# ClevSec EU compliance tools (one.clevsec/eu-compliance): tool descriptions scored

- tools/list taken: 2026-11-02 (UTC)
- From: [Official MCP Registry](https://registry.modelcontextprotocol.io/v0/servers/one.clevsec%2Feu-compliance/versions/latest)
- Connected to: https://mcp.clevsec.one/mcp
- Homepage: https://clevsec.one/mcp/
- Scoring rules: v2
- Tools: 28
- Average: 66.0 / 100 (Cloudy)
- Near-identical pairs: 1

This page shows how ClevSec EU compliance tools (one.clevsec/eu-compliance)'s tool descriptions scored, the issues found and the names of its tools and parameters. The descriptions are the server's own: read them where the copy came from.

Forecall asked the URL this server lists in the official MCP Registry for its tools/list once, on the date above, without calling any tool. The server may have changed since.

## Across the server

- Minor: 28 tools. Above 25, models start to tell tools apart less well.

## Tools

- `data_flow_review`: 54 / 100
  - Major: Arguments without a description: flows, flows[].purpose, flows[].source, flows[].processing, flows[].legalBasis, flows[].dataCategories, flows[].transferSafeguard, flows[].dpiaDone.
  - Minor: String arguments with no constraint or example: flows[].purpose, flows[].source, flows[].processing.
  - Minor: The description mentions none of its 3 or more arguments.
  - Minor: Says nothing about what it returns.
- `nis2_scope_check`: 57 / 100
  - Minor: Arguments without a description: annual_turnover_eur, balance_sheet_total_eur, public_administration.
  - Minor: Says nothing about what it returns.
- `privacy_notice_requirements`: 57 / 100
  - Minor: Arguments without a description: relies_on_legitimate_interests, relies_on_consent, transfers_outside_eea.
  - Minor: No `required` list, so every argument is optional.
  - Minor: The description mentions none of its 3 or more arguments.
  - Minor: The meaning of the boolean argument relies_on_legitimate_interests is unclear.
  - Minor: The meaning of the boolean argument relies_on_consent is unclear.
  - Minor: The meaning of the boolean argument transfers_outside_eea is unclear.
  - Minor: Says nothing about what it returns.
- `dora_gap_assessment`: 59 / 100
  - Minor: No `required` list, so every argument is optional.
  - Minor: Says nothing about what it returns.
- `gdpr_checklist_assessment`: 59 / 100
  - Minor: No `required` list, so every argument is optional.
  - Minor: Says nothing about what it returns.
- `iso27001_gap_assessment`: 59 / 100
  - Minor: No `required` list, so every argument is optional.
  - Minor: Says nothing about what it returns.
- `maturity_assessment`: 59 / 100
  - Minor: No `required` list, so every argument is optional.
  - Minor: Says nothing about what it returns.
- `nis2_gap_assessment`: 59 / 100
  - Minor: No `required` list, so every argument is optional.
  - Minor: Says nothing about what it returns.
- `vendor_risk_assessment`: 59 / 100
  - Minor: No `required` list, so every argument is optional.
  - Minor: Says nothing about what it returns.
- `data_flow_record_check`: 61 / 100
  - Major: Arguments without a description: flows, flows[].purpose, flows[].source, flows[].processing, flows[].legalBasis, flows[].dataCategories, flows[].transferSafeguard, flows[].dpiaDone.
  - Minor: String arguments with no constraint or example: flows[].purpose, flows[].source, flows[].processing.
- `cookie_consent_check`: 64 / 100
  - Minor: No `required` list, so every argument is optional.
  - Minor: Says nothing about what it returns.
- `gdpr_dpia_screening`: 64 / 100
  - Minor: No `required` list, so every argument is optional.
  - Minor: The description mentions none of its 3 or more arguments.
  - Minor: Says nothing about what it returns.
- `gdpr_remediation_plan`: 64 / 100
  - Minor: No `required` list, so every argument is optional.
  - Minor: Says nothing about what it returns.
- `maturity_improvement_plan`: 65 / 100
  - Minor: Arguments without a description: target_level.
  - Minor: Says nothing about what it returns.
- `cra_reporting_check`: 67 / 100
  - Minor: The description mentions none of its 3 or more arguments.
  - Minor: Says nothing about what it returns.
- `dora_classify_incident`: 68 / 100
  - Minor: Arguments without a description: affected_clients_count, duration_hours, member_states_with_impact.
  - Minor: No `required` list, so every argument is optional.
  - Minor: The description mentions none of its 3 or more arguments.
- `gdpr_dpia_report`: 69 / 100
  - Minor: No `required` list, so every argument is optional.
  - Minor: The description mentions none of its 3 or more arguments.
  - Minor: Says nothing about what it returns.
- `reporting_deadlines`: 69 / 100
  - Minor: No `required` list, so every argument is optional.
  - Minor: Says nothing about what it returns.
- `cyber_risk_score`: 71 / 100
  - Minor: No `required` list, so every argument is optional.
- `dora_checklist`: 71 / 100
  - Minor: No `required` list, so every argument is optional.
- `vendor_due_diligence_plan`: 71 / 100
  - Minor: No `required` list, so every argument is optional.
  - Minor: The description mentions none of its 3 or more arguments.
- `dora_remediation_plan`: 72 / 100
  - Minor: Says nothing about what it returns.
- `iso27001_remediation_plan`: 72 / 100
  - Minor: Says nothing about what it returns.
- `nis2_remediation_plan`: 72 / 100
  - Minor: Says nothing about what it returns.
- `gdpr_fine_estimate`: 73 / 100
  - Minor: Arguments without a description: people_affected, damage.
- `gdpr_breach_decision`: 75 / 100
  - Minor: Says nothing about what it returns.
- `cookie_consent_fix_plan`: 79 / 100
- `cyber_risk_action_plan`: 79 / 100

Is your server listed here and you would rather it were not? Email support@forecall.dev, and we will take it off within 7 days.

[All scored servers](https://forecall.dev/en/servers)