# CookieComply

> Live-page cookie capture → compliance analysis → reports your team can share.

## Product

- [Website](https://cookie-comply.com)
- [Integrations / AI setup](https://cookie-comply.com/en/integrations)
- [Pricing](https://cookie-comply.com/en/pricing)
- [Blog](https://cookie-comply.com/en/blog)
- [GDPR cookie audit](https://cookie-comply.com/en/gdpr-cookie-audit)
- [Glossary](https://cookie-comply.com/en/glossary)

## For AI agents

Works with Cursor, Claude, ChatGPT, Codex, Copilot, Windsurf, and other
MCP-compatible or REST-capable agents.

### Interfaces (same /api/v1 Bearer token)

- **Hosted MCP** (`https://mcp.cookie-comply.com/mcp`) — default for AI agents; no local install
- **`@cookiecomply/mcp`** — local stdio MCP (offline / self-hosted); same tools as hosted
- **`@cookiecomply/cli`** — JSON-first shell/CI (`npx @cookiecomply/cli … --json`)
- **`@cookiecomply/sdk`** — typed TypeScript client for your own Node app

Skills (`npx skills add …`) are playbooks agents read — not an npm product package.

### One-command setup

```bash
# MCP tools (hosted)
npx add-mcp https://mcp.cookie-comply.com/mcp \
  -n cookiecomply -t http \
  -h 'Authorization: Bearer ${COOKIECOMPLY_API_KEY}'

# Or local stdio
npx -y @cookiecomply/mcp

# Skills playbook
npx skills add samir-abis/cookiecomply-skills

# CLI / SDK (when you need them)
npx @cookiecomply/cli usage --json
npm i @cookiecomply/sdk
```

Create `COOKIECOMPLY_API_KEY` in Settings → Connect AI & automation.

### Docs

- [Human setup](https://cookie-comply.com/en/integrations)
- [Skill](https://cookie-comply.com/skills/cookiecomply/SKILL.md)
- [Capture guide](https://cookie-comply.com/skills/cookiecomply/agent-capture.md)
- [OpenAPI](https://cookie-comply.com/openapi/v1.yaml)
- [Hosted MCP](https://mcp.cookie-comply.com/mcp)

## Workflow

1. **Installed CookieComply skill** — `SKILL.md` workflow; on demand `references/cmp-patterns.md` (OneTrust / Cookiebot / buried Reject / CF) and `references/validate-codes.md`.
2. **Browser tool** — three-state capture; omit `declined` if Reject failed.
3. **validate_capture** — free; surface hard fails and soft `declined_looks_like_preconsent`.
4. **analyze_cookies** / `POST /api/v1/analyze` — one scan when validation passes.
5. Summarize; confirm unsure cookies; optional export.

Web mirrors: [Skill](https://cookie-comply.com/skills/cookiecomply/SKILL.md) · [Capture index](https://cookie-comply.com/skills/cookiecomply/agent-capture.md) · [CMP patterns](https://cookie-comply.com/skills/cookiecomply/references/cmp-patterns.md)

## Auth

`Authorization: Bearer <token>` or env `COOKIECOMPLY_API_KEY`. Never ask for the secret in chat.