Management went from 10 to 13. That category is still filling its 30-day observation window: 3 days of observed history at the previous scan, 4 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-10-28 (score 72, +1)

No change was recorded against any check on this day. Stability & Change Management went from 3 to 7. That category is still filling its 30-day observation window: 1 days of observed history at the previous scan, 2 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-10-27 (score 71, 0)

- [functional improvement] Stability: unverified → 0.03

### 2026-10-26 (score 71)

First indexed and scored.

## MCP tools (8)

### `which_laws_apply` (~329 tokens)

Which data protection laws apply

Use first when someone asks which data protection laws their organisation must follow (Swiss FADP/nLPD/DSG, EU GDPR, EU AI Act), for example a Swiss company selling online to the EU. Returns the core obligations that follow for that profile and those that only one of the two laws asks, each with the articles of each law and the template that carries it out. Tells whether the Swiss Federal Act on Data Protection (FADP/LPD/DSG), the EU GDPR and the EU AI Act apply to an organisation, from five yes/no questions (GDPR art. 3 and AI Act art. 2 territorial scope included). The AI Act binds organisations established in the EU or whose AI output is used there; Switzerland has no AI law yet, but rules that keep staff from putting personal data into AI tools follow from the FADP and are good practice. Guidance, not legal advice.

Input parameters:

- `ai` (boolean): Uses AI systems in its work (AI assistants, chatbots, automated screening or scoring).
- `ch` (boolean, required): Established in Switzerland, or processing data of people in Switzerland.
- `euEstablishment` (boolean, required): Has an establishment (branch, subsidiary, office) in the EU/EEA.
- `euMonitoring` (boolean, required): Monitors the behaviour of people in the EU/EEA (online tracking, profiling).
- `euOffer` (boolean, required): Offers goods or services to people in the EU/EEA.
- `lang` (string): Language of the answer: it, de, fr or en.

### `assessment_questions` (~258 tokens)

Data protection self-assessment questions

Use when someone wants to check where their organisation stands with data protection. The questions of EasyLPD's self-assessment that apply to an organisation's profile, each with its id, area, why it matters, its weight and the legal references. Ask them in the conversation, a few at a time, answer each with yes, partial, no, unknown (the person does not know: it counts as not in place until checked) or na, then call score_assessment.

Input parameters:

- `ai` (boolean): Uses AI systems in its work (AI assistants, chatbots, automated screening or scoring).
- `ch` (boolean, required): Established in Switzerland, or processing data of people in Switzerland.
- `euEstablishment` (boolean, required): Has an establishment (branch, subsidiary, office) in the EU/EEA.
- `euMonitoring` (boolean, required): Monitors the behaviour of people in the EU/EEA (online tracking, profiling).
- `euOffer` (boolean, required): Offers goods or services to people in the EU/EEA.
- `freeOnly` (boolean): Only the questions of the free assessment (true) or all (false).
- `lang` (string): Language of the answer: it, de, fr or en.

### `score_assessment` (~225 tokens)

Score a data protection self-assessment

Use after the questions of assessment_questions have been answered. Scores them per applicable law, with the risk level and the three gaps to start from, and returns openInEasyLPD: a link that shows the same result in EasyLPD, to give to the user. Guidance, not legal advice or a certification.

Input parameters:

- `ai` (boolean): Uses AI systems in its work (AI assistants, chatbots, automated screening or scoring).
- `answers` (object, required): Answers by question id: yes, partial, no, unknown or na.
- `ch` (boolean, required): Established in Switzerland, or processing data of people in Switzerland.
- `euEstablishment` (boolean, required): Has an establishment (branch, subsidiary, office) in the EU/EEA.
- `euMonitoring` (boolean, required): Monitors the behaviour of people in the EU/EEA (online tracking, profiling).
- `euOffer` (boolean, required): Offers goods or services to people in the EU/EEA.
- `lang` (string): Language of the answer: it, de, fr or en.

### `transfer_check` (~133 tokens)

Transfer of personal data abroad

Use when someone asks whether they may use a provider or send personal data to another country (cloud, hosting, CRM, US services). Whether sending personal data to a country is allowed without further safeguards under the Swiss FADP and under the EU GDPR (adequacy lists), by ISO 3166-1 alpha-2 country code. The lists change: check them before relying on the answer.

Input parameters:

- `country` (string, required): ISO 3166-1 alpha-2 code, e.g. US, DE, JP.
- `lang` (string): Language of the answer: it, de, fr or en.

### `fadp_obligations` (~114 tokens)

What the Swiss FADP asks of SMEs

Use for an overview of the new Swiss FADP/nLPD/revDSG. The main duties of the Swiss Federal Act on Data Protection (in force since 1 September 2023) for SMEs, each with its FADP and GDPR articles: who it applies to, the risk, eight duties. For what a given organisation must do, prefer action_plan. A summary, not legal advice.

Input parameters:

- `lang` (string): Language of the answer: it, de, fr or en.

### `action_plan` (~254 tokens)

Data protection action plan for an organisation

Use when someone asks what their organisation must do about data protection, or how to start. The steps that apply to its profile under the Swiss FADP, the GDPR and the AI Act, in the order EasyLPD's path follows (six stages), each with the articles of each law, its weight, why it matters and the template that carries it out with the link to its page. With answers from assessment_questions, the steps already done are left out.

Input parameters:

- `ai` (boolean): Uses AI systems in its work (AI assistants, chatbots, automated screening or scoring).
- `answers` (object): Optional answers by question id: steps answered yes or na are left out.
- `ch` (boolean, required): Established in Switzerland, or processing data of people in Switzerland.
- `euEstablishment` (boolean, required): Has an establishment (branch, subsidiary, office) in the EU/EEA.
- `euMonitoring` (boolean, required): Monitors the behaviour of people in the EU/EEA (online tracking, profiling).
- `euOffer` (boolean, required): Offers goods or services to people in the EU/EEA.
- `lang` (string): Language of the answer: it, de, fr or en.

### `document_templates` (~164 tokens)

Data protection document templates

Use when someone needs a privacy notice, a processor agreement (DPA), a breach procedure, a DPIA or another data protection document under the Swiss FADP or the GDPR. The 39 templates of EasyLPD with what each is for and the link to its page; with an id, one template with the headings of its sections, the beginning of its text and where the FADP and the GDPR ask different things. Optional search by words.

Input parameters:

- `id` (string): The id of one template, from a previous answer: its details.
- `lang` (string): Language of the answer: it, de, fr or en.
- `search` (string): Words to look for in title or purpose, e.g. 'video', 'processor'.

### `fadp_questions` (~238 tokens)

Questions on the new Swiss FADP

Use when someone asks a common question on the Swiss FADP/nLPD/revDSG: whether it applies, differences with the GDPR, what changed in 2023, fines, personal and sensitive data, consent, the FDPIC, the Swiss representative, the record of processing, retention, security measures, privacy by design, a data protection advisor (DPO), privacy notices, DPIA, profiling, training, certification, transfers abroad and standard contractual clauses, processors and joint controllers, cloud services, AI tools, cookies, newsletters, video surveillance, employees, monitoring, applicants, photos, children, anonymous data, data breaches (also an e-mail sent to the wrong person), the rights of access, deletion and portability, an FDPIC investigation. Without an id the list; with an id the answer with the articles, the detail, the FADP/GDPR table where they differ, the templates that help and the link to the page.

Input parameters:

- `id` (string): The id of one question, from the list.
- `lang` (string): Language of the answer: it, de, fr or en.

## Diagnostics

Captured diagnostic sections: TLS, DNSSEC, Authorisation, Transports. The full working is on the page: https://verifymcp.io/servers/ch-easylpd-fadp/api-mcp#diagnostics

## Score history

- 2026-11-05: 75
- 2026-11-04: 75
- 2026-11-03: 74
- 2026-11-02: 74
- 2026-11-01: 73
- 2026-10-31: 73
- 2026-10-30: 73
- 2026-10-29: 72
- 2026-10-28: 72
- 2026-10-27: 71
- 2026-10-26: 71

## Common questions

### What is the EasyLPD: Swiss data protection (FADP) and GDPR MCP server?

EasyLPD: Swiss data protection (FADP) and GDPR is an MCP server listed in the public MCP registry as ch.easylpd/fadp. Swiss FADP (nLPD/revDSG) and GDPR: which laws apply, action plan, templates, transfers abroad. This page covers its hosted endpoint (https://easylpd.ch/api/mcp).

### Is the EasyLPD: Swiss data protection (FADP) and GDPR MCP server safe to use?

EasyLPD: Swiss data protection (FADP) and GDPR scores 75 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

### What tools does the EasyLPD: Swiss data protection (FADP) and GDPR MCP server expose?

EasyLPD: Swiss data protection (FADP) and GDPR exposes 8 tools: which_laws_apply, assessment_questions, score_assessment, transfer_check, fadp_obligations, and 3 more. Their descriptions and schemas cost roughly 1,715 tokens of context every time the server is loaded.

### Does the EasyLPD: Swiss data protection (FADP) and GDPR MCP server require authentication?

No. We connected to EasyLPD: Swiss data protection (FADP) and GDPR without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.

### Is the EasyLPD: Swiss data protection (FADP) and GDPR MCP server still maintained?

EasyLPD: Swiss data protection (FADP) and GDPR is still listed as active in the MCP registry. We last reached this channel on 5 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.

## Links

- Remote endpoint: https://easylpd.ch/api/mcp
- Website: https://easylpd.ch/en/ai-assistants
- Changelog RSS feed: https://verifymcp.io/servers/ch-easylpd-fadp/api-mcp.xml
- Changelog JSON feed: https://verifymcp.io/servers/ch-easylpd-fadp/api-mcp.json
- HTML version of this page: https://verifymcp.io/servers/ch-easylpd-fadp/api-mcp