
Double AIgents MCP server
Which MCP servers are Double AIgents's own, from the official registry and from asking its own domain, whether they answer, and what they offer. A program checked each of these, nobody copied them from a product page.
read 2026-10-28
- Registry namecom.doubleaigents.www/dsarverified in the MCP registry
The registry name sits under doubleaigents.com. The registry only lets a publisher use that namespace after proving control of the domain through DNS or HTTP.
- Stateanswerschecked 2026-10-28
- Tools10
- Server calls itselfdoubleaigents-dsar
- Server version1.2.0
- Protocol version2025-06-18
On 2026-10-28 the server answered initialize and tools/list without a sign-in. First answer in 131 ms.
- Its tools do none of the product's use cases we checked: search exports and redact third-party data for subject access requests; run AI on a machine in your own office.
Once connected
- Parameters are untyped or undescribed in 5 of 10 tools: check arguments before calling.
Said by rules from the measurements above. The likely first call is a model's pick from the tool list; read its description before relying on it.
- INITE MCP score63 of 100answers 100 · does the job 0 · definitions 92 · context 100 · use 0 · connects 100
- What an agent can do with it0 of 2 use cases
- Answered100% of days7 of 7 daily checks
- Median first answer150 ms
- Space in an agent's context≈ 2,400 tokensthe definitions of all its tools (10), which an agent carries on every turn
- Tool definitionsA · 92 of 100
- Typed results0 of 10 toolsdeclared outputSchema: results come typed, read once
- Parameters without a description: in 5 of 10
What an agent can do with it
- cannot · search exports and redact third-party data for subject access requests
- not sure · apply exemptions and write reasons for disclosure decisions
- cannot · run AI on a machine in your own office
Each of the product's use cases, put to Jev against this server's tool list: can an agent do it with these tools?
Worth a look
None of the five warning signs in these definitions.
A program checks the server once a day: initialize and tools/list, no model. Tokens are the definitions' length at about four characters a token. The grade averages six checks of every tool's name, description, schema and annotations; it says how well the tools are described, not whether they work. The score weighs what was measured and nothing else: answering (25%), doing the product's job (25%), definitions (20%), context (10%), use (10%) and how readily a client connects (10%). A part that was not measured is left out, and a hidden instruction caps the score at 40. The state of vendors' MCP servers: method and numbers →
dsar_deadlineCalculate the statutory deadline for answering a data subject access request in the UK, the EU/EEA or Switzerland, with the rule that applies and the extension position. General information, not legal advice.
dsar_quoteFixed price from Double AIgents for preparing a DSAR response, by pack size in pages after de-duplication. Also gives the retainer price (15% off). Excludes VAT.
dsar_service_infoWhat the Double AIgents DSAR service covers: scoping, collection guidance, de-duplication, redaction, exemption recommendations, two independent reviews, secure delivery, data handling, jurisdictions and partner arrangements.
dsar_request_scopingExplains how to start free scoping and returns a prefilled email (mailto URL) to [email protected]. Sends nothing and stores nothing. Do not pass the requester's personal data or the request letter.
breach_clockWhen a personal data breach must be notified to the regulator: 72 hours from awareness in the UK and EU/EEA (Art. 33), "as soon as possible" in Switzerland (revised FADP Art. 24). Gives the deadline, the rule, the processor and…
dsar_letter_templatePlain-text letter template, in British English with [placeholders], for an acknowledgement, an extension of time or a request for clarification of a data subject access request, under UK, EU/EEA or Swiss law. Fills in the dates if…
breach_triageA likely-reportability view on a personal data breach (UK, EU/EEA, Switzerland), following the ICO guide "Personal data breaches: a guide" and EDPB Guidelines 9/2022: whether notifying the regulator and telling the people affected is…
ai_tool_checkScreens a planned use of an AI tool: whether a DPIA is likely to be required (Art. 35(3), the ICO high-risk list, the WP248 criteria; FADP Art. 22 for Switzerland), EU AI Act risk flags (Annex III high-risk areas, especially employment…
hr_retentionRecommended retention period for a common UK HR record, whether it is statutory or only recommended, and the source (HMRC, Home Office, RIDDOR 2013, Working Time Regulations, Limitation Act 1980, ICO, DBS). UK only for now. General…
dsar_search_checklistWhere to search when answering a subject access request, especially from an employee: Microsoft 365 (Exchange and archives, shared mailboxes, Teams, OneDrive, SharePoint), other collaboration tools, HR, payroll, recruitment, CCTV, access…
How to connect
Add the server to your MCP client config. Claude Desktop, Cursor and most other clients read this shape:
{
"mcpServers": {
"dsar": {
"type": "http",
"url": "https://www.doubleaigents.com/api/mcp"
}
}
}Add it
Claude Code, in a terminal
claude mcp add --transport http doubleaigents https://www.doubleaigents.com/api/mcpclaude.ai, ChatGPT and other clients: add https://www.doubleaigents.com/api/mcp as a custom connector in the settings.
Each line is something a program found when it went looking: the registry entry, the server's own answer, a spec that parses. A missing line means we did not find it, not that it does not exist.
Before we count this visit
Analytics and ad measurement tell us which pages and which of our ads do their job: Google Analytics and Google Ads, the Meta pixel, Yandex Metrica, and one first-party id of our own. Nothing is stored until you answer, and declining changes nothing about the site.