Poliogo

Connect Claude Code

Run Poliogo inside Claude Code, with the same six tools available as CLI subcommands so CI hits the same code path.

How it connects
Model Context Protocol server, runs locally
Setup time
One command
Access
Local only — no account grant
npx poliogo-mcp init

Run this in your project, then ask your agent to check your compliance. MCP access is included from the Starter plan.

How the connection works

  1. Run one commandnpx poliogo-mcp init registers the server in your editor, once per project.
  2. Ask your agentIt calls check_compliance and scans the workspace locally.
  3. Detection on demandRe-ask any time — or wire the same tools into CI as subcommands.

What it looks like once connected

An illustration of this connection inside your Poliogo dashboard — not live data.

Local scan completeExample
~/code/acme-web · workspace

Detected in this project

  • Next.jsnext in package.json
  • Pineconesrc/lib/vectors.ts
  • OpenAIfetch to api.openai.com
  • ResendRESEND_API_KEY in .env.example
Last scan: just now3 documents up to date
Everything above was matched on your own machine. Only the service names leave it — never the files.

Exact permissions requested

Every permission this connection asks for, named as Claude Code names it on its own consent screen — so you can compare this table to what you are shown.

PermissionGrantWhat it is used for
No account grantNot requestedThere is no OAuth step. The MCP server runs on your machine under your own user.
Workspace filesReadRead locally, in the folder you ran the scan in. Nothing is uploaded.
Writing documentsWriteOnly when you ask the agent to. generate_docs and install_pages write into your project, and you review the diff.

Setting it up

What you do, and what you will be looking at while you do it.

  1. Run the command in your project

    It registers the Poliogo MCP server with Claude Code. No OAuth, no token — the scan happens on your machine.

  2. Ask Claude about your compliance

    “Is my app compliant?” It calls check_compliance, scans locally, and names the services your documents do not yet cover.

  3. Let it write the documents

    generate_docs and install_pages put your policies and their routes into the project. explain_clause will tell you why any individual clause is there, with the file and line it was proved from.

  4. Use the same tools in CI

    Every one of the six is also a CLI subcommand, so a pipeline runs the identical scan your editor ran. A build can fail on a new undisclosed service instead of shipping it.

  5. Refresh the rules block

    inject_rules maintains a fenced compliance block in CLAUDE.md and AGENTS.md, so the agent keeps new integrations declared as it writes them.

Poliogo · New projectExample

Choose how to scan your app

Pick one. We scan your code and settings to find the services your app uses — the scan keeps that list, not your files.

AI Coding EditorCursor, Claude Code, Windsurf — copy one command into your editor and it connects the project for you. No coding needed.Choose another way
CursorClaude CodeWindsurf

Generate your licence key

MCP Server Access

The licence key the poliogo-mcp package uses in Cursor, Windsurf and Claude Code. Included from Starter.

Copy it now — it is never shown again.

poliogo_••••••••••••••••••••••••

Set it as POLIOGO_API_KEY in the environment your editor launches npx poliogo-mcp with.

Generate key

Paste this into Claude Code

npx poliogo-mcp initCopy

Your agent runs it and writes the server into .mcp.json — nothing else in that file is touched.

{
  "mcpServers": {
    "poliogo": {
      "command": "npx",
      "args": [
        "-y",
        "poliogo-mcp"
      ]
    }
  }
}

Ask your editor to scan

“Scan my stack with Poliogo.”Local scan complete · only the service names left this machine
Tell us what you use instead
The Poliogo setup screen for Claude Code, drawn from the same catalogue the app reads. An illustration — not live data, and nothing here is clickable.

What Poliogo detects from Claude Code

The right-hand column is the part worth reading: it is what this connection cannot reach even if we wanted it to.

What it reads

  • The workspace open in your editor, scanned on your own machine.
  • Manifests and source text, exactly as a repository scan reads them.
  • Drift against the last snapshot your documents were generated from.

What it never reads

  • Your source code. It never leaves the machine — only the list of detected services is sent.
  • Anything outside the workspace you ran the scan in.
  • Any file, unless you ask the agent to write the documents.

Ready to connect Claude Code?

The free plan covers one project with no credit card. You approve everything before a single document is written.

Poliogo is a compliance management platform, not a law firm. What it produces is not legal advice. See exactly what each connection reads.