OSCAL Tools

소개

This Model Context Protocol (MCP) server provides essential tools for AI assistants (such as Claude, Cline, and Kiro) to effectively work with NIST's Open Security Controls Assessment Language (OSCAL). Designed to address the challenge of inconsistent results from AI agents when implementing OSCAL proofs-of-concept, this server offers a robust set of functionalities. It enables automated security governance, risk, and compliance workflows by offering structured access to OSCAL models, schemas, community resources, and authoritative documentation.

주요 기능

• Retrieve available OSCAL model types with descriptions, layers, and status.
• 1 GitHub stars
• Get JSON or XSD schemas for current GA releases of individual OSCAL models.
• Query authoritative OSCAL documentation using Amazon Bedrock Knowledge Base (requires user setup).
• Access a curated collection of OSCAL community resources from Awesome OSCAL.

사용 사례

• Implementing OSCAL proofs-of-concept and demonstrating value to business stakeholders.
• Minimizing inconsistent results from AI agents/LLMs when processing OSCAL-related tasks.
• Automating security governance, risk, and compliance workflows with AI assistance.