Rawshan
Server Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
No arguments | |||
Instructions
Guidance the server publishes about itself, which clients place ahead of the tool catalog so the model reads it before choosing anything.
This server publishes no instructions, or was last inspected before Glama recorded them.
Capabilities
Features and capabilities supported by this server
Protocol revision2025-11-25
| Capability | Details |
|---|---|
| tools | {
"listChanged": false
} |
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
| ecc_overviewA | Summary of the NCA Essential Cybersecurity Controls (ECC-2:2024): the four domains, counts of subdomains and controls, and the official sources. Start here. |
| ecc_list_domainsA | List the four ECC domains with their codes, names and the number of subdomains and controls in each. |
| ecc_list_subdomainsA | List the 28 ECC subdomains with their codes, titles, objectives and control counts. Optionally limited to one domain. |
| ecc_get_controlA | Get a control by ID (for example "2-8-3", "2.8.3" or "283"): its own-words summary, subdomain, domain, official page, and ISO 27001 and NIST CSF 2.0 mapping. Summaries are this project's wording; the official text is at the page given. |
| ecc_search_controlsA | Search control summaries in English and Arabic and by ID. Optionally filter by domain code. Paged. |
| ecc_crosswalkA | Map in either direction at the subdomain level. framework "ecc" with a subdomain code ("2-8") returns its ISO 27001 and NIST CSF 2.0 references. framework "iso27001" with a reference ("A.8.24") returns the ECC subdomains mapped to it. framework "csf2" with a category ("PR.DS") returns the ECC subdomains mapped to it. The mapping is this project's analysis, not an official NCA mapping. |
| ecc_pdpl_obligationsC | List the core obligations from the Saudi Personal Data Protection Law that sit alongside the ECC. Optionally filter by words. |
| ecc_familiesA | List the NCA control families, who each applies to, and which is the baseline, to help decide which NCA controls apply to an entity. |
| ecc_readiness_reportA | Evaluate an assessment object saved by the web app (schema "ecc-register/1"): overall and per-domain readiness, a maturity band, status counts and a prioritized gap list. Paged over gaps. |
| ecc_sourcesA | List the official sources this register is built on, with links, and the provenance note that separates the official text from this project's own work. |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
No prompts | |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
No resources | |
TDQS
Scored across 10 tools
Each tool targets a distinct resource or action: get_control by ID vs search_controls, crosswalk for framework mapping, readiness_report for evaluation. There is mild overlap between ecc_overview, ecc_list_domains, ecc_list_subdomains, and ecc_families (all list-like navigational tools), but descriptions clarify their different scopes and output shapes.
All tools share a consistent ecc_ snake_case prefix with predictable names, and most follow a clear verb_noun or noun pattern (get_control, list_domains, search_controls). A few are bare nouns (ecc_overview, ecc_crosswalk, ecc_families, ecc_sources) that don't encode an action, a minor deviation but still readable and grouping-consistent.
Ten tools is well-scoped for a regulatory reference/crosswalk and readiness server, with each tool covering a distinct layer (orientation, domains, subdomains, controls, mapping, PDP, families, report, sources). No redundant or filler tools appear.
The surface covers navigation, control lookup/search, ISO/NIST crosswalk, PDP obligations, family applicability, readiness assessment, and provenance — a solid lifecycle for a read-only reference domain. Minor gaps: crosswalk is subdomain-level only (no control-level mapping), and no direct list-controls-by-subdomain tool, though search can approximate it.