MCP.so
登录

MCP Compliance

@grafana

基本信息

分类

其他

传输方式

stdio

作者

grafana

关于 MCP Compliance

An mcp server to support compliance operations in AI agents

MCP Compliance 配置

暂无标准配置

该服务器的 README 中没有可解析的 MCP 配置块,请前往代码仓库查看安装说明。

代码仓库

MCP Compliance 工具

工具列表暂未提供

当前收录暂时没有可展示的工具列表,不代表服务没有工具。请查阅项目文档了解支持的能力。

工具是从 README 中自动提取的。维护者可以在 ## Tools 标题下列出工具,即可填充这部分内容。

概览

What is MCP Compliance?

MCP Compliance is a toolset that provides CLI tools and an MCP server for LLM agents to interact with FedRAMP compliance data. It is designed for users going through the compliance journey of understanding, implementing, and evidencing security controls.

How to use MCP Compliance?

Clone the repository, run make deploy-local to build and deploy the binary, then configure your agent (Cursor or Claude Desktop) to use the MCP server. Detailed instructions are in the Getting Started Guide.

Key features of MCP Compliance

  • CLI tools for processing and querying FedRAMP baseline data
  • MCP server exposing compliance data to LLM agents
  • Tools: get_control, search_controls, list_control_families, get_control_evidence_guidance
  • Supports FedRAMP Rev 5 HIGH and MODERATE baselines
  • Provides evidence guidance for specific controls

Use cases of MCP Compliance

  • Understand security control requirements and applicability to your system
  • Design and implement controls to meet compliance requirements
  • Collect and document evidence to demonstrate compliance
  • Search and retrieve control details programmatically via an LLM agent

常见问题

1

What compliance program does MCP Compliance support?

It supports FedRAMP, using official baselines from the GSA FedRAMP Automation repository.

2

What tools does MCP Compliance provide?

It provides CLI tools for processing baseline data and an MCP server with tools like get_control, search_controls, and get_control_evidence_guidance.

3

Where does the compliance data come from?

The data is sourced from the official GSA FedRAMP Automation GitHub repository for Rev 5 HIGH and MODERATE baselines.

4

Is MCP Compliance production-ready?

No, the project is missing automation of evidence collection and secure data storage; that is planned for a future roadmap iteration.

5

How do I configure an agent to use the MCP server?

After building and deploying locally, see the Getting Started Guide at docs/getting_started.md for configuration details.

评论

其他 分类下的更多 MCP 服务器