Malaysian Law MCP

A Model Context Protocol (MCP) server providing comprehensive access to Malaysian legislation, including the Personal Data Protection Act 2010 (PDPA), Computer Crimes Act 1997, Communications and Multimedia Act 1998, Companies Act 2016, and Electronic Commerce Act 2006 with full-text search.

Deployment Tier

MEDIUM -- Dual tier, bundled free database shipped with the npm package. Full database available via separate download.

Estimated database size: ~80-160 MB (free tier), ~300-600 MB (professional tier with subsidiary legislation and case law)

Key Legislation Covered

Regulatory Context

• Data Protection Supervisory Authority: PDP Commissioner (Jabatan Perlindungan Data Peribadi) under Ministry of Communications and Digital
• Telecommunications Regulator: Malaysian Communications and Multimedia Commission (MCMC)
• Malaysia's PDPA 2010 was one of the first comprehensive data protection laws in Asia; notably it does NOT apply to federal and state governments
• Recent PDPA amendments (2024) expand scope including mandatory data breach notification obligations
• Malaysia uses a mixed legal system: common law (British heritage), Islamic law (Syariah), and customary law (adat)
• The Malay text prevails in case of conflict (National Language Act 1963/67), but legislation is available in both Malay and English
• Malaysia is an ASEAN member and participates in the ASEAN Framework on Personal Data Protection
• The Act numbering system is the standard identifier (e.g., Act 709 = PDPA 2010)

Data Sources

Full provenance metadata: sources.yml

Installation

npm install -g @ansvar/malaysian-law-mcp

Usage

As stdio MCP server

malaysian-law-mcp

In Claude Desktop / MCP client configuration

{
  "mcpServers": {
    "malaysian-law": {
      "command": "npx",
      "args": ["-y", "@ansvar/malaysian-law-mcp"]
    }
  }
}

Available Tools

Development

# Install dependencies
npm install

# Build
npm run build

# Run tests
npm test

# Run contract tests
npm run test:contract

# Run all validation
npm run validate

# Build database from sources
npm run build:db

# Start server
npm start

Contract Tests

This MCP includes 12 golden contract tests covering:

• 4 article retrieval tests (PDPA s4, Computer Crimes Act s3, Companies Act s1, CMA s1)
• 3 search tests (data peribadi, jenayah komputer, syarikat)
• 2 citation roundtrip tests (official agc.gov.my URL patterns)
• 1 cross-reference test (PDPA to GDPR)
• 2 negative tests (non-existent Act, malformed section)

Run with: npm run test:contract

Malaysian Act Numbering

Malaysia uses an Act numbering system for federal legislation:

Security

See SECURITY.md for vulnerability disclosure policy.

Report data errors: Open an issue

License

Apache-2.0 -- see LICENSE

Built by Ansvar Systems -- Cybersecurity compliance through AI-powered analysis.