select_compliance_frameworks
Select compliance frameworks for a model, system, or tag to activate them for gap analysis and reporting. For models, auto-maps controls to requirements and suggests new entities for gaps.
Instructions
Select (activate) compliance frameworks at a chosen scope. Requires PRO tier. Mutating.
Discover valid ids with list_compliance_frameworks (or add a custom one via import_compliance_framework); view the resulting gap analysis with get_compliance_report at the same scope. Re-calling replaces the scope's framework selection.
scope selects the target and how scope_id is read:
"model"— a single threat model (scope_id= model id). Activating a framework also kicks off background auto-remediation: it auto-maps existing controls to requirements, excludes non-applicable requirements by taxonomy, and suggests/applies new entities for the remaining gaps. The response includesauto_remediate_jobs, which run and complete on their own; re-trigger later withauto_remediate_complianceif the model changes."system"— a System, i.e. a group of related threat models (scope_id= system id). Sets the system's active frameworks for portfolio-level compliance reporting."tag"— a tag cohort (scope_id= tag id). Records the frameworks against the tag AND propagates them to every member model, making the tag a compliance scope (e.g. an audit boundary) spanning several models.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| scope | Yes | target boundary — "model", "system", or "tag". | |
| scope_id | Yes | id of the model, system, or tag selected by ``scope``. | |
| framework_ids | Yes | comma-separated framework ids (e.g. "asvs-4.0,nist-csf"). | |
| server_version | Yes |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
No arguments | |||