Compliance frameworks delivered to AI agents. Nizh gives your agent read access to your organization's compliance program — SOC 2, ISO 27001, CMMC 2.0, NIST, and more — as MCP tools, so it can check posture, read a control's objectives before changing code, and record where evidence lives.
Glama couldn't complete the latest health check. If this server requires authentication, missing or expired test credentials may be the cause. A test profile lets Glama authenticate for health checks and discover tools; it is separate from your personal connections.
If you are the author, claim ownership, then add or update a test profile under Admin → Test Profile.
Scored across 6 tools
Each tool has a distinct role: project discovery, high-level summary, control listing, keyword search, single-control detail, and session identity. The descriptions reinforce the intended workflow, so an agent should not confuse one tool with another.
The names mostly follow a clear verb_noun pattern: list_projects, list_controls, get_control, get_compliance_summary, search_controls. The one deviation is whoami, which is idiomatic but understandable and not confusing.
Six tools is well within the ideal range and exactly covers the server's compliance-querying purpose. Each tool earns its place and none feel redundant.
The surface covers the full read-only workflow: identify the tenant, choose a project/framework, view aggregate compliance status, list or search controls, and retrieve full detail with evidence. The descriptions explicitly guide between the tools, leaving no obvious dead ends.
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
get_compliance_summaryget_controllist_controlslist_projectssearch_controlswhoami
Add one secure layer between your agents and this server.