PolicyForge MCP Server vs Pactlio MCP
A side-by-side look at the PolicyForge MCP Server and Pactlio MCP MCP servers: transport, auth, tools, quality signals, and the config to install either one in Claude, Cursor, Windsurf or VS Code.
Verdict: choose PolicyForge MCP Server for legal work as a local process; choose Pactlio MCP for legal over a hosted endpoint. You can also run both side by side in one mcpServers block.
Which MCP server should you choose?
Choose PolicyForge MCP Server when
- You need dedicated capabilities in the Legal domain.
- You prefer a local stdio subprocess transport.
- You have the keys it needs:
POLICYFORGE_API_KEY. - You want tools like
generate_policy, generate_baa, list_policies.
Choose Pactlio MCP when
- You need dedicated capabilities in the Legal domain.
- You prefer a remote HTTP/SSE transport.
- Its auth model fits you: No auth required.
- You want tools like
list_contract_types, get_jurisdiction_requirements, check_non_compete_enforceability.
Feature & specification comparison
Rows where the two servers differ are marked.
| Spec | ||
|---|---|---|
| Category | Legal | Legal |
| Quality signal | 61/100 · Good | 56/100 · Good |
| Install command | Confirmed | Confirmed |
| Transport | Local subprocess (stdio) | Remote HTTP/SSE |
| Auth | Not declared | No auth required |
| Pricing | Not declared | Freemium |
| Required env vars | POLICYFORGE_API_KEY | None listed |
| Verified owner | Community listing | Community listing |
| GitHub stars | 0 | 0 |
| Directory activity | 1 views 0 installs 0 upvotes | 3 views 0 installs 0 upvotes |
| Tools | 16 | 7 |
| Full listing | View PolicyForge MCP Server | View Pactlio MCP |
Tools & capabilities
PolicyForge MCP Server tools 16
generate_policyGenerate a legal policy (privacy policy, terms of service, cookie policy, refund policy, EULA, or disclaimer) for a business and return its Markdown content plus a hosted URL. Consumes one policy from the account's quota. IMPORTANT: if you are working inside the user's project, call get_disclosure_checklist and scan the codebase FIRST (dependencies, script tags, cookie writes, outbound hosts), then fill the optional fields below from what the code actually does — do not ask the user for facts you can read from source. Only ask for what code cannot tell you: legal company name, contact email, physical address, governing law. For terms_of_service, eula and disclaimer, always ask for governing_law: without it (or a physical address to infer it from) the document contains a marker to fill in. The result lists claims to verify: specific statements about third parties, certifications or deadlines that your inputs did not supply. Show them to the user and fix them with update_policy before publishing. Generation takes 40-60 seconds; if it is not finished within about 45 seconds this returns a job ID instead, and check_generation fetches the result. Never call generate_policy again for the same policy while a job is running.generate_baaGenerate a HIPAA Business Associate Agreement (BAA) between a covered entity and a vendor that handles Protected Health Information. Built from the clauses required by 45 CFR 164.504(e) and validated clause by clause before it is returned. Use this instead of generate_policy for BAAs — a BAA is a binding two-party contract, not a published policy, so it needs both parties' legal names and addresses and is never hosted at a public URL. Ask the user for the party details, effective date, and governing law: these are negotiated facts you cannot read from source code. Requires a Pro plan. The result is a draft for counsel to review, not executed legal advice. If it is not finished within about 45 seconds this returns a job ID; use check_generation for the result.list_policiesList the policies previously created on this PolicyForge account, newest first.get_policyRetrieve a single policy by ID, including its status, hosted URL, and full Markdown content.check_generationGet the result of a generate_policy, generate_baa or regenerate_policy call that was still running when it returned a job ID. Returns the finished policy, the error if generation failed, or says it is still running. Use this instead of starting the generation again, which would create a duplicate.update_policyUpdate an existing policy in place — the policy ID, hosted URL, and embed keep working, so links already published on the user's site stay valid. Use this instead of generate_policy when the business context changed (new SDK, new data flow, renamed company): fetch the current content with get_policy, then either send small changes as `edits` (exact find/replace pairs, best for one-line fixes) or submit the complete revised Markdown as `content`. The previous content is saved as a version first, so restore_policy_version can undo a bad update.regenerate_policyRe-run the AI generation engine over a policy's stored business context merged with the changed fields you provide — same policy ID and hosted URL, so published links keep working. The previous content is saved as a version first (see list_policy_versions / restore_policy_version). Consumes one generation from quota, like generate_policy. Use this when the business context changed substantially (new integrations, new jurisdiction, renamed company); for small wording fixes prefer update_policy, which is free and instant. If it is not finished within about 45 seconds this returns a job ID; use check_generation for the result.audit_complianceCompliance gap analysis: submit the stack manifest you built by scanning the codebase (see get_disclosure_checklist), optionally with a policy_id to audit against. PolicyForge compares what the code does with what the policy discloses and returns missing disclosures, overstated claims, missing policy types, and recommendations. Without a policy_id it audits the manifest alone (which policies are needed and what they must cover). Does not consume generation quota.check_policy_freshnessDrift detection: scan the codebase now (get_disclosure_checklist), build the current stack manifest, and compare it against the manifest stored when the policy was last generated/regenerated. Reports what changed in the stack so you know whether the policy still matches the code. Runs locally on the two manifests — no AI call, no quota.list_policy_versionsVersion history for a policy: snapshots taken before every API update, regeneration, or restore, plus any auto-generated compliance update drafts. Use get-version content via restore_policy_version, or fetch a single version's content with this policy's versions endpoint.restore_policy_versionRestore a policy to a previous version from list_policy_versions. The current content is snapshotted as a new version first, so a restore is itself reversible. The hosted URL is unchanged.delete_policyPermanently delete a policy. The hosted URL and any embeds of it stop working immediately, and this cannot be undone. Confirm with the user before deleting anything they may have linked from their site.- +4 more on the listing page
Pactlio MCP tools 7
list_contract_typesList all contract and legal document types Pactlio can generate, with descriptions, use cases, and USD prices. Start here to find the right contract type slug/id for other tools.get_jurisdiction_requirementsStatute-cited legal requirements, key differences, common pitfalls, terminology, and FAQs for a contract type in a specific US state or country. Use contract slug (e.g. "contractor-agreement") + jurisdiction slug (e.g. "california", "us", "uk", "eu-gdpr").check_non_compete_enforceabilityWhether a non-compete agreement is enforceable, limited, or void in a given US state (or DC), with salary thresholds and the key statute. Data covers all 50 states + DC.get_intake_questionsThe questions Pactlio asks to draft a specific contract type — use these to collect the information needed before calling start_contract_draft. Returns fields, types, options, and validation rules.start_contract_draftPrepare a contract draft with Pactlio's multi-agent AI engine (drafter, critic, compliance checker). Returns a preview_id and a URL. Generation (3-5 minutes) starts only when a human opens that URL in a browser — share it with your user, then poll get_draft_status. Free preview shows the opening sections; the full contract is unlocked by a human via checkout. Provide deal_summary fields collected via get_intake_questions (at minimum: parties, plus the required fields for the contract type). REQUIRES accept_terms: true — first confirm with your user that they accept the Pactlio Terms of Use and understand the output is an AI-generated draft for review, not legal advice.get_draft_statusCheck a contract draft from start_contract_draft. Returns "awaiting_human" until a person opens the preview URL, "pending" while generating. When complete, returns the free preview (opening sections), the titles of locked sections, and the URL where a human can pay to unlock the full contract.get_checkout_linkReturns the URL where a human can view the preview and pay to unlock the full contract for a draft created with start_contract_draft. Share this link with your user.
Ready-to-paste client configs
Paste either block (or both) into your client config, e.g. claude_desktop_config.json or ~/.cursor/mcp.json. We only show a config when the install command is confirmed.
PolicyForge MCP Server
{
"mcpServers": {
"mcp-52": {
"command": "npx",
"args": [
"-y",
"@policyforge/mcp@latest"
],
"env": {
"POLICYFORGE_API_KEY": "YOUR_POLICYFORGE_API_KEY_HERE"
}
}
}
}
Pactlio MCP
{
"mcpServers": {
"pactlio-ai-pactlio-mcp": {
"url": "https://www.pactlio.com/api/mcp"
}
}
}
Frequently asked questions
PolicyForge MCP Server is categorized under Legal and uses a local stdio subprocess. Pactlio MCP belongs to Legal and uses a remote HTTP/SSE transport. Pick PolicyForge MCP Server for legal work and Pactlio MCP for legal.
Copy the mcpServers block from the config section on this page into your client's config (for example claude_desktop_config.json or ~/.cursor/mcp.json), then fully restart the client.
PolicyForge MCP Server has no declared pricing — check the project's own site. Pactlio MCP is listed as freemium — a free tier with paid plans. Auth: no auth required. If a server needs environment variables such as API keys, define them under the env key in your client's MCP config.
Yes. MCP clients support multiple servers: add mcp-52 and pactlio-ai-pactlio-mcp as separate keys in the same mcpServers object, and your assistant will call tools from either one.
On AllMCPs, PolicyForge MCP Server has a quality signal of 61/100 (Good) with 1 views, 0 installs and 0 GitHub stars. Pactlio MCP has 56/100 (Good) with 3 views, 0 installs and 0 GitHub stars.