MCP Server for OSCAL
Related Servers
Alternatives to MCP Server for OSCAL
No user-submitted related servers found.
Related Servers
- AlicenseAqualityFmaintenanceProvides AI assistants with specialized tools to interact with NIST's Open Security Controls Assessment Language (OSCAL) framework. It enables agents to retrieve schemas, explore models, and generate valid OSCAL documentation for security compliance automation.4052Apache 2.0
- AlicenseNot gradedqualityDmaintenanceProvides comprehensive access to NIST cybersecurity frameworks and controls, enabling AI assistants and applications to query, analyze, and manage NIST security controls through a standardized interface.10MIT
- AlicenseAqualityDmaintenanceProvides structured access to the full NIST cybersecurity catalog, including SP 800/1800 publications, security controls, CSF 2.0, and the NVD database. It enables AI assistants to search and retrieve cybersecurity standards, CVEs, and compliance guidance directly from a local SQLite index.201MIT
- AlicenseNot gradedqualityAmaintenanceEnables AI assistants and IDEs to work with the AGNTCY Agent Directory, providing tools for validating, publishing, searching agent records, and navigating OASF taxonomies.3Apache 2.0
- AlicenseAqualityBmaintenanceEnables AI agents to safely query FINOS data standards with typed, read-only tools for AIGF risks and controls, CDM type and validation, and FDC3 intents and context schemas.11Apache 2.0
- AlicenseNot gradedqualityCmaintenanceEnables AI agents and builders to run local, audit-traceable governance assessments, including an A³ scorecard, ISO/IEC 42001 and NIST evidence templates, compliance checklists, passport lookup, and sensitive-text screening.MIT
TDQS
Scored across 40 tools
The list_X / query_X / get_X pattern is mostly clear, but there is genuine overlap: list_capabilities, list_components, and query_component_definition all surface Capabilities/Components, and get_capability duplicates query_component_definition's by_uuid path. Similarly, list_X document tools and query_X tools retrieve the same underlying documents, so boundaries blur.
The dominant verb_noun convention (list_ssps, query_catalog, get_capability, validate_oscal_file) is applied predictably, including for child-element tools. Minor deviations like the bare 'about' and the inverted 'text_search_oscal' / 'get_oscal_schema' forms are readable but slightly off-pattern.
40 tools is heavy, though the breadth of OSCAL (8+ model types with sub-elements) partially justifies it. The list_X and query_X pairs for every model feel redundant and could be consolidated, pushing the surface larger than strictly necessary.
Coverage is strong for a read/query/validate server: listing, querying, child-element access, schema retrieval, full-text search, documentation, and multi-level validation are all present across models. The main gap is the absence of any create/update/delete operations, though this appears to be an intentionally read-only surface.