Skip to content

Deploy to your team — overview

This section is for IT admins rolling out InPolicy’s AI governance to employees who are using AI assistants (Claude Desktop, Claude Code, Cursor, Windsurf, etc.).

Three pieces, configured once per employee machine:

  1. An InPolicy API key: identifies your tenant to InPolicy. One key per IT deployment is fine.
  2. The InPolicy MCP server: a small npm-distributed helper that each AI assistant talks to. Zero-config after install.
  3. A company system prompt: a short instruction block you configure in your AI assistant that tells the model to consult InPolicy before responding.

Together, these three pieces make the AI assistant aware of your company’s policies on every conversation turn, without any action from the employee.

An employee opens Claude Desktop and types:

“Draft a reply to our Acme account exec. They’re asking for our Q3 roadmap. They’ve mentioned they’re also talking to CompetitorCo.”

With InPolicy installed:

  1. The system prompt tells Claude: “For any message that involves drafting communications or decisions, call the InPolicy record_turn tool first.”
  2. Claude calls record_turn. InPolicy returns the currently-applicable policies, e.g. “Do not share unpublished roadmap details with third parties” and “Flag any discussion involving a named competitor.”
  3. Claude sees those policies in its system prompt and adjusts its response: maybe redacting specific dates, adding a caveat about needing account-exec review, or declining entirely and explaining why.
  4. Optionally, Claude also calls check_output on its draft before showing it to the employee. If the output would violate a policy, Claude rewrites it or warns the employee.

The employee sees an AI that follows your policies, without having to know what the policies are.

This approach depends on the model choosing to call InPolicy’s tools on every relevant turn. With a good system prompt, compliance is high but not guaranteed. The model may skip the check on quick/casual questions where it doesn’t see a policy concern.

That’s usually fine. Most AI-surfaced risk is in the drafts and decisions, not in “what’s the capital of France.” For scenarios where you need guaranteed coverage, see building custom agents instead.

ToolPopular amongSetup guide
Claude DesktopGeneral-purpose knowledge workersClaude Desktop setup
Claude CodeEngineersClaude Code setup
CursorEngineersCursor setup
Windsurf / other MCP clientsVariedFollow Claude Desktop setup; config locations differ but shape is identical

After you pick a tool, review:

  1. Sign in at app.inpolicy.ai as a tenant admin.
  2. Go to Settings → API Keys.
  3. Click Create API key, give it a name like “MCP for employee devices,” and copy the plaintext key immediately. It’s shown only once.

You’ll paste this key into each employee’s MCP config. The same key works across machines and tools. It identifies your tenant, not an individual user.