MCP HeartbeatTHE MCP OBSERVATORY
Public workspace

Explore

Evidence for your next connection.

Independent measurements of remote MCP servers. Every observation has a timestamp.

Read-only probes

MCP server · Code & DevOps

Paperloo Compliance

Automated website compliance infrastructure and GDPR/CCPA auditing.

Checks passed
12 / 22

2 failed · 8 not measured

Median response
467 ms

Median of successful probes over 7 days

30-day uptime
Not measured

Share of countable probes over 30 days, including daily rollups. Auth challenges are excluded.

Discovered tools
19

Tool definitions returned by this server

Independent monitoring

Health & checks

Status history

Responded

The server completed its last measured handshake. This is an observation, not a guarantee.

Last checked
Check summary by test group
Test areaPassedFailedUnmeasured
ConnectionCan a client connect and discover tools?
500
Reliability & speedDoes it respond consistently and quickly?
004
Access & authenticationWhat is required to use this server?
102
Tool qualityAre the tool definitions usable by an agent?
220
Publisher identityCan the publisher be traced to its source?
402

Unmeasured means there is not enough evidence to decide. How these checks work

Inspect individual checks 22 recorded

Core

  • Pass
    Reachable

    Latest probe returned HTTP 200 in 467 ms.

  • Pass
    Valid handshake

    protocolVersion 2025-11-25, serverInfo.name io.github.yassinemohamedali11/paperloo.

  • Pass
    Lists tools

    tools/list returned 19 tools.

  • Pass
    Current protocol

    Negotiated 2025-11-25. The bar is 2025-06-18 or newer.

  • Pass
    HTTPS

    The endpoint URL is https.

Performance

  • Not measured
    Fast (p50)

    Median latency 467 ms over 1 samples in 7 days. The bar is 1000 ms. Need at least 5 samples.

  • Not measured
    Consistent (p95)

    95th percentile 467 ms over 1 samples in 7 days. The bar is 3000 ms. Need at least 20 samples.

  • Not measured
    Reliable (uptime)

    1 of 1 attempts returned a tool list in 30 days (100%). The bar is 99%. Need at least 30 samples.

  • Not measured
    Stable tool list

    Fewer than two successful probes in 30 days, so tool-list stability is not measured.

Access

  • Pass
    Open access

    tools/list succeeded with no credential, and the record declares none.

  • Not measured
    Standard auth

    Auth is not required, so the OAuth metadata check does not apply.

  • Not measured
    Free tier cited

    No publisher quote has been checked.

Tools

  • Pass
    Tools described

    Every tool description is at least 20 characters.

  • Pass
    Valid input schemas

    Every inputSchema is a JSON Schema object.

  • Fail
    Parameters documented

    50 of 76 parameters have a description (66%). The bar is 80%.

  • Fail
    Safety hints

    19 tools set neither readOnlyHint nor destructiveHint.

Publisher

  • Pass
    Verified namespace

    Listed in the Official MCP Registry.

  • Not measured
    Website matches publisher

    This namespace is not a reverse domain, so the website comparison does not apply.

  • Pass
    Source repo linked

    A repository URL is on file.

  • Pass
    Repo owner matches

    The GitHub repository owner matches the namespace login.

  • Pass
    Recently updated

    Updated 2026-10-16T00:54:55.645977Z, within 180 days.

  • Not measured
    Open-source licence

    The GitHub licence lookup has not returned an OSI result yet.

Start using Paperloo Compliance

Connect to this server

Choose your client, copy the configuration, then enable the server in your client’s MCP settings.

Run this command in your terminal, then restart Claude Code.

Claude Code

claude mcp add --transport http paperloo-compliance https://paperloo.vercel.app/api/mcp

Capabilities

Tools 19

add_site

Adds and provisions a new website in the Paperloo compliance monitoring registry. Initializes compliance grading, generates script embed tags, and provisions consent defaults.

Discovered
audit_accessibility

Performs itemized WCAG 2.1 AA accessibility audit on a web domain. Inspects image alt attributes, semantic landmark roles, form control labels, document titles, language bindings, and contrast indicators.

Discovered
audit_ai_transparency

Audits a website for EU AI Act (Regulation (EU) 2024/1689) transparency compliance. Detects conversational AI chatbots, synthetic media disclosures, automated decision-making notices, and AI crawler directives (GPTBot, ClaudeBot).

Discovered
audit_site

Performs multi-vector automated compliance auditing on a target website URL. Checks SSL/HTTPS, Google Consent Mode v2 signals, prior consent enforcement under GDPR Art. 5(3), legal links, security headers, WCAG 2.1 AA accessibility, and EU AI Act disclosures.

Discovered
configure_cookie_banner

Configures and personalizes the cookie consent banner for a site. Controls layout, theme colors, Google Consent Mode v2 integration, and tracker auto-blocking rules.

Discovered
configure_gtm_integration

Configures Google Tag Manager (GTM) integration with Google Consent Mode v2. Sets up consent state defaults and dataLayer triggers for unblocked tracking upon user consent.

Discovered
delete_site

Deletes a monitored website property and cleans up all associated consent banners, audit records, and cached legal policies.

Discovered
export_documents

Exports generated legal compliance documents in Markdown, HTML, or structured JSON formats.

Discovered
generate_docs_questionnaire

Generates tailored legal document suites using structured questionnaire answers.

Discovered
generate_documents

Generates tailored legal document suites (Privacy Policy, Terms of Service, Cookie Policy, EULA, Acceptable Use, Disclaimer, Return Policy, Accessibility Statement) assembled from modular statutory clauses.

Discovered
generate_dpa

Generates a comprehensive GDPR Article 28 Data Processing Addendum (DPA) contract between Data Controller and Data Processor, complete with sub-processor listings and standard contractual clauses.

Discovered
get_consent_banner_code

Returns production-ready, zero-code consent banner snippet with Google Consent Mode v2 default denied parameters and dynamic unblocking listeners.

Discovered
get_cookie_banner_script

Generates the ready-to-paste HTML embed snippet or framework code (React, Next.js, WordPress) for the site's cookie consent banner with Google Consent Mode v2 auto-initialization.

Discovered
get_gtm_container_setup

Generates complete Google Tag Manager setup instructions, including `<head>` and `<body>` installation snippets, GTM trigger recipes, and Google Consent Mode v2 integration guide.

Discovered
get_questionnaire_schema

Returns the standardized legal compliance questionnaire schema.

Discovered
get_site

Retrieves complete configuration, compliance metrics, active legal documents, cookie banner settings, and embed snippets for a specific site.

Discovered
list_sites

Lists all monitored websites with pagination support, compliance grades, banner statuses, and document counts.

Discovered
scan_cookies

Scans a domain and generates an itemized inventory of detected cookies and third-party tracking scripts, categorized by Necessary, Analytics, Marketing, and Preferences.

Discovered
verify_compliance

Issues a real-time cryptographic compliance verification audit for a website. Validates live consent state, privacy disclosures, and returns a verified SVG trust badge snippet.

Discovered

Recent measurements

Probe history

View status
Latest stored probes. Raw probe rows are kept for 14 days.
CheckedResultResponseTools
Connected467 ms19