Integration · Productivity

Connect Claude & ChatGPT to Dastra

Ask your AI which data subject requests are running late, what your record of processing says about a system, or to log a new breach in Dastra. It can search and update processing activities, requests, breaches, tasks, assets, vendors and contracts, and reply to requesters on a request. Privacy work gets done without clicking through every register.

Connect Dastra free

Free plan, no credit card. Takes about a minute.

Try asking

“Which data subject requests are overdue?”
The AI searches requests that are past their deadline and lists them with title, purpose and state.
“Log an erasure request from [email protected] received today.”
It finds the right area and creates a data subject request with purpose Erasure, the requester's email and her message.
“Which processing activities rely on consent as legal basis?”
It searches the record of processing filtered by legal basis and lists the matching activities.

What your AI can do

Record of processing

Search, read, create and update processing activities, with filters for state, legal basis and tags.

Requests and breaches

Log and update data subject requests and data breaches, message requesters and close requests.

Tasks, assets and vendors

Manage compliance tasks and search assets, actors and contracts across your workspace.

“We sent a newsletter to the wrong list this morning. Log it as a breach.”
It creates a data breach with the details you give, such as label, type, date and area, so the team can assess it.
“Create a task for Mads to review the CRM vendor contract by 1 December.”
It finds Mads among the workspace users and creates a task with a deadline, assigned to him.
“Which of our vendors are based outside the EU?”
It searches actors filtered by country and lists vendors and processors with their details.

30 tools for Dastra

These tools are switched on when you connect. You can switch any of them off, or require your approval before it runs.

close_data_subject_requestVisible to othersClose a data subject request by `data_subject_request_id` with a `closed_reason` and description. `send_notification` emails the requester.
create_actorChanges dataCreate an actor (vendor, processor or partner) with a `label`, plus optional contact details, country and website.
create_assetChanges dataCreate an asset with `type` and `label`, plus optional description, hosting and owner details.
create_data_breachChanges dataLog a data breach, with its details (label, type, dates, area and more) in `body`.
create_data_subject_requestChanges dataLog a data subject request with `title`, `area_id`, `locale`, `purposes` (e.g. Access, Erasure) and the requester's `email` and `message`.
create_processing_activityChanges dataCreate a processing activity with a `label` and `area_id` (from list_entities), and optional `processing_type`.
create_taskChanges dataCreate a task with a `label`, plus optional `description_html`, `deadline`, `priority`, `assigned_to_user_id` and `area_id`.
get_actorGet one actor by `actor_id`.
get_assetGet one asset by `asset_id`.
get_contractGet one contract by `contract_id`.
get_current_userGet the Dastra user the connection is authenticated as.
get_data_breachGet one data breach by `data_breach_id`.
get_data_subject_requestGet one data subject request by `data_subject_request_id`.
get_processing_activityGet one processing activity by `data_processing_id`.
get_taskGet one task by `task_id`.
list_entitiesList the workspace's entities and areas, with `q` for text search. Many records need an `area_id` from here.
list_request_messagesList the messages exchanged on data subject requests, filtered by `data_subject_request_id`.
search_actorsSearch actors (vendors, processors, partners) with `q` and filters such as `types` or `countries`.
search_assetsSearch assets (software, applications and other systems) with `q` and filters such as `types` or `sensitive`.
search_contractsSearch contracts with `q` and filters such as `signed`, `expired` or `stakeholders`.
search_data_breachesSearch data breaches with `q` and filters such as `states`, `types` or `archived`.
search_data_subject_requestsSearch data subject requests (DSARs) with `q` and filters such as `states`, `purposes`, `overtaking` (late) or `archived`.
search_processing_activitiesSearch processing activities (the record of processing) with `q` and filters such as `states`, `legal_basis`, `tags` or `archived`.
search_tasksSearch compliance tasks (actions) with `q` and filters such as `users`, `states`, `prios`, `overtaking` or `exclude_done`.
search_usersSearch users in the workspace with `q`. Use it to find a user ID to assign tasks to.
send_request_messageChanges dataPost a `message` on a data subject request by `data_subject_request_id`, as part of the conversation with the requester, who may be notified.
update_data_breachChanges dataUpdate a data breach by `data_breach_id` with JSON-patch `items` (op, path, value).
update_data_subject_requestChanges dataUpdate a data subject request by `data_subject_request_id` with JSON-patch `items` (op, path, value).
update_processing_activityChanges dataUpdate a processing activity by `data_processing_id` with JSON-patch `items` (op, path, value).
update_taskChanges dataUpdate a task by `task_id` with JSON-patch `items` (op, path, value).

Set up in three steps

1
Pick the app
Create a free PipMCP account and choose Dastra from the app list.
2
Paste your key
Paste your Dastra private API key and your workspace ID. Create the API key in Dastra under the organisation's API settings and copy the private key. The workspace ID is the numeric ID of the Dastra workspace the AI should work in.
3
Add the link to your AI
You get a personal MCP link. Add it to Claude, ChatGPT or Cursor:
1. Click your name, then Settings › Connectors › Add custom connector.
2. Paste your link as the Remote MCP server URL.
3. Switch it on from the + menu in a chat.

Questions

What can the AI do in Dastra?

The AI can search and read processing activities, data subject requests and their messages, data breaches, tasks, assets, actors, contracts, entities and users. It can create and update processing activities, requests, breaches and tasks, create assets and actors, post messages on requests and close requests.

Does the AI see my Dastra API key?

No. Your Dastra credentials are encrypted at rest and never shown to the AI. After you save them, they are not shown again, not even to you. The AI only sees the results of the tools it calls.

Can I control what the AI is allowed to do?

Yes. You choose which tools are switched on, so you can start read-only. Posting a message to a requester and closing a request with a notification reach people outside your team, and both can require your approval before they run. Every tool call is logged.

Does it work with ChatGPT?

Yes. In ChatGPT go to Settings › Apps & Connectors › Advanced and turn on Developer mode, then add your PipMCP link. Developer mode needs a paid ChatGPT plan: Plus, Pro, Business or Enterprise. The same link also works in Claude (Settings › Connectors › Add custom connector), Cursor and other MCP clients.

What does it cost?

PipMCP has a free plan with no credit card required. Paid plans bill per completed task. You also need your own Dastra account.

Why does Dastra need a workspace ID?

Most records in Dastra, such as processing activities, requests and breaches, belong to a workspace. You enter the workspace ID once next to your API key, and every tool then works in that workspace.