Skip to main content
Glama
MarkAC007

mcp-server-scf

by MarkAC007

scf_scope_framework

Bulk-scope all controls in a framework to your organization, creating scoped-control entries for each mapped control. Requires org UUID and framework slug.

Instructions

Bulk-scope every control mapped to a framework into the organization (write — editor+ role). Creates a scoped-control entry for each control in the framework.

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
org_idYesOrganization UUID — obtain from scf_list_organizations
framework_idYesFramework slug to scope (e.g., 'nist-800-53-r5') — obtain from scf_list_frameworks

Schema Changelog

Changes observed during successful MCP inspections. Dates show when Glama detected each change.

  1. First observedv1.7.0

TDQS

A4/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already indicate a mutating (readOnlyHint=false), non-destructive operation. The description adds the editor+ role requirement and clarifies the effect is creating scoped-control entries, but it does not disclose idempotency, duplicate handling, or whether existing scoped controls are affected. No contradiction with annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is two tight sentences: one states the bulk-scope action plus role, the other states the outcome. Every word earns its place, and the key behavioral detail is front-loaded.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a simple two-parameter write tool with full schema and annotations, the description provides the essential context: what gets scoped, what entries are created, and who is allowed to run it. It doesn't explain re-run behavior or output, but that is a minor gap since there is no output schema to reconcile.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, and both parameters already have descriptive text ('Organization UUID' and 'Framework slug to scope'). The tool description adds no parameter-level detail beyond general context, so the baseline 3 applies.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description uses a specific verb ('Bulk-scope'), names the resource ('every control mapped to a framework'), and states the concrete outcome ('Creates a scoped-control entry for each control'). This clearly differentiates it from sibling tools like scf_update_scoped_control or scf_list_scoped_controls.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description gives clear usage context: use this when you want to scope all controls in a framework into the organization at once, and it notes the editor+ permission requirement. It doesn't explicitly name alternatives or say when not to use it, so it stops short of a 5.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Install Server

Other Tools

Latest Blog Posts

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/MarkAC007/mcp-server-scf'

If you have feedback or need assistance with the MCP directory API, please join our Discord server