AINumbers.co GDPR API

openapi: 3.2.0
info:
  title: AINumbers.co Fintech Intelligence Suite GDPR API
  version: 1.0.0
  description: '**1255 fintech intelligence tools** covering ISO 20022, A2A payments, CFPB §1033, EU AI Act, DORA, MiCA, AML/KYC, BaaS, DLT/tokenization, ESG/climate finance, agentic payments (AP2, ACP, x402, Visa TAP, Mastercard Agent Pay), PQC migration, sanctions screening, and OpenChainGraph v0.4 computation chains.


    ## Transport


    > **The live transport is MCP JSON-RPC 2.0 at `https://mcp.ainumbers.co/mcp` — not REST.**

    >

    > This OpenAPI file is a **descriptive data-room artifact** — a machine-readable index of all tools and their input/output schemas. The REST paths (`POST /v1/tools/{name}`) described here are a projection; they become functional only if the optional REST shim (Area 2 Path B) is deployed.

    >

    > To call tools today, connect via the official MCP client SDKs. TypeScript: `@modelcontextprotocol/sdk`. Python: `mcp`.


    ## Architecture


    All tools run **entirely client-side** (browser JavaScript). Zero PII. Zero server calls after page load. Deterministic, reproducible outputs. Licensed CC BY 4.0.


    OpenChainGraph v0.4 compute-binding nodes additionally run **server-side on the MCP Worker** and emit verifiable artifacts with `execution_hash` (WebCrypto SHA-256 over RFC 8785 canonical JSON).'
  contact:
    name: Post Oak Labs
    url: https://postoaklabs.com
    email: tim@postoaklabs.com
  license:
    name: CC BY 4.0
    url: https://creativecommons.org/licenses/by/4.0/
servers:
- url: https://ainumbers.co
  description: Static browser-based tool host (DreamHost). Tools run client-side — no REST gateway is active on this origin. See x-mcp for the live MCP endpoint.
tags:
- name: GDPR
paths:
  /v1/tools/generate_gdpr_dsr_workflow:
    post:
      operationId: generate_gdpr_dsr_workflow
      summary: GDPR / UK GDPR Data Subject Rights Workflow Generator
      description: 'Generate jurisdiction-specific DSR response workflows for all seven GDPR/UK GDPR rights (Art. 15-22) plus CCPA equivalents. Outputs compliance clock, identity verification requirements, exemption analysis, response letter templates, and AP2 JSON mandate.


        **Tool URL:** https://ainumbers.co/tools/311-gdpr-dsr-workflow-generator.html

        **AP2/Policy Mandate export:** yes'
      tags:
      - GDPR
      requestBody:
        required: true
        content:
          application/json:
            schema:
              type: object
              required:
              - jurisdiction
              - request_type
              - data_category
              - requestor_type
              - org_type
              properties:
                jurisdiction:
                  type: string
                  enum:
                  - eu-gdpr
                  - uk-gdpr
                  - both
                  - ccpa
                  description: Applicable legal jurisdiction
                request_type:
                  type: string
                  enum:
                  - access
                  - erasure
                  - portability
                  - rectification
                  - objection
                  - restriction
                  - automated
                data_category:
                  type: string
                  enum:
                  - payment
                  - transaction
                  - biometric
                  - special
                  - standard
                requestor_type:
                  type: string
                  enum:
                  - consumer
                  - employee
                  - representative
                org_type:
                  type: string
                  enum:
                  - controller
                  - processor
                  - joint
                request_date:
                  type: string
                  format: date
      responses:
        '200':
          description: Successful tool execution result
          content:
            application/json:
              schema:
                $schema: https://json-schema.org/draft/2020-12/schema
                type: object
                required:
                - jurisdiction
                - request_type
                - primary_deadline_days
                - workflow_steps
                - identity_verification
                - exemptions
                properties:
                  jurisdiction:
                    type: string
                  request_type:
                    type: string
                  primary_deadline_days:
                    type: integer
                  extension_deadline_days:
                    type: integer
                  primary_response_date:
                    type: string
                  workflow_steps:
                    type: array
                    items:
                      type: object
                  identity_verification:
                    type: object
                  exemptions:
                    type: array
                    items:
                      type: object
                  org_type_notes:
                    type: array
                    items:
                      type: string
      x-mcp-tool-name: generate_gdpr_dsr_workflow
      x-tool-url: https://ainumbers.co/tools/311-gdpr-dsr-workflow-generator.html
      x-source: manifest
      x-ap2-export: true
x-mcp:
  transport: MCP JSON-RPC 2.0 (streamable HTTP)
  endpoint: https://mcp.ainumbers.co/mcp
  protocol_version: '2025-11-25'
  authentication: none
  registry: co.ainumbers/tools (official MCP registry)
  note: Connect any MCP-compatible client (Claude, ChatGPT, custom agent) directly to this endpoint. The REST paths in this file are descriptive only — they do not exist on the live server unless the REST shim is deployed.