io.github.CSOAI-ORG/oscal-generator-mcpfinance

oscal-generator-mcp

Synced · awaiting check

Generate machine-readable NIST OSCAL packages (SSP/component-definition) + FedRAMP RFC-0024

Install

claude mcp add oscal-generator-mcp -- uvx oscal-generator-mcp

Our take

A genuine surprise from a namespace we otherwise flagged wholesale: a real NIST OSCAL generator that produces valid SSP and component-definition JSON with readiness scoring, shipped with tests, an honest README, no scorecard badge, no pricing, no metering, and no network calls. Two caveats: it comes from the MEOK/CSOAI operator whose 300+ other listings we flagged for self-issued trust signals, and its ed25519 "document signing" uses a hardcoded development seed — treat the signatures as decoration, not attestation.

reviewed by hand · 2026-07-05

Something wrong or dead here? Report it

Verification record

last verified: yesterday
in registry since: 2026-06-30