ComplianceAutomator MCP
Public read-only MCP surface for products, frameworks, guides, methodology, and blog metadata.
What this MCP is for
This public MCP lets AI-aware SaaS teams inspect ComplianceAutomator offerings without scraping pages by hand. It is useful for researching framework coverage, comparing documentation kits, summarizing methodology, and pulling guide metadata into an AI workflow before deciding whether the product fits.
Name: ComplianceAutomator Public MCP
Version: 0.1.0
Protocol: 2025-03-26
Endpoint: https://www.complianceautomator.com/api/mcp
Mode: public, read-only, stateless
Supported tools
list_productsList public ComplianceAutomator products and their framework coverage.get_productGet a public product by product id.list_frameworksList supported compliance frameworks and related products.get_methodologyReturn a public summary of ComplianceAutomator methodology.get_how_it_worksReturn a public summary of how ComplianceAutomator works.list_guidesList public compliance guides from the resource library.get_guideGet a public compliance guide summary by slug.list_blog_postsList published blog posts.get_blog_postGet a public blog post summary by slug.
Request notes
- Use
POST https://www.complianceautomator.com/api/mcpfor MCP requests. - Use JSON-RPC request bodies.
- Include an
Acceptheader listing bothapplication/jsonandtext/event-stream. - Include
MCP-Protocol-Version: 2025-03-26when your client supports it. Mcp-Methodis recommended; if present, it must match the JSON-RPCmethodfield.Mcp-Nameis recommended ontools/call; if present, it must matchparams.name.GET /api/mcpis intentionally not used for human docs; it is reserved for MCP transport behavior.- This endpoint does not expose customer portal, billing, or admin data.
Connection sequence
- Send
initializeas the first request. - After a successful initialize response, send
notifications/initialized. - Use
tools/listto discover supported tools. - Use
tools/callwithparams.name; if you sendMcp-Name, it must match.
Required headers
| Header | When required | Expected value |
|---|---|---|
Content-Type | All POST requests | application/json |
Accept | All POST requests | application/json, text/event-stream |
MCP-Protocol-Version | Recommended | 2025-03-26 when supplied |
Mcp-Method | Recommended | If supplied, must match the JSON-RPC method field |
Mcp-Name | tools/call only, recommended | If supplied, must match params.name |
Working examples
1. Initialize
curl -X POST "https://www.complianceautomator.com/api/mcp" \
-H "Content-Type: application/json" \
-H "Accept: application/json, text/event-stream" \
-H "MCP-Protocol-Version: 2025-03-26" \
-H "Mcp-Method: initialize" \
--data '{"jsonrpc":"2.0","id":1,"method":"initialize","params":{"protocolVersion":"2025-03-26","capabilities":{},"clientInfo":{"name":"ExampleClient","version":"1.0.0"}}}'2. Send initialized notification
curl -X POST "https://www.complianceautomator.com/api/mcp" \
-H "Content-Type: application/json" \
-H "Accept: application/json, text/event-stream" \
-H "MCP-Protocol-Version: 2025-03-26" \
-H "Mcp-Method: notifications/initialized" \
--data '{"jsonrpc":"2.0","method":"notifications/initialized"}'3. List tools
curl -X POST "https://www.complianceautomator.com/api/mcp" \
-H "Content-Type: application/json" \
-H "Accept: application/json, text/event-stream" \
-H "MCP-Protocol-Version: 2025-03-26" \
-H "Mcp-Method: tools/list" \
--data '{"jsonrpc":"2.0","id":2,"method":"tools/list","params":{}}'4. Call a tool
curl -X POST "https://www.complianceautomator.com/api/mcp" \
-H "Content-Type: application/json" \
-H "Accept: application/json, text/event-stream" \
-H "MCP-Protocol-Version: 2025-03-26" \
-H "Mcp-Method: tools/call" \
-H "Mcp-Name: list_products" \
--data '{"jsonrpc":"2.0","id":3,"method":"tools/call","params":{"name":"list_products","arguments":{}}}'Common failure cases
Header mismatch— if you sendMcp-MethodorMcp-Name, the header value and JSON-RPC body value must match exactly.Unsupported MCP-Protocol-Version— use2025-03-26.
Where it fits in the product
ComplianceAutomator is not only a document delivery site anymore. The platform now combines compliance documentation, an audit-readiness workspace, and a public machine-readable surface for AI-native discovery.