ComplianceCow MCP Server

Provides AI agents with compliance insights, auditable responses, and actions like ticket creation and policy fixes.

MCP (Model Context Protocol) servers are designed to process structured requests from AI agents, perform domain-specific operations, and return context-aware responses. The ComplianceCow MCP servers enable seamless integration with MCP-compatible hosts like Claude Desktop and Goose Desktop/CLI for secure, modular, and intelligent compliance automation.

The ComplianceCow MCP servers support theSTDIO transport mechanismfor seamless local integration with your MCP host. At the core is theCompliance Graph, which continuously ingests data such as assessment runs, evidence, and compliance status. The server actively pulls information from:

- Vector stores for semantic search
- Relational databases for structured data
- Graph databases for relationship queries
- File storage systems for evidence artifacts

We have organized ComplianceCow’s MCP tools into 4 distinct servers.

Why multiple MCP servers?In the MCP ecosystem, using fewer tools per server yields better results and better performance.
Each server can be enabled independently via theMCP_TOOLS_TO_BE_INCLUDEDenvironment variable.
Important:Enable onlyone server at a timein the MCP Host to avoid tool name conflicts. Some tools share the same name across servers but have different implementations based on the use case.

The Rules server enables creating, managing, and executing compliance rules. It provides a comprehensive toolkit for rule creation with guided input collection, task orchestration, and ComplianceCow integration.

- Create custom compliance rules with multiple tasks
- Execute rules against cloud infrastructure
- Publish rules to ComplianceCow and attach to controls
- Generate rule documentation (design notes, README)

The Insights server provides comprehensive access to compliance data, dashboards, assessments, and evidence through the Compliance Graph. Ideal for querying and analyzing compliance posture.

- Query dashboard data for compliance overview
- Explore assessments and their runs
- Retrieve evidence and compliance status
- Execute Cypher queries on the Compliance Graph
- Perform actions on controls and evidence

The Workflow server enables building and executing automated compliance workflows with event-driven triggers, conditions, and activities.

- Create automated compliance workflows
- Define event triggers and conditions
- Execute multi-step workflow sequences
- Manage workflow states and transitions

The Assistant server specializes in assessment configuration, control setup, and SQL-based evidence collection. It provides tools for configuring compliance assessments and managing control evidence.

- Create and configure assessments
- Set up control configurations with context entities
- Create SQL-based evidence collection
- Manage control citations and documentation
- MCP Host: You need an MCP-compatible host:

- Claude Desktop

- Goose Desktop/CLI

The ComplianceCow MCP servers use OAuth 2.0 withclient_credentialsgrant type.
- Sign up atComplianceCow(or your dedicated instance)
- Click"Manage Client Credentials"in the top-right user profile menu
- Fill out the form to obtain yourClient IDandClient Secret
- Clone the repository:

git clone https://github.com/ComplianceCow/cow-mcp.git cd cow-mcp

uv venv .venv source .venv/bin/activate # On Windows: .venv\Scripts\activate uv pip install .

which uv # On macOS/Linux where uv # On Windows

For detailed setup instructions, seeClaude Desktop MCP Setup.

{ "mcpServers": { "ComplianceCow-Rules": { "command": "<UV_BIN_PATH>", "args": [ "--directory", "<PATH_TO_COW_MCP_REPO>", "run", "main.py" ], "env": { "CCOW_HOST": "<YOUR_CCOW_HOST>", "CCOW_CLIENT_ID": "<YOUR_CLIENT_ID>", "CCOW_CLIENT_SECRET": "<YOUR_CLIENT_SECRET>", "MCP_TOOLS_TO_BE_INCLUDED": "rules" } }, "ComplianceCow-Insights": { "command": "<UV_BIN_PATH>", "args": [ "--directory", "<PATH_TO_COW_MCP_REPO>", "run", "main.py" ], "env": { "CCOW_HOST": "<YOUR_CCOW_HOST>", "CCOW_CLIENT_ID": "<YOUR_CLIENT_ID>", "CCOW_CLIENT_SECRET": "<YOUR_CLIENT_SECRET>", "MCP_TOOLS_TO_BE_INCLUDED": "insights" } }, "ComplianceCow-Workflow": { "command": "<UV_BIN_PATH>", "args": [ "--directory", "<PATH_TO_COW_MCP_REPO>", "run", "main.py" ], "env": { "CCOW_HOST": "<YOUR_CCOW_HOST>", "CCOW_CLIENT_ID": "<YOUR_CLIENT_ID>", "CCOW_CLIENT_SECRET": "<YOUR_CLIENT_SECRET>", "MCP_TOOLS_TO_BE_INCLUDED": "workflow" } }, "ComplianceCow-Assistant": { "command": "<UV_BIN_PATH>", "args": [ "--directory", "<PATH_TO_COW_MCP_REPO>", "run", "main.py" ], "env": { "CCOW_HOST": "<YOUR_CCOW_HOST>", "CCOW_CLIENT_ID": "<YOUR_CLIENT_ID>", "CCOW_CLIENT_SECRET": "<YOUR_CLIENT_SECRET>", "MCP_TOOLS_TO_BE_INCLUDED": "assistant" } } } }

- UV_BIN_PATH: Path to your uv binary (e.g.,/Users/username/.local/bin/uv). You can find this by runningwhich uv(macOS/Linux) orwhere uv(Windows).
- PATH_TO_COW_MCP_REPO: The absolute path to your cloned cow-mcp repository. After cloning and runningcd cow-mcp, usepwd(macOS/Linux) orcd(Windows) to get this path.
- YOUR_CCOW_HOST:https://partner.compliancecow.live(or <your_dedicated_instance_hosturl>)
- YOUR_CLIENT_ID: Your ComplianceCow Client ID (seeAuthentication)
- YOUR_CLIENT_SECRET: Your ComplianceCow Client Secret (seeAuthentication)

For detailed setup instructions, seeGoose Extensions Documentation.

extensions: ComplianceCow-Rules: enabled: true type: stdio name: Compliancecow-Rules description: 'ComplianceCow Rules - Create and manage compliance rules' cmd: <UV_BIN_PATH> args: - --directory - <PATH_TO_COW_MCP_REPO> - run - main.py envs: CCOW_HOST: <YOUR_CCOW_HOST> CCOW_CLIENT_ID: <YOUR_CLIENT_ID> CCOW_CLIENT_SECRET: <YOUR_CLIENT_SECRET> MCP_TOOLS_TO_BE_INCLUDED: rules timeout: 300 ComplianceCow-Insights: enabled: true type: stdio name: Compliancecow-Insights description: 'ComplianceCow Insights - Query compliance data and dashboards' cmd: <UV_BIN_PATH> args: - --directory - <PATH_TO_COW_MCP_REPO> - run - main.py envs: CCOW_HOST: <YOUR_CCOW_HOST> CCOW_CLIENT_ID: <YOUR_CLIENT_ID> CCOW_CLIENT_SECRET: <YOUR_CLIENT_SECRET> MCP_TOOLS_TO_BE_INCLUDED: insights timeout: 300 ComplianceCow-Workflow: enabled: true type: stdio name: Compliancecow-Workflow description: 'ComplianceCow Workflow - Build and execute compliance workflows' cmd: <UV_BIN_PATH> args: - --directory - <PATH_TO_COW_MCP_REPO> - run - main.py envs: CCOW_HOST: <YOUR_CCOW_HOST> CCOW_CLIENT_ID: <YOUR_CLIENT_ID> CCOW_CLIENT_SECRET: <YOUR_CLIENT_SECRET> MCP_TOOLS_TO_BE_INCLUDED: workflow timeout: 300 ComplianceCow-Assistant: enabled: true type: stdio name: Compliancecow-Assistant description: 'ComplianceCow Assistant - Configure assessments and controls' cmd: <UV_BIN_PATH> args: - --directory - <PATH_TO_COW_MCP_REPO> - run - main.py envs: CCOW_HOST: <YOUR_CCOW_HOST> CCOW_CLIENT_ID: <YOUR_CLIENT_ID> CCOW_CLIENT_SECRET: <YOUR_CLIENT_SECRET> MCP_TOOLS_TO_BE_INCLUDED: assistant timeout: 300

- UV_BIN_PATH: Path to your uv binary (e.g.,/Users/username/.local/bin/uv). You can find this by runningwhich uv(macOS/Linux) orwhere uv(Windows).
- PATH_TO_COW_MCP_REPO: The absolute path to your cloned cow-mcp repository. After cloning and runningcd cow-mcp, usepwd(macOS/Linux) orcd(Windows) to get this path.
- YOUR_CCOW_HOST:https://partner.compliancecow.live(or <your_dedicated_instance_hosturl>)
- YOUR_CLIENT_ID: Your ComplianceCow Client ID (seeAuthentication)
- YOUR_CLIENT_SECRET: Your ComplianceCow Client Secret (seeAuthentication)

# Navigate to the cow-mcp directory cd /path/to/cow-mcp # Set required environment variables export CCOW_HOST="https://partner.compliancecow.live" export CCOW_CLIENT_ID="<your_client_id>" export CCOW_CLIENT_SECRET="<your_client_secret>" export MCP_TOOLS_TO_BE_INCLUDED="rules" # or insights, workflow, assistant # Run the server uv run main.py

VisitComplianceCow Signupto create an account using various sign-up options including Google, Microsoft, and OTP.

ComplianceCow helps with automated security compliance evidence collection, analysis, and remediation challenges. It's a security GRC controls automation studio for custom controls and workflows. Learn more atcompliancecow.com.

cd /path/to/cow-mcp git pull origin main uv pip install .

An MCP server for AI-to-AI collaboration, enabling autonomous workflows and role-based task management between different AI models.