@cloudcraftwithfranck/govcloud-mcp

An MCP (Model Context Protocol) server providing 22 AI-powered tools for DoD/FedRAMP cloud engineering. Built for Claude Desktop, Cursor, VS Code, and any MCP-compatible AI client.

What It Does

Stop googling NIST controls and Iron Bank image paths. This server puts government cloud engineering knowledge directly into your AI assistant — compliance analysis, architecture design, Platform One Big Bang configuration, DevSecOps pipelines, and ATO documentation.

Grounded in Official Microsoft Sources

Unlike generic AI tools, this MCP server fetches content directly from Microsoft's official repositories at runtime:

• Azure/Enterprise-Scale — The canonical ALZ reference implementation maintained by Microsoft's Azure engineering team. Policy definitions, architecture patterns, and landing zone templates are fetched live and injected as grounding context into every relevant tool call.

• Policy Definitions — Real Azure Policy definition names and IDs from the official Enterprise Scale repository, not from training data. Always current.

• Architecture Patterns — CAF-aligned design principles from the source of truth. Management Group hierarchies, subscription topologies, and hub-spoke network designs reference the same patterns Azure engineers use internally.

When you ask for a landing zone design or control narrative, the response is grounded in the same repository that powers the Azure Landing Zone Accelerator — not in static training data. Responses include an attribution footer linking to the source.

Quick Start

Prerequisites

• Node.js 18+

• Anthropic API key (get one here)

Install

npm install -g @cloudcraftwithfranck/govcloud-mcp

Or run without installing:

npx @cloudcraftwithfranck/govcloud-mcp

Configure Claude Desktop

Add to ~/Library/Application Support/Claude/claude_desktop_config.json (macOS) or %APPDATA%\Claude\claude_desktop_config.json (Windows):

{
  "mcpServers": {
    "govcloud": {
      "command": "npx",
      "args": ["-y", "@cloudcraftwithfranck/govcloud-mcp"],
      "env": {
        "ANTHROPIC_API_KEY": "sk-ant-your-key-here"
      }
    }
  }
}

Configure Cursor / VS Code

Add to your MCP settings:

{
  "govcloud": {
    "command": "npx",
    "args": ["-y", "@cloudcraftwithfranck/govcloud-mcp"],
    "env": {
      "ANTHROPIC_API_KEY": "sk-ant-your-key-here"
    }
  }
}

Tools Reference

Compliance (7 tools)

Architecture (4 tools)

Platform One (4 tools)

Pipeline (3 tools)

Documents (2 tools)

Example Prompts

Compliance:

"Analyze this Bicep template for FedRAMP High compliance" (paste template)

"Write an eMASS control narrative for IA-2(12) for our AKS-based system in Azure Government"

"Generate a POA&M for these compliance findings: missing MFA enforcement, no audit logging on Key Vault, public storage endpoint"

Architecture:

"Design an IL4 landing zone for a containerized mission app with AKS, Key Vault, and Azure SQL"

"What's different about configuring AKS in GCC High vs Azure Government?"

"Generate private endpoint configuration for Key Vault, Storage, and ACR at FedRAMP High"

Platform One:

"Validate this Big Bang values.yaml for IL4 compliance" (paste values)

"Look up the Iron Bank image for nginx and give me the Cosign verification command"

"Generate hardened Big Bang addon config for Keycloak at IL4"

Pipeline:

"Audit this GitLab CI pipeline for IL4 DevSecOps compliance" (paste .gitlab-ci.yml)

"Configure Cosign keyless signing for our GitHub Actions pipeline targeting registry1.dso.mil"

Documents:

"Write the system description section of our SSP for a FedRAMP High AKS system"

"Generate a Contingency Plan for our system with RTO 4 hours, RPO 1 hour, using AKS, Key Vault, and Azure SQL"

Resources

The server also exposes these resources via the govcloud:// URI scheme:

• govcloud://nist-800-53-rev5 — NIST 800-53 Rev 5 control catalog

• govcloud://azure-compliance-map — Azure service → NIST control mapping with IL availability

• govcloud://ironbank-registry — Iron Bank image catalog with registry paths

• govcloud://fedramp-baselines — FedRAMP Low/Moderate/High and DoD IL control lists

Environment Variables

Development

git clone https://github.com/cloudcwfranck/govcloud-mcp
cd govcloud-mcp
npm install
cp .env.example .env
# Add your ANTHROPIC_API_KEY to .env
npm run build
npm start

License

MIT — see LICENSE

Built by CloudCraft with Franck — Azure government cloud engineering for the DoD community.