Skip to main content
Glama
Ansvar-Systems

Security Controls MCP Server

map_frameworks

Map security controls between frameworks to identify satisfied requirements and gaps, using SCF as a common reference for compliance mapping and gap analysis.

Instructions

Map controls between two frameworks via SCF as a rosetta stone. Shows which target framework requirements are satisfied by source framework controls, and identifies gaps where no mapping exists. Useful for gap analysis and compliance mapping. Results are capped at 20 mappings; use source_control to filter to a specific control for detailed mapping. Returns 'not found' if either framework key is invalid. Typical response: ~1500-3000 tokens.

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
source_frameworkYesSource framework key - the framework you HAVE implemented (e.g., 'iso_27001_2022'). Use list_frameworks to discover keys.
source_controlNoOptional: filter to a specific source control ID (e.g., 'A.5.15' for ISO 27001, 'PR.AC-1' for NIST CSF) to see its specific mappings to the target framework.
target_frameworkYesTarget framework key - the framework you want to SATISFY (e.g., 'dora', 'nist_800_53_r5'). Use list_frameworks to discover keys.
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations provided, but description discloses key behaviors: result cap of 20, filter option for detailed mapping, error response on invalid keys, and typical response token size. Adequate for a read-only mapping tool.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Concise 4-sentence description: first sentence states purpose, second explains output, third gives use case and limitation, fourth provides error and size info. No redundant sentences.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Description explains what the tool returns (satisfied requirements, gaps, 'not found'), typical response size, and error handling. Lacks output schema but enough for an agent to understand the mapping output.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema covers 100% of parameters with descriptions. Description adds value by explaining the relationship between source_control and the result cap, providing usage context beyond schema definitions.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

Clearly states the tool maps controls between two frameworks using SCF, specifying it shows satisfied requirements and gaps. Distinguishes from siblings like get_framework_controls that list controls without cross-mapping.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Describes use case (gap analysis, compliance mapping) and provides specific guidance: results capped at 20, use source_control for detailed mapping, and error behavior for invalid keys. Lacks explicit comparison with sibling tools.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Install Server

Other Tools

Latest Blog Posts

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/Ansvar-Systems/security-controls-mcp'

If you have feedback or need assistance with the MCP directory API, please join our Discord server