Skip to main content
Glama

ComplianceIQ MCP Server

Generate professional compliance documents (privacy policies, terms of service, HIPAA policies, employee handbooks, and more) directly from Claude, Cursor, or any MCP-compatible AI tool.

Setup

Claude Desktop

Add to your claude_desktop_config.json:

{
  "mcpServers": {
    "complianceiq": {
      "command": "npx",
      "args": ["complianceiq-mcp"],
      "env": {
        "COMPLIANCEIQ_API_KEY": "your_api_key_here"
      }
    }
  }
}

Environment Variables

Variable

Required

Description

COMPLIANCEIQ_API_KEY

No (2 free docs/day)

API key from complianceiq.site

COMPLIANCEIQ_API_URL

No

Custom API URL (default: https://complianceiq.site)

Related MCP server: mcp-shiplegal

Tools

generate_document

Generate a compliance document tailored to your industry.

export_document

Export to PDF or DOCX.

list_document_types

List all 12 document types with descriptions.

Available Tools

3 tools
export_documentA

Export a compliance document to PDF or DOCX format. Provide the document content (Markdown) from generate_document.

ParametersJSON Schema
NameRequiredDescriptionDefault
formatYesExport format: pdf or docx.
contentYesDocument content in Markdown (from generate_document output).
docTypeYesDocument type identifier (e.g. privacy, terms, handbook).
companyNameYesCompany name for the document header.

TDQS

A3.9/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are provided, so the description must carry the burden of behavioral disclosure. It only states the export action and input source, but does not disclose what the tool returns (e.g., file download, base64, URL), any side effects, permissions, or failure modes. This is a significant gap for a tool with no output schema.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single sentence that front-loads the core purpose and then provides one crucial instruction. No filler words or redundant information; every word earns its place.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the tool's simplicity (4 required parameters, no output schema, no annotations), the description covers the core functionality and input source but omits details about the response/return value and post-export behavior. This leaves the agent uncertain about what to do after invoking the tool.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, providing clear parameter descriptions. The description adds value by specifying that 'content' should be the Markdown output from generate_document, which clarifies the expected composition and origin beyond the schema's generic 'Document content in Markdown'.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the action ('Export a compliance document') and the resource ('compliance document') with specific output formats ('PDF or DOCX format'). It distinguishes from siblings: generate_document creates documents, list_document_types lists them, while export_document exports them.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It provides clear usage context by specifying that the content must come from generate_document, which implies a workflow ordering. However, it does not explicitly state when not to use the tool or name alternative tools, leaving some inference needed.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

generate_documentA

Generate a professional compliance document (privacy policy, terms of service, employee handbook, HIPAA policy, etc.) tailored to your industry and company. Returns complete, ready-to-use Markdown.

ParametersJSON Schema
NameRequiredDescriptionDefault
docTypeYesDocument type: privacy, terms, handbook, data-handling, aup, security, cookie, incident, hipaa, osha, whistleblower, remote-work
industryYesYour industry for regulatory tailoring.
companyDescNoBrief company description for more specific language.
companyNameYesYour company or organization name.

TDQS

A4.2/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations provided, the description carries the full burden. It discloses the return format ('complete, ready-to-use Markdown') and the tailoring behavior ('tailored to your industry and company'). This goes beyond the schema and gives the agent a clear expectation of the output. However, it does not mention potential limitations or the need for legal review, which would be useful but not strictly required.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is two sentences, front-loaded with the verb and resource, and contains zero waste. Every phrase earns its place: what it generates, examples, tailoring, and output format.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

The tool is a straightforward generator with a well-structured schema and no output schema required. The description explains the return format and purpose, making the tool complete for invocation. It does not explicitly state that there are 12 doc types or mention sibling tools, but this is not essential given the name and schema.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the schema fully documents parameters. The description adds minimal parameter context ('tailored to your industry and company' implicitly references industry and companyName), but it does not explain docType options or companyDesc beyond what the schema enumerations and descriptions already provide.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description uses a specific verb ('Generate') tied to a clear resource ('professional compliance document') and lists concrete examples (privacy policy, terms of service, employee handbook, HIPAA policy). It clearly differentiates from siblings: 'export_document' exports existing documents and 'list_document_types' lists types, while this tool creates a new document.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description clearly conveys when to use this tool (when you need a new compliance document tailored to your industry and company), but it does not explicitly mention alternative tools or exclusions. The context is clear enough that an agent can infer this is for generating, not exporting or listing, but it stops short of naming siblings for contrast.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

list_document_typesA

List all available compliance document types with descriptions, organized by category.

ParametersJSON Schema
NameRequiredDescriptionDefault

No parameters

TDQS

A4/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are provided, so the description carries full burden. It discloses that the tool lists types and organizes by category, but does not explicitly state read-only behavior, permissions, or whether results are filtered by user access. Since it's a listing operation, some safety is implied, but additional clarity would improve the score.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single, focused sentence that immediately states the action, resource, and organization. Every word adds value, with no redundancy or filler.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the tool's simplicity (no parameters, no output schema), the description sufficiently covers its purpose, the fact that descriptions are included, and the categorical organization. It could mention whether the list is paginated or if there are access restrictions, but for a basic listing tool this is adequate.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The input schema is empty (0 parameters), so there are no parameter semantics to describe. The baseline for 0 params is 4, and the description adds no param-related meaning, which is appropriate for this simple tool.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description uses a specific verb ('List') and resource ('compliance document types'), with clear scope ('all available') and organization ('by category'). It distinguishes from siblings 'generate_document' and 'export_document' by being a read-only listing operation.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description implies usage (list document types when needed) but does not explicitly state when to use this tool over alternatives, nor does it mention any exclusions or prerequisites. Sibling tools are not referenced, so differentiation is indirect.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

  1. 3 tool updatesv0.1.0
    • First observedexport_document
    • First observedgenerate_document
    • First observedlist_document_types

TDQS

A4.3/5.0

Scored across 3 tools

Disambiguation5/5

Each tool serves a distinct role: listing document types, generating content, and exporting to file formats. No overlap in functionality, making tool selection unambiguous.

Naming Consistency5/5

All tool names follow the verb_noun pattern consistently: generate_document, export_document, and list_document_types. This creates a predictable and coherent naming scheme.

Tool Count5/5

With only 3 tools, the set is well-scoped for a focused compliance document generator. Each tool earns its place, covering the essential workflow without unnecessary bloat.

Completeness5/5

The tool set covers the full lifecycle: discover available document types, generate a document, and export it to a desired format. No obvious gaps exist for the intended purpose.

Maintenance

ActivityInactive
ResponsivenessNo issues

Related MCP Connectors

Related MCP Servers