io.github.awslabs/mcp-server-for-oscaldev-tools

MCP Server for OSCAL

Verified · yesterday

AI agent tools for Open Security Controls Assessment Language (OSCAL)

Install

claude mcp add mcp-server-for-oscal -- uvx mcp-server-for-oscal

Requires: BEDROCK_MODEL_ID, OSCAL_KB_ID, AWS_PROFILE, AWS_REGION, LOG_LEVEL

Our take

AWS Labs server that gives agents bundled, hash-verified NIST OSCAL schemas and reference content, fixing the real problem that LLMs hallucinate OSCAL structure. Thoughtful security posture (stdio-only by default, build-time content manifests, no remote calls) plus a bonus standalone Strands-based OSCAL agent. Active since Dec 2025 with CI and PyPI releases; niche by design. For GRC/compliance engineers doing compliance-as-code — of little use to anyone else.

reviewed by hand · 2026-07-05

Something wrong or dead here? Report it

Verification record

last verified: yesterday
github stars: 47
last commit: 13 days ago
archived: no
license: Apache-2.0
in registry since: 2026-04-02

github.com/awslabs/mcp-server-for-oscal