@inpolicy/policy-admin-mcp

Model Context Protocol server for managing the InPolicy policy catalog from any MCP-aware AI client (Claude Desktop, Cursor, etc.).

Distinct from @inpolicy/mcp-server, which is for runtime AI governance. This server is for admins who want to manage their policy catalog conversationally — upload a PDF and let the AI extract policies, bulk-edit policies, publish drafts, and so on.

Exposed tools

| Tool | Purpose | Required scope | |---|---|---| | list_policies | Paginated list of policies | policies:read | | get_policy | Fetch one policy by id or external:<externalId> | policies:read | | bulk_upsert_policies | Idempotent bulk create/update keyed by externalId | policies:write (+ policies:publish if publish: true) | | update_policy | Partial update of one policy | policies:write | | publish_policy | Promote DRAFT/SUGGESTION → PUBLISHED | policies:publish | | delete_policy | Soft-delete (status → deprecated) | policies:delete | | upload_document | Async document upload for AI extraction | documents:write | | get_document | Poll document processing status | documents:write |

Setup

Claude Desktop

Add to ~/Library/Application Support/Claude/claude_desktop_config.json:

{
  "mcpServers": {
    "inpolicy-admin": {
      "command": "npx",
      "args": ["-y", "@inpolicy/policy-admin-mcp"],
      "env": {
        "INPOLICY_API_KEY": "inp_live_..."
      }
    }
  }
}

Claude Code

claude mcp add inpolicy-admin -- env INPOLICY_API_KEY=inp_live_... npx -y @inpolicy/policy-admin-mcp

Cursor / Windsurf

Add to the MCP config:

{
  "mcpServers": {
    "inpolicy-admin": {
      "command": "npx",
      "args": ["-y", "@inpolicy/policy-admin-mcp"],
      "env": { "INPOLICY_API_KEY": "inp_live_..." }
    }
  }
}

API key

The API key must carry the scopes for the tools you intend to use (see table above). Create at app.inpolicy.ai → Settings → API Keys. For typical admin use, generate a key with the full ADMIN_SCOPES bundle.

Configuration

| Env var | Default | Notes | |---|---|---| | INPOLICY_API_KEY | — | Required. | | INPOLICY_API_URL | https://api.inpolicy.ai/api/v1 | Override for self-hosted. | | INPOLICY_TIMEOUT_MS | 30000 | Per-call timeout. |

License

MIT