Comp AI MCP Server

Note: This is an unofficial, community-maintained MCP server. It is not affiliated with, endorsed by, or officially supported by Comp AI. Use at your own discretion.

An MCP (Model Context Protocol) server for the Comp AI compliance platform. Gives AI assistants like Claude, Cursor, and others direct access to your compliance data — tasks, policies, risks, vendors, frameworks, controls, and more.

What is Comp AI?

Comp AI is an open-source compliance platform that automates SOC 2, ISO 27001, HIPAA, and GDPR compliance. This MCP server wraps their REST API so your AI tools can read and manage your compliance posture directly.

Tools (76)

Category	Tools	Description
Auth	get_current_user, list_invitations, revoke_invitation	Current user info, org invitations
Organization	get_organization, update_organization, delete_organization	Org details, settings, branding
API Keys	list_api_keys, create_api_key, revoke_api_key	Manage API keys
People	list_people, get_person, create_member, update_member, delete_member, invite_members	Team members, roles, invites
Tasks	list_tasks, get_task, create_task, update_task, delete_task, approve_task, reject_task, get_task_activity	Compliance tasks and approvals
Policies	list_policies, get_policy, create_policy, update_policy, delete_policy, get_policy_versions, regenerate_policy	Policy management and AI regeneration
Vendors	list_vendors, get_vendor, create_vendor, update_vendor, delete_vendor, trigger_vendor_risk_assessment	Vendor management and risk assessment
Risks	list_risks, get_risk, create_risk, update_risk, delete_risk	Risk register with filtering and pagination
Frameworks	list_frameworks, get_framework, get_compliance_scores	SOC 2, ISO 27001, HIPAA, GDPR frameworks
Controls	list_controls, get_control, create_control, delete_control	Compliance controls
Evidence	list_evidence_forms, get_evidence_form, get_evidence_form_statuses	Evidence collection forms
Findings	list_findings, get_finding, create_finding, update_finding, delete_finding	Audit findings
Comments	get_comments, create_comment, update_comment, delete_comment	Comments on any entity
Context	list_context_entries, get_context_entry, create_context_entry, update_context_entry, delete_context_entry	Organizational context for compliance
Roles	list_roles, create_role, update_role, delete_role	Custom roles and permissions
Audit Logs	get_audit_logs	Activity audit trail
Integrations	list_integration_connections, list_integration_providers	Connected integrations
Knowledge Base	list_knowledge_base_documents, list_manual_answers, save_manual_answer	Compliance knowledge base
Health	health_check	API health status

Setup

Prerequisites

• Node.js >= 18
• A Comp AI account with an API key

Get your API key

1. Log in to Comp AI
2. Go to Settings > API Keys
3. Create a new API key

Install

npm install -g compai-mcp

Or run directly with npx:

npx compai-mcp

Configuration

Cursor

Add to your .cursor/mcp.json:

{
  "mcpServers": {
    "compai": {
      "command": "npx",
      "args": ["-y", "compai-mcp"],
      "env": {
        "COMPAI_API_KEY": "your-api-key-here"
      }
    }
  }
}

Claude Desktop

Add to your claude_desktop_config.json:

{
  "mcpServers": {
    "compai": {
      "command": "npx",
      "args": ["-y", "compai-mcp"],
      "env": {
        "COMPAI_API_KEY": "your-api-key-here"
      }
    }
  }
}

Environment Variables

Variable	Required	Default	Description
COMPAI_API_KEY	Yes	—	Your Comp AI API key
COMPAI_BASE_URL	No	https://api.trycomp.ai	API base URL (for self-hosted instances)

Usage Examples

Once connected, you can ask your AI assistant things like:

• "List all my compliance tasks that are in progress"
• "Show me our vendor risk assessments"
• "Create a new risk for our authentication system"
• "What's our overall compliance score?"
• "List all policies that need review"
• "Who are the members of our organization?"
• "Show me the audit log for this task"
• "Regenerate the data privacy policy using AI"

Development

git clone https://github.com/draded/compai-mcp.git
cd compai-mcp
npm install
npm run build    # Compile TypeScript
npm run dev      # Build and run

API Reference

This MCP server wraps the Comp AI API. All authentication is handled via the X-API-Key header.

License

MIT