Polish Law MCP Server

The Sejm alternative for the AI age.

Query 8,943 Polish laws -- from the RODO implementing provisions and Kodeks karny to the KSC, Kodeks spolek handlowych, and more -- directly from Claude, Cursor, or any MCP-compatible client.

If you're building legal tech, compliance tools, or doing Polish legal research, this is your verified reference database.

Built by Ansvar Systems -- Stockholm, Sweden

Why This Exists

Polish legal research is scattered across ISAP (Internetowy System Aktow Prawnych), the Dziennik Ustaw, and commercial platforms. Whether you're:

• A lawyer validating citations in a brief or contract under Polish law
• A compliance officer checking RODO/GDPR implementing provisions or KSC obligations
• A legal tech developer building tools on Polish legislation
• A researcher tracing legislative history through the Dziennik Ustaw

...you shouldn't need dozens of browser tabs and manual PDF cross-referencing. Ask Claude. Get the exact provision. With context.

This MCP server makes Polish law searchable, cross-referenceable, and AI-readable.

Example Queries

Once connected, just ask naturally:

• "Co mowi RODO o zgodzie na przetwarzanie danych?"
• "Znajdz przepisy o ochronie danych osobowych w polskim prawie"
• "What does the KSC say about incident reporting?"
• "Find cybercrime provisions in the Kodeks karny (Art. 267-269b)"
• "Is the Kodeks spolek handlowych still in force?"
• "What EU directives does the DPA 2018 implement?"
• "Validate this legal citation"
• "Build a legal stance on data breach notification requirements in Poland"

Deployment Tier

MEDIUM -- dual tier, free database bundled in npm package.

| Tier | Platform | Database | Content | |------|----------|----------|---------| | Free | Vercel (Hobby) / npm (stdio) | Core legislation (~100-180 MB) | Key laws (DPA 2018, KSC, Kodeks karny cybercrime, KSH, e-Services Act, Telecommunications Law), FTS search, EU cross-references | | Professional | Azure Container Apps / Docker / Local | Full database (~500 MB - 900 MB) | + All ustawy and rozporzadzenia, UODO decisions and guidance, Supreme Court/Constitutional Tribunal summaries, NIS2 transposition materials |

The full database is larger due to the comprehensive scope of Polish legislation and supplementary regulatory materials. The free tier contains all key data protection, cybersecurity, cybercrime, commercial, and e-services legislation from ISAP.

Data Sources

| Source | Authority | Method | Update Frequency | License | Coverage | |--------|-----------|--------|-----------------|---------|----------| | ISAP | Kancelaria Sejmu RP (Chancellery of the Sejm) | HTML Scrape / API | Weekly | Government Open Data (public domain per Art. 4 Copyright Act) | All Polish legislation published in Dziennik Ustaw and Monitor Polski |

Full provenance metadata: sources.yml

Quick Start

Use Remotely (No Install Needed)

Connect directly to the hosted version -- zero dependencies, nothing to install.

Endpoint: https://polish-law-mcp.vercel.app/mcp

| Client | How to Connect | |--------|---------------| | Claude.ai | Settings > Connectors > Add Integration > paste URL | | Claude Code | claude mcp add polish-law --transport http https://polish-law-mcp.vercel.app/mcp | | Claude Desktop | Add to config (see below) | | GitHub Copilot | Add to VS Code settings (see below) |

Claude Desktop -- add to claude_desktop_config.json:

{
  "mcpServers": {
    "polish-law": {
      "type": "url",
      "url": "https://polish-law-mcp.vercel.app/mcp"
    }
  }
}

GitHub Copilot -- add to VS Code settings.json:

{
  "github.copilot.chat.mcp.servers": {
    "polish-law": {
      "type": "http",
      "url": "https://polish-law-mcp.vercel.app/mcp"
    }
  }
}

Use Locally (npm)

npx @ansvar/polish-law-mcp

Claude Desktop -- add to claude_desktop_config.json:

macOS: ~/Library/Application Support/Claude/claude_desktop_config.json Windows: %APPDATA%\Claude\claude_desktop_config.json

{
  "mcpServers": {
    "polish-law": {
      "command": "npx",
      "args": ["-y", "@ansvar/polish-law-mcp"]
    }
  }
}

Cursor / VS Code:

{
  "mcp.servers": {
    "polish-law": {
      "command": "npx",
      "args": ["-y", "@ansvar/polish-law-mcp"]
    }
  }
}

Tools

| Tool | Description | Free Tier | Professional | |------|-------------|-----------|-------------| | get_provision | Retrieve a specific article from a Polish law or code | Yes | Yes | | search_legislation | Full-text search across all Polish legislation (Polish) | Yes | Yes | | list_laws | List all available laws with metadata | Yes | Yes | | get_law_structure | Get table of contents / structure of a law or code | Yes | Yes | | get_provision_eu_basis | Cross-reference Polish law to EU directives/regulations | Yes | Yes | | search_rozporzadzenia | Search rozporzadzenia (regulations) and executive instruments | No (upgrade) | Yes | | get_uodo_guidance | Retrieve UODO decisions and guidance | No (upgrade) | Yes |

Key Legislation Covered

| Law | Identifier | Domain | Key Topics | |-----|-----------|--------|------------| | DPA 2018 | Ustawa o ochronie danych osobowych (Dz.U. 2018 poz. 1000) | Data Protection | GDPR/RODO implementing provisions, UODO structure and powers, administrative procedures, certification | | KSC | Ustawa o krajowym systemie cyberbezpieczenstwa (Dz.U. 2018 poz. 1560) | Cybersecurity | National cybersecurity system, CSIRT teams, incident reporting, essential services operators, NIS implementation | | Kodeks karny (cybercrime) | Art. 267-269b | Cybercrime | Unauthorized access (267), data destruction (268), system sabotage (268a), critical system sabotage (269), hacking tools (269b) | | KSH | Kodeks spolek handlowych (Dz.U. 2000 nr 94 poz. 1037) | Company Law | Sp. z o.o. and S.A. companies, partnerships, corporate governance, shareholders' rights | | e-Services Act | Ustawa o swiadczeniu uslug droga elektroniczna (Dz.U. 2002 nr 144 poz. 1204) | e-Commerce | Electronic service providers, hosting liability, commercial communications, consumer information | | Telecommunications Law | Prawo telekomunikacyjne (Dz.U. 2004 nr 171 poz. 1800) | Telecommunications | Telecom regulation, UKE authority, licensing, data retention, lawful interception |

Database Estimates

| Component | Free Tier | Full (Professional) | |-----------|-----------|---------------------| | Core codes and key laws | ~70-130 MB | ~70-130 MB | | All ustawy and rozporzadzenia | -- | ~300-500 MB | | UODO decisions and guidance | -- | ~50-100 MB | | Case law summaries | -- | ~70-150 MB | | Cross-references and metadata | ~5 MB | ~15 MB | | Total | ~100-180 MB | ~500 MB - 900 MB |

Delivery strategy: Free-tier DB bundled in npm package (Strategy A -- fits within Vercel 250 MB function limit). If final size exceeds 250 MB after ingestion, switch to Strategy B (runtime download from GitHub Releases).

Regulatory Context

• Supervisory Authority: UODO (Urzad Ochrony Danych Osobowych - Personal Data Protection Office) with growing enforcement activity
• RODO is the Polish name for GDPR (Rozporzadzenie o Ochronie Danych Osobowych); the DPA 2018 provides national implementing provisions
• KSC established Poland's national cybersecurity system with three CSIRT teams: CSIRT NASK (private sector), CSIRT GOV (government), CSIRT MON (military)
• NASK (Naukowa i Akademicka Siec Komputerowa) operates the national cybersecurity research center
• Polish legal texts are explicitly excluded from copyright under Art. 4 of the Copyright Act, ensuring free reuse
• Dziennik Ustaw (Journal of Laws) is the sole authoritative publication vehicle for Polish legislation
• Poland is the EU's sixth largest economy and the largest in Central and Eastern Europe
• NIS2 transposition is expected to expand KSC significantly with new entity categories and reporting obligations

Development

# Clone the repository
git clone https://github.com/Ansvar-Systems/polish-law-mcp.git
cd polish-law-mcp

# Install dependencies
npm install

# Build
npm run build

# Run tests
npm test

# Run contract tests
npm run test:contract

# Build database (requires raw data in data/ directory)
npm run build:db

# Build free-tier database
npm run build:db:free

# Run drift detection
npm run drift:detect

# Full validation
npm run validate

Architecture

polish-law-mcp/
├── .github/
│   ├── workflows/
│   │   ├── ci.yml                    # Test + lint + security scan
│   │   ├── publish.yml               # npm publish on version tags
│   │   ├── check-source-updates.yml  # Data freshness monitoring
│   │   └── drift-detect.yml          # Upstream drift detection
│   ├── SECURITY.md
│   ├── SECURITY-SETUP.md
│   └── ISSUE_TEMPLATE/
│       └── data-error.md
├── data/
│   └── .gitkeep
├── fixtures/
│   ├── golden-tests.json             # 12 contract tests
│   ├── golden-hashes.json            # 6 drift detection anchors
│   └── README.md
├── scripts/
│   ├── build-db.ts
│   ├── build-db-free.ts
│   ├── download-free-db.sh
│   ├── ingest.ts
│   ├── drift-detect.ts
│   └── check-source-updates.ts
├── src/
│   ├── server.ts
│   ├── db.ts
│   └── tools/
│       ├── get-provision.ts
│       ├── search-legislation.ts
│       ├── list-laws.ts
│       ├── get-law-structure.ts
│       ├── get-provision-eu-basis.ts
│       ├── search-rozporzadzenia.ts
│       └── get-uodo-guidance.ts
├── __tests__/
│   ├── unit/
│   ├── contract/
│   │   └── golden.test.ts
│   └── integration/
├── sources.yml
├── server.json
├── package.json
├── tsconfig.json
├── vercel.json
├── CHANGELOG.md
├── LICENSE
└── README.md

Notes on Polish Data Protection Landscape

RODO (GDPR) and the DPA 2018 have distinctive Polish implementation features:

• Poland's DPA 2018 focuses on UODO structure and procedures rather than substantive data protection rules (which come directly from GDPR/RODO)
• UODO has been growing in enforcement activity, with increasing fine amounts
• Poland maintains sector-specific data protection provisions in telecommunications and health legislation
• Age of digital consent set at 16 (GDPR default)

KSC (National Cybersecurity System) is comprehensive:

• Three-CSIRT model: CSIRT NASK (private sector), CSIRT GOV (government), CSIRT MON (military)
• Essential services operators must implement security measures and report incidents
• Digital service providers have separate obligations
• NIS2 transposition will significantly expand the scope and requirements

Kodeks karny cybercrime provisions (Arts. 267-269b) cover:

• Art. 267: Unauthorized access to information
• Art. 268: Destruction or alteration of data
• Art. 268a: Disruption of automated data processing
• Art. 269: Sabotage of computer systems of particular importance
• Art. 269b: Manufacturing or possession of hacking tools

Poland is the largest economy in Central and Eastern Europe and a key market for EU-wide compliance programs.

Related Documents

• MCP Quality Standard -- quality requirements for all Ansvar MCPs
• MCP Infrastructure Blueprint -- infrastructure implementation templates
• MCP Deployment Tiers -- free vs. professional tier strategy
• MCP Server Registry -- operational registry of all MCPs
• MCP Remote Access -- public Vercel endpoint URLs

Security

Report vulnerabilities to [email protected] (48-hour acknowledgment SLA).

See SECURITY.md for full disclosure policy.

Maintained by: Ansvar Systems Engineering Contact: [email protected]