get_control_requirements

Retrieve FedRAMP compliance requirements mapped to specific NIST security controls, including KSI items and FRMR references for regulatory analysis.

Instructions

Get all FedRAMP requirements mapped to a specific NIST control. Returns KSI items and FRMR requirements that reference the control.

Input Schema

TableJSON Schema

Name	Required	Description	Default
`control`	Yes	NIST control ID (e.g., AC-2, SC-13, IA-5)

Implementation Reference

src/tools/get_control_requirements.ts:32-66 (handler)

The execute function implementing the tool logic: fetches control mappings and KSI items, enriches with KSI data, deduplicates by sourceId, and returns formatted requirements.

execute: async (input) => {
  const mappings = listControlMappings({ control: input.control });
  const ksiItems = getKsiItems();

  // Create a lookup for KSI items
  const ksiLookup = new Map(ksiItems.map((item) => [item.id, item]));

  const requirements: ControlRequirement[] = mappings.map((mapping) => {
    const ksiItem = ksiLookup.get(mapping.sourceId);
    return {
      sourceId: mapping.sourceId,
      source: mapping.source,
      control: mapping.control,
      enhancements: mapping.controlEnhancements,
      path: mapping.path,
      title: ksiItem?.title,
      description: ksiItem?.description,
      theme: ksiItem?.category,
    };
  });

  // Deduplicate by sourceId
  const seen = new Set<string>();
  const unique = requirements.filter((req) => {
    if (seen.has(req.sourceId)) return false;
    seen.add(req.sourceId);
    return true;
  });

  return {
    control: input.control.toUpperCase(),
    total: unique.length,
    requirements: unique,
  };
},

src/tools/get_control_requirements.ts:18-22 (schema)

Zod input schema defining the 'control' parameter for the tool.

const schema = z.object({
  control: z
    .string()
    .describe("NIST control ID (e.g., AC-2, SC-13, IA-5)"),
});

src/tools/register.ts:24-53 (registration)

The registerTools function registers the getControlRequirementsTool (imported at line 6) with the MCP server via registerToolDefs.

export function registerTools(server: McpServer): void {
  registerToolDefs(server, [
    // Document discovery
    listFrmrDocumentsTool,
    getFrmrDocumentTool,
    listVersionsTool,
    // KSI tools
    listKsiTool,
    getKsiTool,
    filterByImpactTool,
    getThemeSummaryTool,
    getEvidenceExamplesTool,
    // Control mapping tools
    listControlsTool,
    getControlRequirementsTool,
    analyzeControlCoverageTool,
    // Search & lookup tools
    searchMarkdownTool,
    readMarkdownTool,
    searchDefinitionsTool,
    getRequirementByIdTool,
    // Analysis tools
    diffFrmrTool,
    grepControlsTool,
    significantChangeTool,
    // System tools
    healthCheckTool,
    updateRepositoryTool,
  ]);
}

FedRAMP Docs MCP Server