MCP Compliance

@grafana

Repository

Basic information

About MCP Compliance

An mcp server to support compliance operations in AI agents

MCP Compliance config

No standard config provided

This server doesn't expose a parseable MCP config block in its README. See the repository for install instructions.

Repository

MCP Compliance tools

Tool list not available yet

This listing does not currently have a tool list to display. This does not mean the server has no tools; check its documentation for supported capabilities.

We auto-extract tools from the README. The maintainer can list them under a ## Tools heading to populate this section.

Overview

What is MCP Compliance?

MCP Compliance is a toolset that provides CLI tools and an MCP server for LLM agents to interact with FedRAMP compliance data. It is designed for users going through the compliance journey of understanding, implementing, and evidencing security controls.

How to use MCP Compliance?

Clone the repository, run make deploy-local to build and deploy the binary, then configure your agent (Cursor or Claude Desktop) to use the MCP server. Detailed instructions are in the Getting Started Guide.

Key features of MCP Compliance

CLI tools for processing and querying FedRAMP baseline data
MCP server exposing compliance data to LLM agents
Tools: get_control, search_controls, list_control_families, get_control_evidence_guidance
Supports FedRAMP Rev 5 HIGH and MODERATE baselines
Provides evidence guidance for specific controls

Use cases of MCP Compliance

Understand security control requirements and applicability to your system
Design and implement controls to meet compliance requirements
Collect and document evidence to demonstrate compliance
Search and retrieve control details programmatically via an LLM agent

Frequently asked questions

What compliance program does MCP Compliance support?

It supports FedRAMP, using official baselines from the GSA FedRAMP Automation repository.

What tools does MCP Compliance provide?

It provides CLI tools for processing baseline data and an MCP server with tools like get_control, search_controls, and get_control_evidence_guidance.

Where does the compliance data come from?

The data is sourced from the official GSA FedRAMP Automation GitHub repository for Rev 5 HIGH and MODERATE baselines.

Is MCP Compliance production-ready?

No, the project is missing automation of evidence collection and secure data storage; that is planned for a future roadmap iteration.

How do I configure an agent to use the MCP server?

After building and deploying locally, see the Getting Started Guide at docs/getting_started.md for configuration details.

Comments

More Other MCP servers

YOUB

Connect your AI assistant to your own YOUB endurance training account. Read recorded activities with full analysis, planned sessions, race goals, wellness (HRV, sleep, resting HR) and your athletic profile. Create or mov

ICSS

chokcoco

不止于 CSS

20.7K

Blender

ahujasid

Open-source MCP to use Blender with any LLM

23.6K

Soar Flight Booking MCP

Soar Flight Booking MCP is a remote MCP server available at https://mcp.soar.flights.

PickFu MCP

PickFu MCP is a Model Context Protocol (MCP) server that connects AI assistants, developers, marketers, product managers, and AI agents to PickFu's consumer research platform. It enables users to create surveys, conduct