Policyforge MCP server
{
"mcpServers": {
"policyforge": {
"command": "npx",
"args": [
"-y",
"@policyforge/mcp@latest"
],
"env": {
"POLICYFORGE_API_KEY": "<policyforge_api_key>",
"POLICYFORGE_API_URL": "https://..."
}
}
}
}{
"mcpServers": {
"policyforge": {
"command": "npx",
"args": [
"-y",
"@policyforge/mcp@latest"
],
"env": {
"POLICYFORGE_API_KEY": "<policyforge_api_key>",
"POLICYFORGE_API_URL": "https://..."
}
}
}
}{
"mcpServers": {
"policyforge": {
"command": "npx",
"args": [
"-y",
"@policyforge/mcp@latest"
],
"env": {
"POLICYFORGE_API_KEY": "<policyforge_api_key>",
"POLICYFORGE_API_URL": "https://..."
}
}
}
}{
"servers": {
"policyforge": {
"command": "npx",
"args": [
"-y",
"@policyforge/mcp@latest"
],
"env": {
"POLICYFORGE_API_KEY": "${input:policyforge_api_key}",
"POLICYFORGE_API_URL": "${input:policyforge_api_url}"
}
}
},
"inputs": [
{
"id": "policyforge_api_key",
"type": "promptString",
"description": "Policyforge api key",
"password": true
},
{
"id": "policyforge_api_url",
"type": "promptString",
"description": "Policyforge api url",
"password": true
}
]
}{
"mcpServers": {
"policyforge": {
"command": "npx",
"args": [
"-y",
"@policyforge/mcp@latest"
],
"env": {
"POLICYFORGE_API_KEY": "<policyforge_api_key>",
"POLICYFORGE_API_URL": "https://..."
}
}
}
}file .mcp.json (in your project root)file claude_desktop_config.jsonfile ~/.cursor/mcp.jsonfile .vscode/mcp.jsonfile ~/.codeium/windsurf/mcp_config.jsoninstall npx -y @policyforge/mcpversion 0.6.1
What it does
PolicyForge generates legal policies (privacy, terms of service, cookies, HIPAA BAAs, etc.) from your codebase and integrates with AI coding tools via MCP. It also audits policies for compliance gaps and checks for drift between policies and actual code.
- Generate a privacy policy that reflects what your application actually collects and processes, then host it and embed the URL in your project.
- Audit your existing privacy policy against your codebase to find compliance gaps or undisclosed data practices.
- Check whether your published policies still match your current code to catch drift before it becomes a compliance problem.
Tools this server exposes
| Tool | Does |
|---|---|
| generate_policy | Generate a legal policy (privacy, terms of service, cookie policy, refund policy, EULA, disclaimer) in Markdown and get a hosted URL. |
| generate_baa | Generate a HIPAA Business Associate Agreement compliant with 45 CFR 164.504(e). |
| regenerate_policy | Re-run policy generation with updated parameters or codebase changes. |
| audit_compliance | Audit your codebase and policies for compliance gaps (free, unlimited). |
| check_policy_freshness | Check whether your policies still match your current codebase (free, unlimited). |
| get_disclosure_checklist | Get a compliance scan rubric to verify policy coverage (free, unlimited). |
| get_usage | Check your remaining policy generation quota. |
Before you enable it
An MCP server runs with whatever access you give it. Start with a development account rather than production, and check which tools the server exposes before you let an agent call them unattended.