complyeah
Integrations

Findings should reach the agent that can fix them.

Connect complyeah to your AI coding workflow. Your agent reads the finding and remediation, changes your code, helps deploy it, then asks complyeah to independently re-verify the live site.

Create an API key Connect with MCP

MCP server

Give Claude, Cursor, Codex, and other MCP clients structured access to domains, findings, reports, and re-verification.

Setup guide

Agent Plugin

Install a packaged skill plus MCP tools so your agent follows the complete find → fix → deploy → verify workflow.

Install plugin

REST API

Use bearer-token JSON endpoints for custom automations, CI, reports, External Security, and Agent Readiness.

Open API docs
MCP server

A verified fix loop, inside your agent.

The MCP server is a thin client of your complyeah account. The API key stays in the client environment, outside the model conversation. Reads and finding re-verification are free; paid scans and journey runs keep the same account allowances.

  1. 1

    Read the evidence

    The agent retrieves exact findings, affected targets, and remediation guidance.

  2. 2

    Apply and deploy

    It edits your own code or hosting configuration. Complyeah never receives repository access.

  3. 3

    Re-verify independently

    The agent calls complyeah against the live site. Only that check can mark the finding fixed.

MCP client configurationstdio
{
  "mcpServers": {
    "complyeah": {
      "command": "npx",
      "args": ["-y", "complyeah-mcp@latest"],
      "env": { "COMPLYEAH_API_KEY": "cmply_live_..." }
    }
  }
}
Create the key under API in your account, add this configuration to your MCP client, and restart the client.
Agent Plugin · v1

The workflow, not just the tools.

The complyeah Agent Plugin follows the current plugin package standard: a reusable security-remediation skill combined with the complyeah MCP server. It teaches the agent when to inspect, fix, deploy, and verify again, including when to ask before spending an allowance.

Read security and Agent Readiness evidence
Apply fixes in the customer's repository
Re-verify findings on the live domain
Keep credentials outside model context

Install from GitHub

codex plugin marketplace add complyeah/complyeah-agent-plugin
# Then install “complyeah” from the Plugins Directory

Set COMPLYEAH_API_KEY when the plugin prompts for its MCP credential.

Building your own integration?

The API reference remains a separate, focused developer document with authentication, endpoints, errors, and examples.

Read the API docs