PolicyLayer MCP Server: Install & Setup

Install PolicyLayer in Claude Code

Claude Code

claude mcp add --transport http policylayer-policylayer https://api.policylayer.com/mcp

mcp.json (Claude Desktop, Cursor, VS Code, Windsurf)

{
  "mcpServers": {
    "policylayer-policylayer": {
      "url": "https://api.policylayer.com/mcp"
    }
  }
}

Frequently asked questions

What does the PolicyLayer MCP server do?

The MCP server that vets MCP servers: identity, risk grade and per-tool risk before you install.

Is the PolicyLayer MCP server free?

The server is free, but you will likely need an account. The server itself is free, but it connects to a service that needs an account or API key, which may have paid tiers. Check the provider for current pricing.

Does PolicyLayer run locally or remotely?

Remote. Hosted by the provider. You connect with a URL, nothing to install.

How do I add PolicyLayer to Claude Code?

Run: claude mcp add --transport http policylayer-policylayer https://api.policylayer.com/mcp

More security & identity MCP servers

View all

Security Recipes

stevologic/security-recipes.ai

Read-only CVE intelligence, remediation playbooks, and agent setup guides. Not a scanner.

RemoteAccount needed

Cinderfi

cinderfi/cinderfi-mcp

Retirement planning for Canada & US. CPP/OAS, Social Security, RRSP/TFSA, 401k/IRA, Monte Carlo.

RemoteAccount needed

AIMarket MCP Gateway

alexar76/aimarket-mcp

SSRF-hardened web gateway with web fetch, web search and Metis verification, sharing an audited security core with Metis and ARGUS.

Local + RemoteAccount neededPython

aictrl

aictrl-dev/skills

Project context, backlog tasks, and controlled workflows for coding agents. OAuth sign-in.

RemoteAccount needed

Algenta

thyn-ai/algenta-sdk

Algenta decision engine: dataset discovery, exact queries, utility models, decision memory and governed agent runs with approvals and execution receipts.

Local + RemoteAccount neededPython

Valca

PranLabs/valca

Scans code, IaC and AI-agent config for security problems. Read-only — nothing can be edited.

LocalFree