GDPR Scanner API

Scan any website for GDPR compliance -- cookie consent, privacy policy, trackers, DPO contact. Score 0-100. Pay-per-call via x402 (USDC on Base L2) -- no API key, no signup, no rate-limit wall.

Part of the klymax402 marketplace -- 100 x402 micropayment APIs for AI agents, one wallet, USDC on Base.

Quickstart -- MCP

Add to your MCP client config (Claude Desktop, Cursor, ElizaOS, etc.):

{
  "mcpServers": {
    "gdpr-scanner": {
      "url": "https://gdpr-scanner.api.klymax402.com/mcp"
    }
  }
}

Quickstart -- HTTP (x402)

curl "https://gdpr-scanner.api.klymax402.com/api/scan?url=https://example.com"
# -> 402 Payment Required, with an x402 payment challenge in the response body

Any x402-aware client (@x402/fetch, x402-agent-tools, ATXP) handles the 402 -> sign -> retry cycle automatically.

Tools

compliance_scan_gdpr

Use this when you need to check a website's GDPR compliance. Scans the URL plus /privacy-policy and /cookie-policy pages. Returns a compliance report in JSON.

Parameters

Example response:

{"url":"https://example.com","complianceScore":72,"cookieConsent":{"detected":true,"type":"banner"},"privacyPolicy":{"found":true,"url":"/privacy"},"thirdPartyTrackers":["Google Analytics","Facebook Pixel"],"recommendations":["Add DPO contact info","Add data retention policy"]}

When to use: launching a website in the EU, FOR compliance audits, due diligence on acquisitions, and regular privacy monitoring.

Not for: PII in text (use compliance_detect_pii), tech detection (use website_detect_tech_stack), HTTP security headers (use network_analyze_headers).

compliance_scan_gdpr

Use this when you need to check a website's GDPR compliance. Scans the URL plus /privacy-policy and /cookie-policy pages. Returns a compliance report in JSON. POST variant of compliance_scan_gdpr -- same params passed as JSON body instead of query string.

Parameters

Example response:

{"url":"https://example.com","complianceScore":72,"cookieConsent":{"detected":true,"type":"banner"},"privacyPolicy":{"found":true,"url":"/privacy"},"thirdPartyTrackers":["Google Analytics","Facebook Pixel"],"recommendations":["Add DPO contact info","Add data retention policy"]}

When to use: launching a website in the EU, FOR compliance audits, due diligence on acquisitions, and regular privacy monitoring.

Not for: PII in text (use compliance_detect_pii), tech detection (use website_detect_tech_stack), HTTP security headers (use network_analyze_headers).

Example agent prompts

• "Check a website's GDPR compliance"
• "Check a website's GDPR compliance"

Payment

• Protocol: x402 -- HTTP-native pay-per-call, no signup, no API key
• Network: Base L2 (eip155:8453)
• Asset: USDC
• Facilitator: Coinbase CDP (primary), PayAI (fallback)

Part of klymax402

100 x402 micr

... View full README on GitHub