british-cybersecurity-mcp
Click on "Install Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@british-cybersecurity-mcpsearch for ransomware advisories"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
British Cybersecurity MCP
The British cybersecurity corpus is now served through the Ansvar Gateway. Connect your AI assistant (Claude, Copilot, Cursor, or any MCP client) to
https://gateway.ansvar.eu/mcp— one OAuth connection, free tier available, covering this corpus plus EU regulations, national law across 28 audited jurisdictions (Europe + the US), and CVE/security intelligence, every result with a verbatim source citation. Start at https://ansvar.eu/docs/quickstart
Connect
Claude Code (one line):
claude mcp add ansvar --transport http https://gateway.ansvar.eu/mcpClaude Desktop / Cursor — add to claude_desktop_config.json (or mcp.json):
{
"mcpServers": {
"ansvar": {
"type": "url",
"url": "https://gateway.ansvar.eu/mcp"
}
}
}Claude.ai — Settings → Connectors → Add custom connector → paste https://gateway.ansvar.eu/mcp
First request opens an OAuth signup flow (setup details: ansvar.eu/docs/quickstart). After signup, your client is bound to your account; tier (free / premium / team / company) determines fan-out, quota, and which downstream MCPs are reachable.
Self-host this MCP
You can also clone this repo and build the corpus yourself. The schema, fetcher, and tool implementations all live here. What is not in the repo is the pre-built database — TDM and standards-licensing constraints on the upstream sources mean we host the corpus on Ansvar infrastructure rather than redistribute it as a public artifact.
Build your own: run this repo's ingestion script (entry-point varies per
repo — typically scripts/ingest.sh, npm run ingest, or make ingest;
check the repo root).
British cybersecurity data for AI compliance tools.
Query British cybersecurity data -- regulations, decisions, and requirements from NCSC (National Cyber Security Centre) -- directly from Claude, Cursor, or any MCP-compatible client.
Built by Ansvar Systems -- Stockholm, Sweden
Related MCP server: Estonian Cybersecurity MCP
Available Tools (7)
Tool | Description |
| Full-text search across NCSC guidance documents. Covers Cyber Essentials, 10 Steps to Cyber Security, Cyber Assessmen... |
| Get a specific NCSC guidance document by reference (e.g., |
| Search NCSC security advisories and alerts. Returns advisories with severity, affected products, and CVE references w... |
| Get a specific NCSC security advisory by reference (e.g., |
| List all NCSC frameworks and guidance series covered in this MCP, including Cyber Essentials, 10 Steps to Cyber Secur... |
| List all data sources used by this MCP server, with URLs and descriptions. |
| Return metadata about this MCP server: version, data source, coverage, and tool list. |
All tools return structured data with source references and timestamps.
Data Sources and Freshness
All content is sourced from official British regulatory publications:
NCSC (National Cyber Security Centre) -- Official regulatory authority
Data Currency
Database updates are periodic and may lag official publications
Freshness checks run via GitHub Actions workflows
Last-updated timestamps in tool responses indicate data age
See sources.yml for full provenance metadata.
Security
This project uses multiple layers of automated security scanning:
Scanner | What It Does | Schedule |
CodeQL | Static analysis for security vulnerabilities | Weekly + PRs |
Semgrep | SAST scanning (OWASP top 10, secrets, TypeScript) | Every push |
Gitleaks | Secret detection across git history | Every push |
Trivy | CVE scanning on filesystem and npm dependencies | Daily |
Docker Security | Container image scanning + SBOM generation | Daily |
Socket.dev | Supply chain attack detection | PRs |
Dependabot | Automated dependency updates | Weekly |
See SECURITY.md for the full policy and vulnerability reporting.
Important Disclaimers
Not Regulatory Advice
THIS TOOL IS NOT REGULATORY OR LEGAL ADVICE
Regulatory data is sourced from official publications by NCSC (National Cyber Security Centre). However:
This is a research tool, not a substitute for professional regulatory counsel
Verify all references against primary sources before making compliance decisions
Coverage may be incomplete -- do not rely solely on this for regulatory research
Before using professionally, read: DISCLAIMER.md | PRIVACY.md
Confidentiality
Queries go through the Claude API. For privileged or confidential matters, use on-premise deployment. See PRIVACY.md for details.
Development
Setup
git clone https://github.com/Ansvar-Systems/british-cybersecurity-mcp
cd british-cybersecurity-mcp
npm install
npm run build
npm testRunning Locally
npm run dev # Start MCP server
npx @anthropic/mcp-inspector node dist/index.js # Test with MCP InspectorData Management
npm run build:db # Rebuild SQLite database from seed data
npm run check-updates # Check for new regulatory dataMore Ansvar MCPs
Full fleet coverage at ansvar.eu/coverage.
Contributing
Contributions welcome! See CONTRIBUTING.md for guidelines.
License
Apache License 2.0. See LICENSE for details.
Data Licenses
Regulatory data sourced from official government publications. See sources.yml for per-source licensing details.
About Ansvar Systems
We build AI-powered compliance and legal research tools for the European market. Our MCP fleet provides structured, verified regulatory data to AI assistants -- so compliance professionals can work with accurate sources instead of guessing.
ansvar.eu -- Stockholm, Sweden
Available Tools
8 toolsgb_cyber_aboutA
Return metadata about this MCP server: version, data source, coverage, and tool list.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations provided, so description carries full burden. It states it returns metadata but does not disclose behavioral traits like read-only nature, authentication needs, or rate limits. Minimal behavioral context.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Single sentence, no wasted words, clearly states what the tool does without redundancy.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given no parameters or output schema, description lists expected output fields (version, data source, coverage, tool list), which is reasonably complete for a metadata tool. Minor gap: no mention of output format.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
No parameters exist (schema coverage 100%), so description need not add parameter info. Baseline for 0 params is 4.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Description clearly states the verb 'Return' and resource 'metadata about this MCP server'. It lists specific fields (version, data source, coverage, tool list), distinguishing it from siblings that retrieve specific data items.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The purpose is clear and context implies use for server metadata. However, no explicit when-to-use or alternatives are mentioned, but no ambiguity exists given the tool's nature.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
gb_cyber_check_data_freshnessA
Check the current state of the database: document counts for guidance, advisories, and frameworks. Use this to verify data is loaded and assess coverage before making compliance decisions.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries full burden. It discloses it checks database state and document counts, implying a read-only operation. However, it does not mention potential side effects, authentication needs, or rate limits. For a simple status check, the disclosure is adequate but not comprehensive.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences with front-loaded purpose. Every sentence adds value: the first states the action and what it checks, the second explains when to use it. No unnecessary words.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given zero parameters and no output schema, the description is fairly complete. It specifies what is counted (guidance, advisories, frameworks) and the usage scenario. It could mention that the output is likely counts, but for a simple check tool, it suffices.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema has 0 parameters, and schema description coverage is 100% (no params to cover). Per guidelines, baseline is 4 for zero parameters. The description adds no parameter semantics because none exist.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool checks the database state (document counts for guidance, advisories, and frameworks). It uses a specific verb ('check') and resource ('database state'), distinguishing it from sibling tools that search, get, list, or provide context.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description explicitly says 'Use this to verify data is loaded and assess coverage before making compliance decisions,' providing clear context and timing. It does not mention when not to use it or name specific alternatives, leaving some room for ambiguity.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
gb_cyber_get_advisoryA
Get a specific NCSC security advisory by reference (e.g., 'NCSC-ADV-2024-001').
| Name | Required | Description | Default |
|---|---|---|---|
| reference | Yes | NCSC advisory reference (e.g., 'NCSC-ADV-2024-001') |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the burden of behavioral disclosure. While 'Get' implies a read-only operation, the description does not explicitly confirm no side effects, rate limits, or prerequisites. It is adequate but not thorough.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, well-structured sentence that front-loads the verb and resource, with an example in parentheses. No unnecessary words.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple one-parameter get tool, the description is complete enough to convey its purpose and usage. It lacks explicit output description, but the tool name and context imply the returned data. Minor gap prevents a 5.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100% and the description of the 'reference' parameter in the schema includes the same example as the tool description. The description adds no new meaning beyond the schema, so baseline score of 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the action ('Get') and the resource ('specific NCSC security advisory'), and includes a concrete example format for the reference. This distinguishes it from sibling gb_cyber_search_advisories, which is for searching/filtering.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies usage when a specific advisory reference is known, and provides an example. It does not explicitly state when not to use or mention the search alternative, but the sibling tool name and context make it clear.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
gb_cyber_get_guidanceA
Get a specific NCSC guidance document by reference (e.g., 'NCSC-CE-2024', 'NCSC-10STEPS-2023', 'NCSC-CAF-3.2').
| Name | Required | Description | Default |
|---|---|---|---|
| document_id | Yes | NCSC document reference (e.g., 'NCSC-CE-2024', 'NCSC-CAF-3.2') |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations provided, so description carries full burden. States 'Get' implying read-only, but doesn't mention error behavior, caching, return format, or any restrictions. Adequate for a simple retrieval but lacks depth.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Single sentence of 14 words, front-loaded with key action and resource. No wasted words, perfectly concise.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given no output schema, description omits what the returned guidance document contains (full text, metadata). Also lacks error or edge-case handling. Adequate for a simple tool but not complete for an AI agent's decision-making.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100% with a clear description. Description adds one extra example ('NCSC-10STEPS-2023') but doesn't add significant meaning beyond schema. Baseline 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Description clearly states verb 'Get', resource 'NCSC guidance document', and specifies input is a reference. Examples like 'NCSC-CE-2024' distinguish it from sibling tools like gb_cyber_search_guidance.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Implies usage when a specific document reference is known, but no explicit when-not or alternatives are mentioned. Agent must infer when to use this over search or get_advisory.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
gb_cyber_list_frameworksA
List all NCSC frameworks and guidance series covered in this MCP, including Cyber Essentials, 10 Steps to Cyber Security, and the Cyber Assessment Framework (CAF).
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations provided, so description carries full burden. It describes a simple read-only list operation with no side effects, which is transparent. However, no mention of output format or any potential limitations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Single sentence with action and resource, followed by examples. No redundant words, front-loaded with purpose.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given no output schema, description could specify return format (e.g., list of strings). However, for a simple listing tool, the provided information is fairly complete. Minor gap in not describing output structure.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
No parameters; schema coverage 100% with empty properties. Description adds no additional parameter info but doesn't need to. Baseline for 0 parameters is 4, and this earns a 5 due to perfect clarity.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Description clearly states action (list), specific resource (NCSC frameworks and guidance series), and provides examples (Cyber Essentials, 10 Steps, CAF). Distinct from sibling tools which focus on advisories, guidance, sources, etc.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Implicitly clear when to use (to get list of frameworks), but lacks explicit when-not-to-use or alternative references. Context with siblings makes it evident.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
gb_cyber_list_sourcesA
List all data sources used by this MCP server, with URLs and descriptions.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
As a read-only list operation with no side effects, the description is transparent. Could explicitly state read-only nature, but not required given simplicity.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
One sentence, no wasted words, perfectly front-loaded.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given no parameters and no output schema, the description sufficiently explains the tool's purpose and output. Could mention it returns a list of objects with URL and description.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
No parameters, so baseline score of 4 applies. Description adds no param info, but none needed.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Description clearly states 'List all data sources used by this MCP server, with URLs and descriptions.' It uses a specific verb and resource, and distinguishes from sibling tools that focus on advisories, frameworks, etc.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No explicit guidance on when to use versus alternatives. However, the tool is self-explanatory as a simple list-all operation with no parameters.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
gb_cyber_search_advisoriesA
Search NCSC security advisories and alerts. Returns advisories with severity, affected products, and CVE references where available.
| Name | Required | Description | Default |
|---|---|---|---|
| limit | No | Maximum number of results to return. Defaults to 20. | |
| query | Yes | Search query (e.g., 'ransomware', 'zero-day', 'supply chain') | |
| severity | No | Filter by severity level. Optional. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries full burden. It mentions non-destructive search behavior and return fields (severity, products, CVEs). However, it does not disclose pagination, authorization requirements, or rate limits. Adequate for a search tool but incomplete.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single concise sentence that covers the tool's function and output. It could briefly mention sibling distinctions or usage context, but overall it is well-structured and front-loaded.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The tool has no output schema, so the description needs to explain the return value structure. It lists some fields but omits details like sorting, result format (list?), or default behavior. Missing pagination info and guidance on combining with other tools. Adequate but incomplete.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, and the description adds no new per-parameter details beyond what the schema provides. The description's mention of return fields does not enhance parameter understanding. Baseline 3 applies.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool's purpose: 'Search NCSC security advisories and alerts.' It also specifies the output includes severity, affected products, and CVE references, distinguishing it from sibling tools like gb_cyber_get_advisory (likely single advisory) and gb_cyber_search_guidance (different content).
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No explicit guidance on when to use this tool vs. siblings. The description implies it's for searching advisories, but lacks alternative explainers. Context from sibling names suggests get_advisory is for single results, but no explicit differentiation.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
gb_cyber_search_guidanceA
Full-text search across NCSC guidance documents. Covers Cyber Essentials, 10 Steps to Cyber Security, Cyber Assessment Framework (CAF), board-level guidance, and technical publications. Returns matching documents with reference, title, series, and summary.
| Name | Required | Description | Default |
|---|---|---|---|
| type | No | Filter by document type. Optional. | |
| limit | No | Maximum number of results to return. Defaults to 20. | |
| query | Yes | Search query (e.g., 'patch management', 'network security', 'incident response') | |
| series | No | Filter by NCSC series. Optional. | |
| status | No | Filter by document status. Defaults to returning all statuses. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the full burden. It discloses that the tool performs a full-text search and returns specific fields, but it does not mention pagination, default limit behavior, or whether the operation is read-only. As a search tool, most agents assume read-only, but additional behavioral details (e.g., rate limits) are absent.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is two sentences long, front-loads the purpose, and contains no extraneous information. Every sentence contributes to understanding the tool's function and output.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool has 5 parameters, no output schema, and no annotations, the description provides a reasonable overview but omits details like result ordering, pagination, or handling of empty queries. It describes the return fields but not the structure. Overall adequate but with gaps.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, with each parameter already described in the input schema (e.g., query, type, series, limit, status). The description adds value by specifying the document collections but does not add meaning beyond what the schema provides for individual parameters. Baseline of 3 applies.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the verb 'search' and resource 'guidance documents', specifying the covered collections (Cyber Essentials, 10 Steps, CAF, etc.) and the return fields (reference, title, series, summary). This distinguishes it from siblings like gb_cyber_search_advisories which searches advisories, and gb_cyber_get_guidance which retrieves a single document.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies usage for full-text search of guidance documents but does not explicitly state when to use this tool versus alternatives (e.g., when to search advisories or list frameworks). No exclusions or prerequisites are provided, leaving the agent to infer context from the name and sibling list.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
8 tool updates
v0.1.0- First observed
gb_cyber_about - First observed
gb_cyber_check_data_freshness - First observed
gb_cyber_get_advisory - First observed
gb_cyber_get_guidance - First observed
gb_cyber_list_frameworks - First observed
gb_cyber_list_sources - First observed
gb_cyber_search_advisories - First observed
gb_cyber_search_guidance
TDQS
Scored across 8 tools
Each tool has a clearly distinct purpose: searching vs. retrieving advisories, listing frameworks/sources, checking data freshness, and searching/retrieving guidance. No overlap or ambiguity.
All tools follow a consistent 'gb_cyber_' prefix and verb_noun pattern (e.g., search_advisories, get_advisory, list_frameworks). The tool 'about' is slightly different but still adheres to the same style.
8 tools is well-scoped for a cybersecurity advisory and guidance server. Each tool performs a necessary function without redundancy, and the count aligns with the server's focused purpose.
The tool set covers search and retrieval for both advisories and guidance, plus metadata and data freshness checks. A minor gap is the lack of a dedicated 'list_all_advisories' tool, but search can approximate that.
Maintenance
Resources
Unclaimed servers have limited discoverability.
Looking for Admin?
If you are the server author, to access and configure the admin panel.
Related MCP Connectors
data.gov.uk MCP — UK national open-data portal (CKAN API).
Companies House MCP — UK statutory company registry (BYO key)
EU compliance corpus across 8 frameworks (NIS2, DORA, AI Act, ISO 27001 + more) via MCP.
Cited, standards-aware compliance overlay for AI assistants (ISO, NIST, FedRAMP, IRAP), over MCP.
Related MCP Servers
- AlicenseBqualityCmaintenanceEnables cyber defenders to query ATT\&CK techniques, list tactics, map incidents to techniques, look up threat actor groups and mitigations, all via the MCP protocol.5MIT
- AlicenseAqualityFmaintenanceQuery Estonian cybersecurity data -- regulations, decisions, and requirements from RIA/CERT-EE -- directly from any MCP-compatible client.6Apache 2.0
- AlicenseAqualityFmaintenanceEnables querying Portuguese cybersecurity regulations, guidance, advisories, and frameworks from CNCS via MCP-compatible clients.6Apache 2.0
- AlicenseAqualityFmaintenanceEnables querying Swiss cybersecurity regulations, guidance, advisories, and frameworks from NCSC.ch via any MCP-compatible client.6Apache 2.0