Skip to content
Agentmart
Submit a tool

Policyforge

Generate, audit, and maintain legal policies that match what your code actually does.

Connector by policyforge.coOfficial · Domain verified by the MCP Registry

IndexedLicense unknownLocal (stdio)Remote (HTTP)
Write a review

Install

Works with Claude Code, VS Code, Codex, Cursor, Windsurf, Claude Desktop. Read the repository before you give any tool access to your data.

npx agentmarket install connector/policyforge-co-mcp

Asks which of your tools to add it to (Claude Code, Codex, Cursor, VS Code, Windsurf, Gemini CLI, Claude Desktop) and shows the change first. See https://agentmart.dev/cli.

Remote endpoint

  • https://policyforge.co/api/mcp Remote (HTTP)

Get the weekly diff

The weekly diff: one email a week with new agent tools, notable updates and grade changes, plus security alerts for tools you follow. Double opt-in, one-click unsubscribe.

We use your email only for this newsletter. Privacy

About

Generate, audit, and maintain legal policies that match what your code actually does.

Reviews

Write a review

No reviews yet. Installed it? Reviews come from verified installers only. How reviews work

Permissions

What this server can do and what it asks for, from its tool list and install config. Checked Oct 25, 2026.

Tools
10 read · 2 write · 4 delete
Secrets
1 (API keys, tokens or passwords)
Install scripts
None found
Runs as
Node.js package

Tools by what they do 16

Read from the source code; the running server may list different tools.

Read 10 · Look things up without changing anything.

  • audit_compliance
  • check_generation
  • check_policy_freshness
  • get_disclosure_checklist
  • get_integration_guide
  • get_policy
  • get_usage
  • list_policies
  • list_policy_types
  • list_policy_versions

Write 2 · Create, change, send or run things.

  • generate_baa
  • generate_policy

Delete 4 · Delete, drop, revoke or wipe things.

  • delete_policy
  • regenerate_policy
  • restore_policy_version
  • update_policy

Secrets and settings it asks for

Secrets: values you paste in that let it act as you.

  • POLICYFORGE_API_KEY

Network hosts it talks to 1

  • policyforge.co · found in remote endpoint, install command

Tools (16)

Read from the source code; the running server may differ. Descriptions are the server’s own words; hidden characters are shown as [U+…].

  • audit_complianceAudit complianceread-only

    Compliance gap analysis: submit the stack manifest you built by scanning the codebase (see get_disclosure_checklist), optionally with a policy_id to audit against. PolicyForge compares what the code does with what the policy discloses and returns missing disclosures, overstated claims, missing policy types, and recommendations. Without a policy_id it audits the manifest alone (which policies are needed and what they must cover). Does not consume generation quota.

  • check_generationCheck generationread-only

    Get the result of a generate_policy, generate_baa or regenerate_policy call that was still running when it returned a job ID. Returns the finished policy, the error if generation failed, or says it is still running. Use this instead of starting the generation again, which would create a duplicate.

  • check_policy_freshnessCheck policy freshnessread-only

    Drift detection: scan the codebase now (get_disclosure_checklist), build the current stack manifest, and compare it against the manifest stored when the policy was last generated/regenerated. Reports what changed in the stack so you know whether the policy still matches the code. Runs locally on the two manifests — no AI call, no quota.

  • delete_policyDelete policycan change or delete data

    Permanently delete a policy. The hosted URL and any embeds of it stop working immediately, and this cannot be undone. Confirm with the user before deleting anything they may have linked from their site.

  • generate_baaGenerate a HIPAA Business Associate Agreement

    Generate a HIPAA Business Associate Agreement (BAA) between a covered entity and a vendor that handles Protected Health Information. Built from the clauses required by 45 CFR 164.504(e) and validated clause by clause before it is returned. Use this instead of generate_policy for BAAs — a BAA is a binding two-party contract, not a published policy, so it needs both parties' legal names and addresses and is never hosted at a public URL. Ask the user for the party details, effective date, and governing law: these are negotiated facts you cannot read from source code. Requires a Pro plan. The …

  • generate_policyGenerate policy

    Generate a legal policy (privacy policy, terms of service, cookie policy, refund policy, EULA, or disclaimer) for a business and return its Markdown content plus a hosted URL. Consumes one policy from the account's quota. IMPORTANT: if you are working inside the user's project, call get_disclosure_checklist and scan the codebase FIRST (dependencies, script tags, cookie writes, outbound hosts), then fill the optional fields below from what the code actually does — do not ask the user for facts you can read from source. Only ask for what code cannot tell you: legal company name, contact email, p…

  • get_disclosure_checklistGet disclosure checklistread-only

    Get the rubric for scanning a codebase before generating or updating policies: which SDKs, scripts, and patterns legally require disclosure, and how each finding maps to generate_policy's fields. Call this before generate_policy when working inside the user's project — policies derived from the actual code beat policies from memory.

  • get_integration_guideGet integration guideread-only

    Get copy-paste instructions for wiring a generated policy into the user's site: hosted link, embed snippet, and framework-specific placement. Call this after generate_policy to finish the job — a generated policy helps nobody until it's linked from the site.

  • get_policyGet policyread-only

    Retrieve a single policy by ID, including its status, hosted URL, and full Markdown content.

  • get_usageGet usage & quotaread-only

    Check the account's subscription tier and remaining policy-generation quota. Call this before generate_policy on accounts that may be on the free tier, so you can plan instead of hitting quota errors.

  • list_policiesList policiesread-only

    List the policies previously created on this PolicyForge account, newest first.

  • list_policy_typesList policy typesread-only

    List the supported policy types, business types, and jurisdictions accepted by generate_policy. Call this first if unsure which enum values are valid.

  • list_policy_versionsList policy versionsread-only

    Version history for a policy: snapshots taken before every API update, regeneration, or restore, plus any auto-generated compliance update drafts. Use get-version content via restore_policy_version, or fetch a single version's content with this policy's versions endpoint.

  • regenerate_policyRegenerate policycan change or delete data

    Re-run the AI generation engine over a policy's stored business context merged with the changed fields you provide — same policy ID and hosted URL, so published links keep working. The previous content is saved as a version first (see list_policy_versions / restore_policy_version). Consumes one generation from quota, like generate_policy. Use this when the business context changed substantially (new integrations, new jurisdiction, renamed company); for small wording fixes prefer update_policy, which is free and instant. If it is not finished within about 45 seconds this returns a job ID; use c…

  • restore_policy_versionRestore policy versioncan change or delete data

    Restore a policy to a previous version from list_policy_versions. The current content is snapshotted as a new version first, so a restore is itself reversible. The hosted URL is unchanged.

Show 1 more tools
  • update_policyUpdate policycan change or delete data

    Update an existing policy in place — the policy ID, hosted URL, and embed keep working, so links already published on the user's site stay valid. Use this instead of generate_policy when the business context changed (new SDK, new data flow, renamed company): fetch the current content with get_policy, then either send small changes as `edits` (exact find/replace pairs, best for one-line fixes) or submit the complete revised Markdown as `content`. The previous content is saved as a version first, so restore_policy_version can undo a bad update.

Signals

Stars
0
Forks
0
Open issues
0
Last commit
Sep 29, 2026 (1 month ago)
Last release
Sep 29, 2026 (29 days ago)

From GitHub (fetched Oct 24, 2026).

Details

Registry name
co.policyforge/mcp
Version
0.8.0
Auth
Auth not stated, API key
Packages
npm @policyforge/mcp
License
License unknown
Repository
github.com/PolicyForge/mcp
Website
policyforge.co
First seen
Oct 24, 2026
Last checked
Oct 24, 2026
Source
Official MCP Registrygithub-graphql
Cite this page

Policyforge MCP server. Agent Mart. https://agentmart.dev/connectors/policyforge-co-mcp (last updated 2026-10-24)