{
  "name": "Double AIgents DSAR service",
  "description": "Read-only tools for the Double AIgents subject access request (DSAR) service for organisations in the UK, the EU/EEA and Switzerland. These tools are served over the Model Context Protocol (MCP, Streamable HTTP) at https://www.doubleaigents.com/api/mcp. There is no A2A JSON-RPC, gRPC or HTTP+JSON endpoint: connect with an MCP client, or email james@doubleaigents.com to reach a person. Nothing sent to the tools is stored. Output is general information, not legal advice; the controller decides.",
  "version": "1.2.0",
  "supportedInterfaces": [
    {
      "url": "https://www.doubleaigents.com/api/mcp",
      "protocolBinding": "https://modelcontextprotocol.io/specification/2025-11-25/basic/transports#streamable-http",
      "protocolVersion": "1.0"
    }
  ],
  "provider": {
    "organization": "Double AIgents Ltd",
    "url": "https://www.doubleaigents.com"
  },
  "documentationUrl": "https://www.doubleaigents.com/llms.txt",
  "iconUrl": "https://www.doubleaigents.com/favicon.png",
  "capabilities": {
    "streaming": false,
    "pushNotifications": false,
    "extendedAgentCard": false
  },
  "defaultInputModes": ["application/json"],
  "defaultOutputModes": ["application/json", "text/plain"],
  "skills": [
    {
      "id": "dsar_deadline",
      "name": "DSAR response deadline",
      "description": "Statutory deadline for answering a data subject access request in the UK, the EU/EEA or Switzerland, with the rule and the extension position. MCP tool dsar_deadline.",
      "tags": ["dsar", "subject access request", "gdpr", "uk gdpr", "fadp", "deadline"],
      "examples": ["When is the response due for a UK subject access request received on 15 March 2026?"]
    },
    {
      "id": "dsar_letter_template",
      "name": "DSAR letter template",
      "description": "Plain-text acknowledgement, extension or clarification letter template, in British English with placeholders, for UK, EU/EEA or Swiss law. MCP tool dsar_letter_template.",
      "tags": ["dsar", "subject access request", "letter", "template", "extension", "clarification"],
      "examples": ["Draft an extension letter for an EU subject access request received on 31 January 2026."]
    },
    {
      "id": "breach_clock",
      "name": "Personal data breach notification clock",
      "description": "When a personal data breach must be notified to the regulator: 72 hours from awareness in the UK and EU/EEA, as soon as possible in Switzerland, with the facts the regulator will ask for. The controller decides whether to notify. MCP tool breach_clock.",
      "tags": ["data breach", "breach notification", "72 hours", "ico", "gdpr", "fdpic"],
      "examples": ["We became aware of a breach at 09:30 on 17 October 2026, London time. When is the ICO deadline?"]
    },
    {
      "id": "dsar_quote",
      "name": "DSAR fixed-price quote",
      "description": "Fixed price for preparing a DSAR response, by pages after de-duplication, in GBP, EUR or CHF, excluding VAT. MCP tool dsar_quote.",
      "tags": ["dsar", "price", "quote"],
      "examples": ["How much for a 2,000-page DSAR pack in GBP?"]
    },
    {
      "id": "dsar_service_info",
      "name": "DSAR service information",
      "description": "What the DSAR service covers: scoping, collection guidance, de-duplication, redaction, exemption recommendations, two independent reviews and secure delivery. MCP tool dsar_service_info.",
      "tags": ["dsar", "service", "redaction"]
    },
    {
      "id": "dsar_request_scoping",
      "name": "Start DSAR scoping",
      "description": "Returns a prefilled email to james@doubleaigents.com to start free scoping. Sends nothing and stores nothing. MCP tool dsar_request_scoping.",
      "tags": ["dsar", "scoping", "contact"]
    },
    {
      "id": "breach_triage",
      "name": "Personal data breach triage",
      "description": "Likely-reportability view on a personal data breach in the UK, the EU/EEA or Switzerland, following the ICO breach guide and EDPB Guidelines 9/2022, with the factors, the deadline and the Art. 34 position. The controller decides. MCP tool breach_triage.",
      "tags": ["data breach", "breach notification", "risk assessment", "ico", "edpb", "gdpr"],
      "examples": ["An email with 40 people's details went to the wrong solicitor, who will probably delete it. Is it likely to be reportable to the ICO?"]
    },
    {
      "id": "ai_tool_check",
      "name": "AI tool check: DPIA and EU AI Act screening",
      "description": "Screens a planned AI tool: whether a DPIA is likely to be required, EU AI Act high-risk (Annex III, especially employment) and prohibited-practice flags, current application dates, and automated decision rules. Findings with sources. MCP tool ai_tool_check.",
      "tags": ["ai act", "dpia", "high-risk ai", "employment", "automated decision-making"],
      "examples": ["We want an AI tool to filter CVs for UK roles. Do we need a DPIA, and is it high-risk under the AI Act?"]
    },
    {
      "id": "hr_retention",
      "name": "HR record retention periods (UK)",
      "description": "Retention period for a common UK HR record, whether statutory or recommended, with the source. MCP tool hr_retention.",
      "tags": ["retention", "hr records", "uk", "employment"],
      "examples": ["How long must we keep right-to-work check copies?"]
    },
    {
      "id": "dsar_search_checklist",
      "name": "DSAR search checklist",
      "description": "Where to search when answering a subject access request, especially from an employee, with search-term tips and the reasonable and proportionate search rule. MCP tool dsar_search_checklist.",
      "tags": ["dsar", "subject access request", "search", "microsoft 365", "employee"],
      "examples": ["Where should an employer search to answer an employee's DSAR?"]
    }
  ]
}