Skip to main content
Glama
SamuelDudley

ism-mcp

by SamuelDudley
OverviewSchemaSourceRelated ServersDiscussionsAdmin
Python
Local

ism_get

Read-only

Retrieve the full record for an ISM control by identifier, with details including title, control text, classification, and Essential Eight maturity flags. Supports flexible identifier formats and historical version lookups.

Instructions

Get the full record for one ISM control by identifier (e.g. ism-1781).

Identifier input is tolerant: ISM-1781, bare 1781, and legacy labels resolve to the canonical OSCAL id. Returns the control record with title, control text, section, topic, classification applicability, and Essential Eight maturity flags. Fails when nothing matches. Use ism_search or ism_applicable first when the identifier is unknown. Defaults to the active ISM version. Pass version (see ism_versions) for a historical one.

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
versionNo
identifierYes

Output Schema

TableJSON Schema
NameRequiredDescriptionDefault
labelYes
titleYes
topicYes
appliesYes
sectionYes
sort_idYes
updatedYes
versionYes
maturityYes
guidelineYes
identifierYes
descriptionYes
control_classYes
control_revisionYes

Schema Changelog

Changes observed during successful MCP inspections.

  1. Changed19 schema fields changedv1.1.1
    • addedInput schema / properties / version
      Added value: +{
+  "anyOf": [
+    {
+      "type": "string"
+    },
+    {
+      "type": "null"
+    }
+  ],
+  "default": null,
+  "title": "Version"
+}
    • addedOutput schema / $defs
      Added value: +{
+  "AppliesMap": {
+    "properties": {
+      "NC": {
+        "title": "Nc",
+        "type": "boolean"
+      },
+      "OS": {
+        "title": "Os",
+        "type": "boolean"
+      },
+      "P": {
+        "title": "P",
+        "type": "boolean"
+      },
+      "S": {
+        "title": "S",
+        "type": "boolean"
+      },
+      "TS": {
+        "title": "Ts",
+        "type": "boolean"
+      }
+    },
+    "required": [
+      "NC",
+      "OS",
+      "P",
+      "S",
+      "TS"
+    ],
+    "title": "AppliesMap",
+    "type": "object"
+  },
+  "MaturityMap": {
+    "properties": {
+      "ML1": {
+        "title": "Ml1",
+        "type": "boolean"
+      },
+      "ML2": {
+        "title": "Ml2",
+        "type": "boolean"
+      },
+      "ML3": {
+        "title": "Ml3",
+        "type": "boolean"
+      }
+    },
+    "required": [
+      "ML1",
+      "ML2",
+      "ML3"
+    ],
+    "title": "MaturityMap",
+    "type": "object"
+  }
+}
    • addedOutput schema / properties / applies
      Added value: +{
+  "$ref": "#/$defs/AppliesMap"
+}
    • addedOutput schema / properties / control_class
      Added value: +{
+  "title": "Control Class",
+  "type": "string"
+}
    • addedOutput schema / properties / control_revision
      Added value: +{
+  "anyOf": [
+    {
+      "type": "string"
+    },
+    {
+      "type": "null"
+    }
+  ],
+  "title": "Control Revision"
+}
    • addedOutput schema / properties / description
      Added value: +{
+  "title": "Description",
+  "type": "string"
+}
    • addedOutput schema / properties / guideline
      Added value: +{
+  "title": "Guideline",
+  "type": "string"
+}
    • addedOutput schema / properties / identifier
      Added value: +{
+  "title": "Identifier",
+  "type": "string"
+}
    • addedOutput schema / properties / label
      Added value: +{
+  "title": "Label",
+  "type": "string"
+}
    • addedOutput schema / properties / maturity
      Added value: +{
+  "$ref": "#/$defs/MaturityMap"
+}
    • removedOutput schema / properties / result
      Removed value: -{
-  "title": "Result",
-  "type": "string"
-}
    • addedOutput schema / properties / section
      Added value: +{
+  "title": "Section",
+  "type": "string"
+}
    • addedOutput schema / properties / sort_id
      Added value: +{
+  "anyOf": [
+    {
+      "type": "string"
+    },
+    {
+      "type": "null"
+    }
+  ],
+  "title": "Sort Id"
+}
    • addedOutput schema / properties / title
      Added value: +{
+  "title": "Title",
+  "type": "string"
+}
    • addedOutput schema / properties / topic
      Added value: +{
+  "title": "Topic",
+  "type": "string"
+}
    • addedOutput schema / properties / updated
      Added value: +{
+  "anyOf": [
+    {
+      "type": "string"
+    },
+    {
+      "type": "null"
+    }
+  ],
+  "title": "Updated"
+}
    • addedOutput schema / properties / version
      Added value: +{
+  "title": "Version",
+  "type": "string"
+}
    • changedOutput schema / required
      Previous value: -[
-  "result"
-]New value: +[
+  "version",
+  "identifier",
+  "label",
+  "title",
+  "control_class",
+  "guideline",
+  "section",
+  "topic",
+  "description",
+  "control_revision",
+  "updated",
+  "sort_id",
+  "applies",
+  "maturity"
+]
    • changedOutput schema / title
      Previous value: -"ism_getOutput"New value: +"ControlRecord"
  2. First observedv1.1.0

TDQS

A4.9/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint=true (safe read). Description adds: input tolerance (various formats), return fields (title, control text, etc.), failure on no match, defaults to active version, and version parameter for historical. No contradictions.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Four concise sentences. Front-loaded with purpose and input format. Efficiently covers behavior, defaults, and alternatives. No wasted words.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given output schema exists (signal indicates true) and annotations provide safety info, description adds all necessary context: input handling, output fields, failure mode, version defaults, and sibling guidance. Complete for a getter tool.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema has 0% description coverage, so description must compensate. It thoroughly explains identifier parameter (tolerant input, example, canonical ID). Version parameter is mentioned as optional with reference to ism_versions, but could provide more detail on format. Still largely covers key aspects.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

Description clearly states verb 'Get' and resource 'full record for one ISM control'. Identifies specific input ('by identifier') and gives example. Differentiates from siblings by recommending ism_search or ism_applicable when identifier is unknown.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly states when to use (known identifier) and when not to (unknown identifier, suggests alternatives). Mentions default behavior (active version) and optional parameter (version) with reference to ism_versions.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Deploy Server

Other Tools