vmware-harden
<!-- mcp-name: io.github.vmware-skills/vmware-harden -->
# VMware-Harden
<a id="readme-overview"></a>
Turn VMware compliance checks into findings with visible coverage gaps.
English · [简体中文](README-CN.md)
Community-maintained · MIT · Not an official VMware/Broadcom product.
[](https://github.com/vmware-skills/marketplace/blob/main/assets/demos/vmware-skills-en.mp4)
Synthetic-data animation, not a live recording. [Watch the AI-narrated family introduction (~2 min)](https://github.com/vmware-skills/marketplace/blob/main/assets/demos/vmware-skills-en.mp4)
<a id="readme-capabilities-and-workflows"></a>
## Why use it?
- Scan supported baselines and vulnerability/build evidence.
- Track configuration drift in a local Twin.
- Separate remediation suggestions from remote execution.
<a id="readme-quick-start"></a>
## Get started
Install the published CLI and inspect its commands:
```sh
uv tool install "vmware-harden[collectors]==1.20.0"
vmware-harden --help
```
Requires uv and Python >=3.10. Configure targets and credentials locally before remote queries. [Setup guide](skills/vmware-harden/references/setup-guide.md).
For Claude Code and other host installation paths, see the [family portal](https://github.com/vmware-skills/marketplace).
<a id="readme-safety-and-audit"></a>
## Know the boundaries
Incomplete or unknown checks are not passes. Optional AI remediation advice can send findings to an external provider; review that data flow. Remote remediation is separate.
<a id="readme-mcp-configuration"></a> <a id="readme-troubleshooting"></a> <a id="readme-reference"></a>
## Go deeper
- [Capabilities](skills/vmware-harden/references/capabilities.md)
- [CLI reference](skills/vmware-harden/references/cli-reference.md)
- [Agent guardrails](skills/vmware-harden/references/agent-guardrails.md)
- [Detailed usage and architecture](skills/vmware-harden/references/detailed-guide.md)
- [MCP launch configuration](.mcp.json)
- [Canonical skill instructions](skills/vmware-harden/SKILL.md)
<a id="readme-companion-skills"></a>
Part of [VMware Skills](https://github.com/vmware-skills/marketplace): 15 skills, 14 MCP servers and one shared Policy library. If it helps your work, star the family portal.
<a id="readme-license"></a>
[Issues and feedback](https://github.com/vmware-skills/VMware-Harden/issues) · [MIT](LICENSE)
TDQS
Scored across 8 tools
Most tools have clearly distinct purposes: baselines, rules, scans, violations, drift, remediation, and STIG sync are separate concerns. The main ambiguity is between get_baseline_rules and list_stig_controls, since both can return rule/control lists for baselines, though the STIG-specific tool adds advanced_setting detail.
The naming pattern is mostly verb_noun and readable, with list_* for collections and get_* for specific lookups. Minor inconsistency exists between list_baselines and get_baseline_rules, plus scan_target and describe_stig_content_sync break the simple list/get prefix pattern, but the style is consistent enough to predict behavior.
Eight tools is well-scoped for a compliance scanning and remediation advisory server. Each tool covers a distinct part of the workflow from baseline discovery, rule preview, scanning, violation review, drift tracking, and remediation lookup without feeling padded or redundant.
The core lifecycle is covered: discover baselines, inspect rules, scan a target, list violations, inspect drift, and fetch remediation. Minor gaps exist—there is no tool to manage scan history, list targets, or generate remediation suggestions directly—but agents can work around these via the CLI or by treating this as a read-only reporting surface.