# Dastra MCP for AI Agents AI Agent Connect > Dastra MCP helps you manage GDPR and LGPD compliance by connecting your privacy registry to an AI agent. It handles Data Subject Requests (DSRs), tracks security breaches, and manages your Record of Processing Activities (ROPA). You can pull workspace data, manage actors, and track data assets without manual logging. ## Overview - **Category:** document-management - **Price:** Free - **Endpoint:** https://edge.vinkius.com/vk_preview_6Czv7wGgTaBqxC06YtBxvkg6nhVo4QqS5o7q0hZH/ai-agent-connect - **Tags:** gdpr, data-privacy, dsr-management, data-mapping, compliance-automation, ropa ## Description Dastra MCP lets you manage your entire data privacy and compliance stack through a natural conversation with your AI agent. Instead of digging through complex tables or manually logging every security incident, you can ask your agent to pull ROPA summaries, check the status of pending data requests, or document a new breach. This Connector acts as a bridge to your privacy registry, letting you coordinate operations across multiple workspaces without switching tabs. If you're trying to keep up with GDPR or LGPD requirements, you can use Vinkius to get this connected and start treating your agent like a dedicated compliance coordinator. You can track the full lifecycle of data subject requests, from the moment they come in until they're archived, while keeping a high-fidelity record of every actor and processing activity in your organization. ## Tools ### archive_dsr Archive a completed DSR. Use this to move resolved requests out of your active view. ### create_breach Create a new data breach record. Use this to log security incidents as they happen. ### create_dsr Create a new Data Subject Request. Use this to initiate the handling of a new user request. ### get_dsr Pull specific details for a single Data Subject Request. Use this to see exactly what a user is asking for. ### list_actors List all actors in your system. This helps you see who is acting as a controller or processor. ### list_breaches See a list of all documented data breaches. Use this to track incident history and response status. ### list_datasets View all datasets in your registry. This helps you understand what data assets are currently being tracked. ### list_dsr Get a list of all Data Subject Requests. Use this to see pending privacy requests across your organization. ### list_processings List your Record of Processing Activities. This gives you a clear view of all active data processing. ### list_tags See all tags used in your workspace. Use this to understand how your data assets are classified. ### list_workspaces List all available workspaces. Use this to manage privacy operations across different business units. ### update_dsr Update the details of an existing DSR. Use this to move a request through its lifecycle. ## Prompt Examples **Prompt:** ``` How many pending Data Subject Requests do we have right now? ``` **Response:** ``` I've checked your active requests. You currently have 4 pending DSRs: - **Right of Access** (ID: dsr_992) - **Erasure Request** (ID: dsr_993) - **Portability Request** (ID: dsr_995) - **Right to Rectification** (ID: dsr_998) Would you like me to pull the full details for any of these? ``` **Prompt:** ``` Can you log a new security incident for me? ``` **Response:** ``` I can certainly help with that. Please tell me: 1. The type of breach (e.g., unauthorized access, data leak) 2. The workspace it affected 3. Any brief description of what happened. Once you provide those details, I'll use the tool to register it in your registry. ``` **Prompt:** ``` Give me a summary of our ROPA for the Marketing workspace. ``` **Response:** ``` Scanning the Marketing workspace... Here is a summary of your Record of Processing Activities: | Activity | Data Type | Purpose | | :--- | :--- | :--- | | Email Marketing | Contact Info | Newsletter delivery | | Lead Gen | Behavioral Data | Sales outreach | | Analytics | IP Addresses | Traffic monitoring | Would you like to see more details on any of these? ``` ## Capabilities ### Manage Data Subject Requests Create, update, and archive DSRs to handle user privacy rights. ### Track Security Breaches Log and monitor data breaches to ensure a coordinated regulatory response. ### View ROPA Summaries Access your Record of Processing Activities to see how data flows across the company. ### Audit Workspace Actors List all controllers, processors, and tags to maintain a clear privacy registry. ### Coordinate Multiple Workspaces Manage different business units from a single AI interface. ## Use Cases ### Checking pending privacy requests A DPO needs to know how many 'Right to Erasure' requests are pending. The DPO asks the agent to list all DSRs. The agent uses list_dsr to find pending requests and summarizes the count for the weekly report. ### Logging a security incident An admin tells the agent to record a 'Server Unauthorized Access' event. The agent uses create_breach to log it and provides the new incident ID immediately. ### Auditing data flow for a new project A compliance officer asks for a summary of processing activities. The agent uses list_processings and list_datasets to describe how data moves. ### Organizing privacy tags across departments A manager wants to see how data is classified in the Marketing workspace. The agent uses list_workspaces and list_tags to show the current setup. ## Benefits - Automated DSR tracking: Use create_dsr and update_dsr to move privacy requests through their lifecycle without manual form entry. - Instant ROPA access: Pull your Record of Processing Activities using list_processings to get an immediate view of data flows. - Faster breach response: Use create_breach to log security incidents the moment they occur for a faster regulatory response. - Centralized workspace management: Use list_workspaces to oversee privacy operations across multiple business units from one place. - Clearer actor visibility: Use list_actors to keep a high-fidelity registry of every controller and processor in your system. ## How It Works The bottom line is you get a conversational interface for your entire privacy and GDPR compliance registry. 1. Subscribe to the Dastra MCP on Vinkius. 2. Grab your API Access Token from your Dastra user profile. 3. Connect it to your AI client to start managing compliance records. ## Frequently Asked Questions **Can the Dastra MCP help me manage GDPR requests?** Yes, it allows your AI agent to create, update, and archive Data Subject Requests directly. You can track the entire lifecycle of a request from start to finish without manual data entry. **How does Dastra MCP handle security breaches?** You can use your agent to log and track data breaches as they happen. This ensures every incident is documented in your registry for a coordinated regulatory response. **Can I see my Record of Processing Activities (ROPA) using Dastra MCP?** Yes, your agent can pull summaries of your ROPA data. This gives you an immediate look at how data flows across your different business units. **Does Dastra MCP work for LGPD compliance too?** Yes, it supports the privacy management tools needed for both GDPR and LGPD. It helps you maintain a high-fidelity privacy registry across your workspace. **Can I manage multiple workspaces with the Dastra MCP?** Yes, the Connector lets you list and manage multiple workspaces. You can coordinate privacy operations across different business units from a single AI interface. **Is the Dastra MCP good for audit logs?** It's excellent for maintaining a registry of actors and processing activities. You can pull complete directories of controllers and processors to keep your audit trail updated. **How do I find my Dastra Access Token?** Log in to Dastra, click your profile icon, navigate to **API Access**, and generate a new Access Token for your account. **What is a DSR request?** Data Subject Requests are exercises of privacy rights (Access, Erasure, etc.) submitted by individuals under data protection laws. **Can I manage multiple workspaces?** Yes! Use the `list_workspaces` tool to identify your workspace IDs, then use them as parameters in other tools like `list_dsr` or `list_breaches`.