DEVELOPERS / MCP SERVER

Your consent platform, one prompt away.

Connect an assistant to the Katla account you already have. Ask what your sites are setting, run a scan, fix a classification — in the same window you were already working in.

ClaudeClaude CodeChatGPTCursorVS Code

Which of our sites dropped below 70% consent this week?

katla_get_consent_statsTwo: shop.example.com at 64% and blog.example.com at 68%. Both were in the low eighties last week.

Rescan the shop and tell me what is new.

katla_scan_site47 cookies, three of them new since the last scan and all from one landing-page tool. Two came back marketing; one is still unclassified and waiting on you.
SETUP

One URL. No install, no keys.

It is a remote server, so there is nothing to run locally and no API key to create. You sign in with the Katla account you already have.

  1. Add function(){throw Error("Attempted to call MCP_URL() from the server but MCP_URL is on the client. It's not possible to invoke a client function from the server, it can only be rendered as a Component or passed to props of a Client Component.")} to your client.
  2. Sign in with your Katla account when the browser opens.
  3. Ask. Write tools declare themselves, so your client can confirm first.
1. Open Settings → Connectors
2. Add a custom connector
3. Paste the server URL:

   https://api.katla.app/mcp

4. Click Add, then sign in when the browser opens.
Settings → Connectors → Add custom connectorSetup guide →
THE TOOLS

Eighteen tools, and nothing hidden behind them.

The same operations the dashboard and the CLI use. Ten read, eight write.

katla_list_teamsREAD
Teams the account belongs to.
katla_list_sitesREAD
Sites, with verification state and last scan.
katla_get_siteREAD
One site in full, including its settings.
katla_get_planREAD
Billing plan and usage against its limits.
katla_list_cookiesREAD
Classified inventory with confidence scores.
katla_list_cookie_descriptionsREAD
Custom descriptions, per cookie and locale.
katla_list_consentsREAD
Consent records, for export or audit.
katla_get_consent_statsREAD
Accept, reject and partial rates for a site.
katla_get_scan_statusREAD
Progress of a scan already running.
katla_get_install_snippetREAD
The widget script tag for a given site.
katla_add_siteWRITE
Add a domain to the account.
katla_verify_siteWRITE
Check the DNS record or meta tag.
katla_scan_siteWRITE
Start a scan on a verified site.
katla_update_cookie_categoryWRITE
Reclassify a cookie; the override sticks.
katla_set_cookie_descriptionWRITE
Write your own wording for a cookie.
katla_remove_cookie_descriptionWRITE
Drop an override and fall back to the generated text.
katla_update_site_settingsWRITE
Change categories, regulation mode and copy.
katla_generate_privacy_policyWRITE
Regenerate the policy from the current inventory.
Full reference, with every parameter
WHAT PEOPLE ASK

The questions that used to need a ticket.

ENGINEER

Did anything new start setting cookies on staging this week?

Runs a scan and diffs the inventory against what was there before.

MARKETING

What is our accept rate, and where is it worst?

Consent stats per site, so the banner copy conversation starts with numbers.

LEGAL

Give me every cookie we declare as marketing, with its purpose.

The classified inventory with the descriptions your policy publishes.

ENGINEER

Add these four domains and verify them.

Adds each site and checks the DNS record or meta tag for it.

SUPPORT

Reclassify _hjSession as functional and say why.

Writes the category and your own description, in the locales you serve.

LEGAL

Regenerate the policy now that the scan is done.

Publishes the policy from the inventory the scan actually found.

PERMISSIONS

It can only do what you can.

Connecting an assistant should not widen anyone's access. It authenticates as you, over OAuth 2.1, and carries the scopes you granted it.

Scoped
Tokens carry katla:read or katla:write. A read-only connection cannot start a scan or change a classification.
Acts as you
Tools resolve through your own account, so an assistant reaches exactly the teams and sites you do — no more.
Writes are declared
Each tool declares whether it mutates anything, so your client can ask before it runs one.
Revocable
Authorisation is OAuth 2.1 and can be revoked at any time, which cuts the connection off immediately.

Paste one URL and ask it something.

https://api.katla.app/mcp