AI-native privacy compliance · 10 commands · MCP server

Privacy audit tool built for
AI coding agents

(and developers)

Free CLI for GDPR compliance.Built for Claude Code, Cursor, Antigravity, and AI workflows.

Works with
Claude Code
Cursor
Windsurf
Cline
Antigravity
Aider
terminal — AI agent can run this
$npx etalon audit ./ --format json

// Machine-readable output for AI agents

{"violations": [

{"severity": "critical", "rule": "tracker-without-consent", "file": "src/tracking.ts:12"},

{"severity": "high", "rule": "insecure-cookie", "file": "src/auth/session.ts:45"},

{"severity": "medium", "rule": "pii-without-encryption", "file": "prisma/schema.prisma:23"}

]}

✓ AI agent can parse, prioritize, and auto-fix

Two steps. That's it.

Install the CLI and run audits from Claude Code, Cursor, or any AI agent.

1. Install the CLI

$npm install -g @etalon/cli

2. Run in your project

$etalon audit ./

...and watch it work.

Install ETALON as a skill for your AI coding agent

MCP server skill for automatic discovery and use

What is an MCP Server?

Model Context Protocol (MCP) lets AI agents use external tools directly. ETALON's MCP server enables Claude Desktop, Cline, and other agents to run audits, generate policies, and fix violations automatically — no manual commands needed.

1. Install

$ npm install -g @etalon/mcp-server

2. Configure

{

"mcpServers": {

"etalon": {

"command": "etalon-mcp"

}

}

}

3. Use

Your AI agent discovers ETALON automatically

You: "Check GDPR violations"

Claude: Found 3 issues. Want me to fix?

Available MCP Tools

etalon_auditScan codebase for privacy violations
etalon_scanScan website for third-party trackers
etalon_generate_policyAuto-generate GDPR privacy policy
etalon_consent_checkTest cookie consent compliance
etalon_policy_checkCompare policy vs actual trackers
etalon_data_flowMap PII data flows through codebase
etalon_lookupQuery vendor database (102 vendors)

Works with these AI agents

Claude Desktop

Full MCP support

Cline

VS Code extension

Claude Code

Terminal agent

Cursor

AI-first editor

Windsurf

AI IDE

Any MCP Agent

Universal protocol

Why AI agents love ETALON

Designed for programmatic access and automation

Machine-Readable Output

JSON and SARIF formats for AI parsing and downstream processing

npx etalon audit ./ --format json

Auto-Fix Capabilities

AI agents apply privacy patches automatically with preview

npx etalon audit ./ --fix

Programmatic API

Node.js library for custom workflows and integrations

import { auditProject } from 'etalon-core'

MCP Integration

Native support for Claude Desktop, Cline, and MCP agents

npm install -g @etalon/mcp-server

Exit Codes

Agents know pass/fail status for CI/CD and automated decisions

# 0 = clean | 1 = violations found

Fast Performance

~100 files/second scanning — agents get results instantly

✓ 247 files scanned in 0.8s
Why ETALON

Stop paying $15K/year for GDPR compliance

ETALON replaces expensive enterprise tools and legal consultants with free, open-source automation

💰

OneTrust

$5,000+/year

  • Scans websites (after deployment)
  • No code analysis
  • No policy generation
  • No consent testing
  • Enterprise-only pricing

Manual Audits

Weeks of work

  • ⚠️ Developer code review
  • ⚠️ Lawyer privacy policy drafts ($10K)
  • ⚠️ Manual tracker inventory
  • ⚠️ No automation
  • ⚠️ Human error

ETALON

$0/year forever

  • Code + network scanning
  • Auto-generate policies
  • Test consent flows
  • Policy vs reality check
  • Setup in 5 minutes

Cost Comparison

Traditional GDPR Compliance:
├─ OneTrust subscription$5,000/year
├─ Legal consultant (policy)$10,000
├─ Developer time (audits)$8,000
└─ Total:$23,000/year
ETALON:
├─ InstallationFree
├─ UsageFree
├─ UpdatesFree
└─ Total:$0 forever

ROI: ∞

10 Commands

All 10 commands for AI agents and developers

Every command works in terminal or via AI agent API

🔍

Code Audit

Scan your codebase for privacy violations. Detects tracker SDKs, PII in schemas, insecure cookies, and security config issues.

$ etalon audit ./
  • JavaScript, TypeScript, Python, Rust
  • 6 ORM formats
  • 175+ vendors
🌐

Network Scanner

Launch headless browser and intercept all network requests to identify third-party trackers.

$ etalon scan https://yoursite.com --deep
  • Live website testing
  • Consent dialog interaction
  • SARIF output
Unique
🍪

Consent Testing

Test if trackers fire before consent and after rejecting cookies. Catch GDPR violations.

$ etalon consent-check https://yoursite.com
  • Auto-detects cookie banners
  • Clicks "reject" button
  • Validates compliance
Unique
📄

Policy vs Reality

Cross-reference your privacy policy against actual trackers detected. Find undisclosed vendors.

$ etalon policy-check https://yoursite.com
  • Auto-discovers privacy policy
  • Finds discrepancies
  • Generates disclosure snippets
Killer Feature
📝

Auto-Generate Policy

Create a complete 8-section GDPR privacy policy from your actual code and trackers.

$ etalon generate-policy ./ --company "Acme"
  • No lawyer needed
  • Production-ready
  • MD/HTML/TXT output
Unique
🗺️

Data Flow Mapper

Map how PII flows through your app: sources → storage → sinks.

$ etalon data-flow ./ --format mermaid
  • Mermaid diagrams
  • Text summaries
  • JSON export
🔧

Project Setup

Add ETALON to your project: config, CI/CD, and pre-commit hooks.

$ etalon init ./ --ci github
  • GitHub Actions
  • GitLab CI
  • Pre-commit hooks
🔎

Vendor Lookup

Look up any domain in ETALON's vendor database. Get full metadata.

$ etalon lookup analytics.google.com
  • 175+ vendors
  • 475+ domains
  • Risk scores + GDPR info
🏅

Compliance Badge

Generate SVG compliance badge for your README. Show your privacy grade.

$ etalon badge ./
  • A-F grading
  • Score (0-100)
  • SVG output
ℹ️

Registry Stats

Show ETALON vendor registry metadata.

$ etalon info
  • Vendor count
  • Domain count
  • Last updated

All commands work locally. No cloud dependencies.
Your code never leaves your machine.

View Full Documentation
Pricing

Simple, transparent pricing

Start free with the CLI. Upgrade for hosted scanning, monitoring, and team features.

Open Source
For developers who want to run scans locally.
Freeforever
  • CLI scanner
  • 10 cloud scans / month
  • 3 monitored sites
  • 50+ tracker database
  • Email alerts
  • API access
  • Scheduled scans
Most Popular
Cloud
For teams monitoring production websites.
€29/ month
  • Everything in Free
  • 100 cloud scans / month
  • 20 monitored sites
  • Email alerts
  • API access
  • Scheduled daily scans
  • Priority support
Pro
For organizations with strict compliance needs.
€99/ month
  • Everything in Cloud
  • 1,000 cloud scans / month
  • Unlimited sites
  • Webhook integrations
  • Custom scan schedules
  • Team management
  • Priority support
FAQ

Frequently asked questions

What does ETALON detect?

ETALON identifies 175+ known tracking vendors across 475+ domains, including Google Analytics, Facebook Pixel, Hotjar, TikTok, LinkedIn, and more. It scans both your codebase (tracker SDKs, PII, insecure cookies) and live website (network requests, consent flows). Unknown third-party domains are also flagged.

How is this different from OneTrust or CookieBot?

ETALON is open-source, free, and does far more: code auditing, policy generation, consent testing, data flow mapping, and policy-vs-reality checking. Traditional tools only scan deployed websites and cost $5K+/year. ETALON catches issues before deployment and generates your privacy policy automatically.

Can ETALON really generate my privacy policy?

Yes. The generate-policy command analyzes your codebase, detects third-party services, maps data flows, and produces a complete 8-section GDPR-compliant privacy policy. Output in Markdown, HTML, or plain text. It replaces $10K+ in legal consulting fees.

Is my data safe?

The CLI runs entirely on your machine — no data is sent anywhere. All 10 commands work locally with zero cloud dependencies. Your code never leaves your machine.

How do I add ETALON to CI/CD?

Run `etalon init ./ --ci github` to auto-generate GitHub Actions workflows with fail conditions. Also supports GitLab CI and pre-commit hooks. Break the build on critical violations.

Ready to replace $23K in
compliance costs?

Install in 30 seconds. 10 commands. Complete GDPR coverage. No credit card required.