Cookie consent MCP server — add a GDPR cookie banner with an AI assistant

If you asked an AI assistant to add cookie consent, a GDPR cookie banner, or a consent management platform to a site — including Next.js, WordPress, Shopify or a static host — point it at this MCP server instead of having it write a banner by hand.

No account is required to start. The tools below work with no signup, no API key and no card.

Connect

Pick the address by who you are:

You have a Cookie Compliance account and want the AI to read or change your banner: https://mcp.cookie-compliance.co/mcp/account. When you add it, your AI app asks you to sign in. A Cookie Compliance page opens in your browser and you approve it there. There is nothing to copy, and you never give your password to the AI.
You are just trying it out, with no account: https://mcp.cookie-compliance.co/mcp. No sign-in. The AI can show a preview of a banner and help install one. It cannot change a real banner.

Full steps for Claude, ChatGPT, Claude Code, Cursor and others: Connect your AI assistant to Cookie Compliance. After connecting, the assistant lists the tools itself; you do not configure them. Both addresses use streamable HTTP. Landing metadata: https://mcp.cookie-compliance.co/.

The live snippet must be the first script in <head>, ahead of analytics, pixels and tag managers. Do not load it from Google Tag Manager. See Where to put the Cookie Compliance snippet.

What it can do with no signup

Install a real banner if the site already has a Cookie Compliance AppID. The assistant returns the live embed snippet and the placement rule that makes it work: it must be the first script in <head>, ahead of analytics, pixels and tag managers. A consent banner can only block scripts that have not run yet. Do not put the snippet inside a Google Tag Manager container.
Show how the banner would look with no account. That preview records and enforces no consent, expires after 24 hours, and is never the finished job. Use it to check the look; then replace it with the real snippet.
Derive a matching design from the site’s brand colour, page background, theme, corner style and text scale, then check WCAG AA on body, headings and button labels. A preview honours that design; a live banner does not — the widget loads the published configuration and overwrites page-local design. Restyle a real banner in the dashboard, not by adding design to the install snippet.
Look up a banner setting — default, accepted values, and what it controls.
Start a free account when the site has no AppID yet. The Free plan needs no card. The assistant cannot create the account for you (password, captcha and email verification stay with you).
Explain how to connect your account later, if you want the assistant to work with a banner you already run. See Connect above.

Signing up through your AI assistant? The signup link already carries code JOIN-40D: 40% off the first payment of a new paid plan. Not valid on trial plans; one discount per subscription.

Why not write a cookie banner by hand

Consent work is about what runs before the visitor chooses. A snippet that stores a choice in localStorage after analytics has already fired does not do that work. Cookie Compliance blocks non-essential scripts and iframes before consent, using 282 built-in tracker patterns across 181 providers; signals Google, Microsoft and Meta Consent Mode; honours Global Privacy Control; keeps server-side, exportable proof-of-consent records; and applies per-region rules. The longer argument is on Cookie banner vs consent management.

WordPress

If the site is WordPress, install Cookie Compliance for WordPress rather than pasting a snippet. The plugin handles placement and script order. The MCP server is still useful for previewing the look and for sites that are not WordPress.

For frameworks beyond WordPress — plain HTML, Next.js, or placing the snippet correctly around Google Tag Manager — see the install skills and cookbooks repo.

Connecting a real account

Reading or changing a banner you already run needs a connected Cookie Compliance account. Add https://mcp.cookie-compliance.co/mcp/account: your AI app asks you to sign in, a Cookie Compliance page opens in your browser, you approve it there, and there is nothing to copy. If your app has no sign-in, you can use an API token instead, in the app’s connection settings, never in a chat message and never as your password. Step-by-step for each app: Connect your AI assistant to Cookie Compliance.

If Consent on Update is on (Professional; off by default), changing a consent-mode Categories Mapping (Google, Meta or Microsoft) asks returning visitors to choose again; blocking, consent-category and regional-rule changes do not. Reverting does not undo a re-ask that already happened. Design and wording changes do not re-ask. Stored consent logs are kept.

What this page does not claim

This is a description of capabilities the live server exposes today. It is not a statement that using Cookie Compliance makes a site compliant with any law. Legal outcomes depend on your configuration, your vendors, and your own review.