DEVELOPERS / MCP SERVER

Your consent platform, one prompt away.

Connect an assistant to the Katla account you already have. Ask what your sites are setting, run a scan, fix a classification - in the same window you were already working in.

ClaudeClaude CodeChatGPTCursorVS Code

Which of our sites dropped below 70% consent this week?

katla_get_consent_statsTwo: shop.example.com at 64% and blog.example.com at 68%. Both were in the low eighties last week.

Rescan the shop and tell me what is new.

katla_scan_site47 cookies, three of them new since the last scan and all from one landing-page tool. Two came back marketing; one is still unclassified and waiting on you.
SETUP

One URL. No install, no keys.

It is a remote server, so there is nothing to run locally and no API key to create. You sign in with the Katla account you already have.

  1. Add https://api.katla.app/mcp to your client.
  2. Sign in with your Katla account when the browser opens.
  3. Ask. Write tools declare themselves, so your client can confirm first.
Set up Katla, the cookie consent and compliance platform, in this coding agent.

1. Connect Katla's MCP server. It is a remote server at https://api.katla.app/mcp (streamable HTTP) that signs in with OAuth, so there is no API key to ask me for.
   - Claude Code: install the Katla plugin, which carries the server and the skills:
       claude plugin marketplace add katla-app/ai
       claude plugin install katla@katla
   - Codex: install the same plugin:
       codex plugin marketplace add katla-app/ai
       codex plugin add katla@katla
   - Cursor: add "katla": { "url": "https://api.katla.app/mcp" } under "mcpServers" in .cursor/mcp.json
   - Any other tool: add the URL as a remote MCP server in that tool's own MCP configuration.
   If the plugin does not install, add the server on its own instead: claude mcp add --transport http katla https://api.katla.app/mcp in Claude Code, codex mcp add katla --url https://api.katla.app/mcp in Codex.

2. Unless the plugin is now installed, add the Katla skills to this project:
   npx skills add katla-app/ai --skill katla-widget --skill katla-sdk --skill katla-policy --skill katla-accessibility-widget --yes
   If npx is not available, skip this step. The server hands out the same guides through its katla_get_skill tool.

3. Tell me how to sign in. I do that part myself, in a browser, with my Katla account.
   - Claude Code: run /mcp, choose the Katla server, then Authenticate
   - Codex: codex mcp login katla
   - Other tools: connect the Katla server in the MCP settings
   If the server or the skills only load in a new session, tell me to start one and to give you step 4 again.

4. When I am signed in, call katla_list_sites and show me my sites, so we both know the connection works. Do not change my code or any Katla setting yet. Ask me what I want to set up.
Paste into Claude Code, Cursor, Codex or another coding agentSetup guide →
THE TOOLS

23 tools, and nothing hidden behind them.

The same operations the dashboard and the CLI use, plus free compliance checks for any URL. 16 read, 7 write.

katla_check_cookiesREAD
One-page cookie audit of any URL, yours or not.
katla_check_consent_modeREAD
Google Consent Mode v2 check for any URL.
katla_list_teamsREAD
Teams the account belongs to.
katla_list_sitesREAD
Sites, with the status of their last scan.
katla_get_siteREAD
One site in full, including its settings.
katla_list_cookiesREAD
Classified inventory with confidence scores.
katla_list_cookie_descriptionsREAD
Custom descriptions, per cookie and locale.
katla_list_consentsREAD
Consent records, for export or audit.
katla_get_consent_statsREAD
Accept, reject and partial rates for a site.
katla_get_scan_statusREAD
Progress of a scan already running.
katla_get_accessibilityREAD
WCAG and EN 301 549 results from the latest scan.
katla_get_accessibility_findingsREAD
The failing elements, with selectors and markup.
katla_get_accessibility_widget_snippetREAD
Accessibility widget tag, with its corner, accent and links.
katla_get_install_snippetREAD
Widget tag, cookie settings link and policy embed.
katla_get_policyREAD
The policy setup, details and embed in any language.
katla_get_skillREAD
How to install the widgets or the SDK in your code.
katla_add_siteWRITE
Add a domain to the account.
katla_scan_siteWRITE
Start a scan on a site.
katla_update_cookie_categoryWRITE
Reclassify a cookie; the override sticks.
katla_set_cookie_descriptionWRITE
Write your own wording for a cookie.
katla_remove_cookie_descriptionWRITE
Drop an override and fall back to the generated text.
katla_update_site_settingsWRITE
Banner colours, radius, layout, regulation and links.
katla_generate_privacy_policyWRITE
Save or update the company details in the policy.
Full reference, with every parameter →
WHAT PEOPLE ASK

The questions that used to need a ticket.

ENGINEER

“Did anything new start setting cookies on staging this week?”

Runs a scan and diffs the inventory against what was there before.

MARKETING

“What is our accept rate, and where is it worst?”

Consent stats per site, so the banner copy conversation starts with numbers.

LEGAL

“Give me every cookie we declare as marketing, with its purpose.”

The classified inventory with the descriptions your policy publishes.

DESIGN

“Make the cookie banner match our brand.”

Reads your site's colours and corner radius, shows you what it found, and saves them to the banner.

SUPPORT

“Reclassify _hjSession as functional and say why.”

Writes the category and your own description, in the locales you serve.

LEGAL

“Put our cookie policy on the privacy page, in German.”

Embeds the policy written from your scan, styled like your other pages, and links the banner to it.

PERMISSIONS

It can only do what you can.

Connecting an assistant should not widen anyone's access. It authenticates as you, over OAuth 2.1, and carries the scopes you granted it.

Scoped
Tokens carry katla:read or katla:write. A read-only connection cannot start a scan or change a classification.
Acts as you
Tools resolve through your own account, so an assistant reaches exactly the teams and sites you do - no more.
Writes are declared
Each tool declares whether it mutates anything, so your client can ask before it runs one.
Revocable
Authorisation is OAuth 2.1 and can be revoked at any time, which cuts the connection off immediately.

Paste one URL and ask it something.

https://api.katla.app/mcp

FROM THE BLOG