MCP Server Documentation

The Biscotti CMP MCP Server allows AI assistants to interact with your Biscotti CMP account programmatically. Manage websites, banners, compliance scans, consent analytics, legal documents, and more — all through natural language commands in your IDE.

The MCP (Model Context Protocol) Server acts as a bridge between your AI assistant and the Biscotti CMP API, providing a set of tools that can be called directly from your development environment.

Prerequisites

• Node.js 18 or later
• A Biscotti CMP account with an Agency or LTD Agency plan
• An API key from the Developer Settings page

Quick Start

The fastest way to get started is using npx — no installation required:

npx @biscotti-cmp/mcp-server

Run the MCP Server directly without installing it globally. This is the recommended approach for most users:

npx @biscotti-cmp/mcp-server

If you prefer to install the MCP Server globally on your system:

npm install -g @biscotti-cmp/mcp-server

After installation, you can run the server directly:

biscotti-mcp

To use the Biscotti CMP MCP Server with Claude Desktop, add the following configuration to your Claude Desktop settings file.

Configuration File Location

• macOS: ~/Library/Application Support/Claude/claude_desktop_config.json
• Windows: %APPDATA%\Claude\claude_desktop_config.json

Configuration

Add the following to your configuration file:

{
  "mcpServers": {
    "biscotti-cmp": {
      "command": "npx",
      "args": ["-y", "@biscotti-cmp/mcp-server"],
      "env": {
        "BISCOTTI_API_KEY": "your-api-key-here"
      }
    }
  }
}

Restart Claude Desktop after saving the configuration file. The Biscotti CMP tools will appear in the tools menu.

To use the Biscotti CMP MCP Server with Cursor, add the following configuration to your Cursor MCP settings.

Configuration File Location

• Project-level: .cursor/mcp.json in your project root
• Global: ~/.cursor/mcp.json

Configuration

{
  "mcpServers": {
    "biscotti-cmp": {
      "command": "npx",
      "args": ["-y", "@biscotti-cmp/mcp-server"],
      "env": {
        "BISCOTTI_API_KEY": "your-api-key-here"
      }
    }
  }
}

After saving, Cursor will automatically detect the MCP server and make the tools available in the AI assistant.

To use the Biscotti CMP MCP Server with Kiro, configure it through the MCP settings.

Configuration File Location

• Project-level: .kiro/settings/mcp.json in your project root
• Global: ~/.kiro/settings/mcp.json

Configuration

{
  "mcpServers": {
    "biscotti-cmp": {
      "command": "npx",
      "args": ["-y", "@biscotti-cmp/mcp-server"],
      "env": {
        "BISCOTTI_API_KEY": "your-api-key-here"
      }
    }
  }
}

Kiro will automatically detect the MCP server configuration and make the Biscotti CMP tools available.

The Biscotti CMP MCP Server is compatible with any MCP-compliant client. Use the following generic configuration:

Generic Configuration

{
  "mcpServers": {
    "biscotti-cmp": {
      "command": "npx",
      "args": ["-y", "@biscotti-cmp/mcp-server"],
      "env": {
        "BISCOTTI_API_KEY": "your-api-key-here"
      }
    }
  }
}

If your MCP client uses a different configuration format, the key parameters are:

• Command: npx
• Arguments: -y @biscotti-cmp/mcp-server
• Environment variable: BISCOTTI_API_KEY set to your API key

Tools for managing your websites in Biscotti CMP.

Tools for creating and managing consent banners.

Tools for scanning websites and checking compliance status.

Tools for accessing consent statistics and analytics data.

Tools for managing legal documents such as privacy policies, terms of service, and imprint pages.

Tools for managing detected third-party services and their consent categories.

Tools for managing webhook integrations for real-time event notifications.

Tools for agency account management and client operations.

The Biscotti CMP MCP Server exposes the following resources that AI assistants can read for context:

• biscotti://websites — List of all websites in your account
• biscotti://website/{id} — Detailed website configuration
• biscotti://compliance/{id} — Current compliance status for a website
• biscotti://banners/{websiteId} — All banners for a website

Resources provide read-only context that helps AI assistants understand your current setup before making changes.

The MCP Server includes built-in prompt templates for common workflows:

Compliance Audit

Run a full compliance audit on a website, scanning for cookies, checking consent configuration, and generating a report.

Run a compliance audit on my website example.com and suggest improvements.

Banner Setup

Create and configure a consent banner with your preferred design and behavior settings.

Create a GDPR-compliant consent banner for my website with a dark theme and bottom-left position.

Legal Document Generation

Generate legal documents based on your website configuration and target jurisdiction.

Generate a privacy policy for my German website that covers Google Analytics and Facebook Pixel.

The Biscotti CMP MCP Server requires an API key to authenticate with the Biscotti CMP API. All requests made by the MCP Server are authenticated using your API key.

How Authentication Works

1. You generate an API key in the Developer Settings page of your Biscotti CMP dashboard.
2. The API key is set as the BISCOTTI_API_KEY environment variable in your MCP client configuration.
3. The MCP Server includes this key as a Bearer token in all API requests.
4. The Biscotti CMP API validates the key and returns data scoped to your account.

To obtain an API key for the MCP Server:

1. Log in to your Biscotti CMP dashboard at app.biscotti-cmp.com.
2. Navigate to Developer Settings in the sidebar.
3. Click Generate New Key in the API Keys tab.
4. Give your key a descriptive name (e.g., "MCP Server - Development").
5. Optionally set an expiration date for the key.
6. Copy the generated key immediately — it will only be shown once.

Key Management Best Practices

• Use separate API keys for development and production environments.
• Set expiration dates on keys that are used temporarily.
• Rotate keys regularly and revoke unused keys.
• Use the key rotation feature to replace keys without downtime.