MCP Server for OSCAL
Related Servers
Alternatives to MCP Server for OSCAL
No user-submitted related servers found.
Related Servers
- AlicenseAqualityFmaintenanceProvides AI assistants with specialized tools to interact with NIST's Open Security Controls Assessment Language (OSCAL) framework. It enables agents to retrieve schemas, explore models, and generate valid OSCAL documentation for security compliance automation.4052Apache 2.0
- AlicenseNot gradedqualityDmaintenanceProvides comprehensive access to NIST cybersecurity frameworks and controls, enabling AI assistants and applications to query, analyze, and manage NIST security controls through a standardized interface.10MIT
- AlicenseAqualityDmaintenanceProvides structured access to the full NIST cybersecurity catalog, including SP 800/1800 publications, security controls, CSF 2.0, and the NVD database. It enables AI assistants to search and retrieve cybersecurity standards, CVEs, and compliance guidance directly from a local SQLite index.201MIT
- AlicenseNot gradedqualityBmaintenanceEnables AI assistants and IDEs to work with the AGNTCY Agent Directory, providing tools for validating, publishing, searching agent records, and navigating OASF taxonomies.4Apache 2.0
- AlicenseAqualityAmaintenanceIndependent, read-only MCP servers for FINOS AI Governance Framework (24 risks, 25 controls), Common Domain Model 7.8.0 (767 types, 1,143 JSON schemas), and FDC3 (19 intents). Explore controls, validate trade JSON, and discover desktop actions using local Python/uvx stdio tools with offline standards data. v0.3.1. Not affiliated with or endorsed by FINOS.111Apache 2.0
- AlicenseNot gradedqualityCmaintenanceEnables AI agents to inspect OSCAL SSP packages and findings, evaluate completeness and evidence, triage findings, draft remediation plans, request retests, and propose fix pull requests through scoped, audited MCP tools while keeping approval and closure decisions human-only.MIT
TDQS
Scored across 46 tools
Tools generally follow clear model/action families, and descriptions explain the intended list-for-selection vs query-for-details workflow. A few parallel names such as list_catalogs/query_catalog and list_component_definitions/list_components could still invite misselection, but they are mostly distinguishable.
Most names are snake_case and verb-first, but the surface mixes list_, query_, get_, and search_ patterns with some singular/plural mismatches like list_poams vs query_poam. Awkward names like list_assessment_results_results and the unverbed about reduce predictability.
46 tools is heavy for an MCP server and creates a large selection surface. Although OSCAL is broad, many list/query/child tools could be consolidated through generic document and child-retrieval interfaces.
The server covers major OSCAL models, child-element navigation, schema and constraint inspection, validation, documentation search, and resource listing. Minor gaps remain around XML validation and write/update operations, but the read-oriented surface is largely complete.