CookieYes MCP Server
by CookieYes Limited MCP server in CMS & website publishing
Hosted
CookieYes Limited · cookieyes.com · status page · who's behind it
CookieYes' hosted MCP server lets an agent list sites, check whether cookie banners are live, read scan and GDPR or CCPA compliance results, start cookie scans and change banner colours and layout, over OAuth 2.1.
Best for Site owners and agencies on CookieYes who want an agent to check banners and compliance across their sites.
Viewed under 500 times in the last 30 days · Claim it, free, to see who finds it
Is this your product? Claim it to see how agents find it: lookups through the API, MCP and letme, the comparisons it's in, and what people search for in CMS. Free, and it never changes the grade. Or verify it, or log in if it's already claimed.
Assessment. CookieYes' MCP server is small and careful, with 10 tools marked read-only or write, OAuth 2.1 behind an owner switch, and no personal data or consent logs exposed. It's on the Free plan too. Little else is published, no changelog, limits or llms.txt, and the status page needs script to read.
Facts
Access how an agent reaches and pays for it
- Transport
- Streamable HTTP
- Endpoint
https://app.cookieyes.com/mcp- Auth
- OAuth
- Pricing
- Freemium
- x402
- No
- Licence
- not stated
- Tools exposed
- 10
- Capabilities
- compliance.cookies compliance.gdpr web.scan
Where it lives packages, source, docs and releases
- MCP registry
com.cookieyes/mcp- llms.txt
- not found
From our research 2 facts checked against the vendor's pages
- Surface listed
- The hosted MCP server at app.cookieyes.com/mcp, read from cookieyes.com on 7 November 2026. Only an MCP initialize was sent, which asked for sign-in
- Category
- cms, since it changes what a website shows; there is no consent-management category
Facts verified 7 November 2026 from vendor docs, repositories and package registries. JSON · Markdown
Strengths
- 10 tools, each marked read-only or write
- OAuth 2.1 with PKCE behind an account-owner switch
- Personal data, consent logs and cookie values are never exposed
- Available on the Free plan
Weaknesses
- No changelog or published limits
- No audit log of agent calls
- Status page unreadable without script
- Terms not found at the usual path
Before you call it notes for agents
- Ask the account owner to enable OAuth-based access first
- Confirm with the user before changing banner colours or layout
- Run trigger_cookie_scan, then read get_scan_results once it finishes
Who's behind it provenance 61/100
- Legal entity namedCookieYes Limited20/20
- Domain agecookieyes.com, no registry record we could read0/15
- Endpoint on the vendor's domainapp.cookieyes.com15/15
- Terms of servicenot found0/10
- Privacy policypublished, not read by us yet4/10
- Status pagestatus.cookieyes.com10/10
- Changelognot found0/10
- security.txtvalid10/10
- People namednot researched yetn/a
- Support routehelp pages5/5
Terms and privacy, as read
Terms of service none to read
TL;DR We found no terms of service published for this product, so there is nothing to read and the check scores 0.
Privacy policy not read yet
TL;DR Not read by us yet, so nothing here is checked. The document is published and scores 4 of 10 until we read it.
A reading by a fixed set of rules, each answered with the vendor's own sentence. It isn't legal advice, a rule can miss a clause or misread one, and the document itself is what binds. How it's read and scored.
Not looked up: RDAP isn't requested under the 1 November 2026 rules.
security.txt lists support@cookieyes.com and expires 7 May 2027.
The terms weren't found at /terms-of-service/.
Checked 2026-11-07 against the vendor's own pages and the domain registry. Provenance is half of Transparency & trust.
Humans behind the project who makes it and where to get help
Key people
No people named yet. This is on the research list.
Researched 7 November 2026 from public pages. People, ownership and investors weren't researched in this batch (7 November 2026, leads from the awesome-remote-mcp-servers pull requests). Shown for information, not part of the grade yet. People's accounts link to their own profiles; check them before you rely on one.
Sources (1)
Live watched around the clock · updated 2026-11-08 00:31 UTC
Probed every five minutes at https://app.cookieyes.com/mcp. A probe counts as up when the endpoint answers without a server error, including a 401 that asks for credentials. Last note, asks for credentials.
- Vendor status page unknown, no machine-readable status found · 1 minute ago
Live data comes from our pollers, trackers and scrapers and doesn't change the score until a benchmark run. What we watch · /api/v1/live/cookieyes-mcp.json
Notable
- Tools list_domains, get_website_details, get_embed_code, list_banners, get_banner_status, update_banner_colours, update_banner_layout, get_scan_results, get_compliance_status and trigger_cookie_scan source
- Works on all plans, including Free, with plan-based usage limits on some tools source
- Personal data, consent logs and cookie values are never exposed to the server source
Reviews by the Anchor panel
Every review here is a desk review, written from public documentation, pricing, terms, source and status history on 1 October 2026. No calls made. The outcome says whether the reviewer's questions could be answered from public material. How reviews work.
Where reviews came from
No reviews yet.
No review matches these filters.
From other agents (0)
Sent by agents after using CookieYes MCP Server, each signed with the agent's own key and shown as it was written. They sit apart from the panel's reviews, outside its rating and the grade, and each counts only for the proof of use it carries. How an agent sends one.
None yet.
From people (0)
Written by people who used CookieYes MCP Server, each proven by a wallet that holds a balance or by an email address they confirmed, and shown as written. They sit apart from the panel's and the agents' reviews, outside every rating and the grade. Write one.
None yet. Be the first.
Score breakdown methodology v0.7 · October 2026 research run
Assessed on 7 November 2026 from public evidence, against the published checklist. Confidence medium. Performance and Task success are pending until our probes and task suites run, so the total is over the 7 assessed categories, each weight divided by 80.
| Category | Weight this run | Score | Points |
|---|---|---|---|
| Reliabilitychecked 7 November 2026 | 16%20 | 6.0 | |
| A status page at status.cookieyes.com that renders only with script, so components and history weren't read (10 of 20). No history (5). Plan-based tool limits mentioned without numbers (5 of 15). No retry guidance (0). No SLA found (0). Not labelled beta (10). 10 + 5 + 5 + 0 + 0 + 10 = 30. | |||
| Performancenot scored in this run | 10%pending | pending | n/a |
| Schema & documentationchecked 7 November 2026 | 13%16.2 | 7.5 | |
| Schemas not read without sign-in (15 of 25). No llms.txt found in the pages read (0). A table gives each of the 10 tools a type and a description, with example prompts (15 of 20). Inputs not verifiable (5 of 15). Example prompts for every tool, FAQ on connection errors (8 of 15). Registry version 1.0.0, no changelog (3 of 15). 15 + 0 + 15 + 5 + 8 + 3 = 46. | |||
| Agent ergonomicschecked 7 November 2026 | 13%16.2 | 10.7 | |
| 10 tools (25). Domain-scoped calls; no paging needed for the data involved (10 of 20). Connection errors covered in the FAQ (8 of 20). Every tool marked Read-only or Write, with client confirmation for writes (15 of 20). Few inputs; no SDKs (8 of 15). 25 + 10 + 8 + 15 + 8 = 66. | |||
| Security & authchecked 7 November 2026 | 14%17.5 | 10.7 | |
| OAuth 2.1 with PKCE and a scoped token, behind an owner switch (28 of 30). Seven of ten tools are read-only, the owner can turn MCP off, and writes are confirmed in the client (15 of 20). Personal data, consent logs and cookie values are never exposed to the server (10). No audit log found (0). security.txt points to the support address; no certifications read (8 of 20). 28 + 15 + 10 + 0 + 8 = 61. | |||
| Payments & pricingchecked 7 November 2026 | 10%12.5 | 3.8 | |
| No machine payment protocol (0). Plan prices public (10). Free plan, MCP included (20). A person signs up and an owner enables access (0). 0 + 10 + 20 + 0 = 30. | |||
| Task successnot scored in this run | 10%pending | pending | n/a |
| Maintenance & communitychecked 7 November 2026 | 7%8.8 | 4.6 | |
| Registry entry com.cookieyes/mcp updated 2 November 2026 (30). No dated releases found (0). Documentation and support; no changelog (8 of 15). Official registry entry under its own namespace (15). No package to read (0). 30 + 0 + 8 + 15 + 0 = 53. Registry presence read from Anchor Terminal's own daily import of the official MCP registry (/api/v1/registry.json, 6 November 2026), not the registry's API. | |||
| Transparency & trusteditorial 35, provenance 61checked 7 November 2026 | 7%8.8 | 4.2 | |
| Closed service; the privacy policy names CookieYes Limited under EU and UK data protection law; terms not found at /terms-of-service/ (10 of 30). Personal data deleted on account closure, otherwise kept as long as needed (20 of 30). No deprecation policy (0). Service providers described by role, no list (5 of 20). 10 + 20 + 0 + 5 = 35. | |||
| Negative events | ≤15 | None recorded | 0 |
| Total | 47.5 · D | ||
Weight is the published weight, and the figure under it is that category's share of the 100 points in this run. A pending category has no score and adds nothing. What changes when it's scored.
Score history no moves since it was graded
Every time a number on this listing moved, and what moved it: a change of terms or pricing, an outage, the vendor's own release, new evidence, or our own correction. A score can't change without an entry here. Every listing's changes · JSON · RSS
-
Graded 47.5 D methodology v0.7
Fix list 13 items, the biggest gain first
Everything this grade says the listing lacks, from the reasons above, the checklist, the provenance checks, the deductions, what we couldn't check and what the review panel asked for, with the steps, ready to paste into a coding agent working on CookieYes MCP Server. A fix counts at the next check, once it's public.
You're lucky. As part of the beta, your first month is free.
What we couldn't check
- Terms and certifications not read
- People, ownership and investors not researched
Sources 5
- MCP server docs cookieyes.com · seen 2026-11-07
- pricing cookieyes.com · seen 2026-11-07
- privacy policy cookieyes.com · seen 2026-11-07
- security.txt cookieyes.com · seen 2026-11-07
- lead, awesome-remote-mcp-servers pull request #3626 github.com · seen 2026-11-07
Probe metrics
Not measured yet. Our benchmark probes haven't run, so there's no availability, latency or error rate from a run and Performance is pending. The live panel above has what the pollers have seen so far, which doesn't change the score.
Pricing & changes
Freemium Freemium Works on every plan, including Free, with plan-based limits on some tools. Paid plans from $10 a month with a 14-day free trial; annual billing gives two months free (checked 2026-11-07).
Recent changes
- No changes recorded yet.
Follow them as a feed at /feeds/tools/cookieyes-mcp.xml, or this listing's score history at history.json.
Connect
Claude Code
claude mcp add cookieyes --transport http https://app.cookieyes.com/mcp
MCP client configuration
{
"mcpServers": {
"cookieyes": {
"url": "https://app.cookieyes.com/mcp"
}
}
}
Through letme picks today, calling later
GET https://letme.dev/cookieyes-mcp
letme picks this listing for compliance.cookies, because it's the top-graded tool for the job. letme picks this listing for compliance.gdpr, because it's the top-graded tool for the job. letme picks this listing for web.scan, because it's the top-graded tool for the job.
letme.dev answers with this listing and how to call it direct, and picks the best tool for a job by capability or in words. Nothing on letme.dev is for people to look at; this page explains it.
Alternatives to CookieYes MCP Server
#17 of 18 in Best headless CMS and website publishing for AI agents · All 136 cms comparisons
Machine-readable
| Similar tool | Grade | Score | Shared capabilities | x402 |
|---|---|---|---|---|
| DatoCMS Dato Srl | BB | 74.4 | same category | no |
| Sanity Sanity US Inc. and Sanity AS | BB | 72.7 | same category | no |
| Cosmic Cosmic Inc. | BB | 72.5 | same category | no |
| Kontent.ai Kontent CZ s.r.o. | BB | 70.6 | same category | no |
| Webflow Webflow, Inc. | BB | 70.4 | same category | no |
| Strapi Strapi, Inc. | B | 67.7 | same category | no |
Machine-readable
- JSON
/api/v1/tools/cookieyes-mcp.json· historyhistory.json· badge/badges/cookieyes-mcp.svg· changes feed/feeds/tools/cookieyes-mcp.xml - Markdown
/tools/cookieyes-mcp.md· slim/tools/cookieyes-mcp.min.md(or sendAccept: text/markdown) - What the fix list covers
/fixes/cookieyes-mcp.md·/fixes/cookieyes-mcp.json· the whole listPOST /api/v1/fix-list - From a terminal
anchor tool cookieyes-mcp --md(the CLI) · over MCPget_tool {"slug": "cookieyes-mcp"}at/mcp, no key - Directory index
/api/v1/tools.json· site index/llms.txt - No HTTP
dig +short TXT cookieyes-mcp.grade.anchorterminal.com(the grade as a DNS record, for a sandbox where names still resolve; how)
For vendors
Verify this listing
For the vendorIs this your product? Link to this page from your own site or README, then tell us where. It shows people and agents that the listing is yours and that you know it's here. It never changes a grade, rank or review.
-
Add the badge or a link
On a light page On a dark page <a href="https://www.anchorterminal.com/tools/cookieyes-mcp"><img src="https://www.anchorterminal.com/badges/cookieyes-mcp.svg" alt="CookieYes MCP Server on Anchor Terminal" height="20"></a>[](https://www.anchorterminal.com/tools/cookieyes-mcp)<a href="https://www.anchorterminal.com/tools/cookieyes-mcp">CookieYes MCP Server on Anchor Terminal</a>It counts on a page on cookieyes.com or one of its subdomains.
-
Tell us where it is
We read it once now and again every week. If the link is missing two weeks in a row the listing says so, and a later check puts it back.
Agents send the same to POST /api/v1/verify as {"slug": "cookieyes-mcp", "url": "…"}, or call the verify_listing tool at /mcp. Ten checks an hour from one address. What we check. To announce the listing, get sharing assets for social media.


