Energy & Utilities Security MCP

Energy sector cybersecurity regulatory intelligence via Model Context Protocol — NERC CIP, FERC, TSA Pipeline, NRC Nuclear, NISTIR 7628 Smart Grid, EU Network Code on Cybersecurity, NIS2, ENTSO-E, ACER, IEC 62351, IEEE 1686, DNV, IEA, CIGRE, and more.

---

What This MCP Covers

Category	Items	Scope
NERC CIP Standards	CIP-002 through CIP-014, sub-requirement level	US bulk electric system reliability
FERC Orders	Cybersecurity-related orders and requirements	US federal energy regulatory
TSA Pipeline Security Directives	SD-01 (1E), SD-02 (2F) and related requirements	US pipeline cybersecurity
NRC Nuclear (10 CFR 73.54)	Nuclear facility cybersecurity controls	US nuclear power plants
NISTIR 7628 Smart Grid	252 controls across 19 families	Smart grid cybersecurity guidelines
NIST SP 800-82r3	26 controls	ICS/OT security for energy sector
EU Network Code on Cybersecurity	EU electricity sector requirements	EU cross-border electricity
NIS2 Energy Sector Annex	Energy-specific obligations	EU critical infrastructure
ENTSO-E Cybersecurity Guidelines	TSO guidance and procurement recommendations	EU transmission operators
ACER Energy Cybersecurity Guidance	Regulator guidance documents	EU energy regulation
IEC 62351	Power systems communication security (summaries)	International standard
IEEE 1686	Substation IED security (summaries)	International standard
DNV Standards	Offshore and maritime energy cybersecurity	International classification
IEA Cyber Resilience	Electricity system resilience guidance	International policy
CIGRE Working Groups	D2, B5, C2 technical references	International engineering

Data Statistics

Metric	Count
Standards	199
Controls	1,393
Cross-framework mappings	2,581
Threat scenarios	154
Smart grid controls	252
Total records	4,579
Database size	~2 MB

Jurisdictions (25)

US, EU, UK, Australia, Canada, Japan, India, Saudi Arabia, Singapore, South Korea, China, Germany, France, Netherlands, Spain, Italy, Brazil, Chile, Colombia, Israel, Mexico, Poland, South Africa, UAE.

Quick Start

npm (stdio transport)

npx @ansvar/energy-security-mcp

Add to your MCP client configuration:

{
  "mcpServers": {
    "energy-security": {
      "command": "npx",
      "args": ["-y", "@ansvar/energy-security-mcp"]
    }
  }
}

HTTP (Streamable HTTP transport)

POST https://mcp.ansvar.eu/energy-security/mcp

No authentication required. Public endpoint.

Tools (14)

Tool	Description
get_nerc_cip	Retrieve a specific NERC CIP standard and its requirements
search_nerc_controls	Full-text search across NERC CIP controls by keyword or severity
check_cip_compliance	List CIP requirements for a given BES impact category (high/medium/low)
get_ferc_order	Retrieve a specific FERC cybersecurity order by number
search_ferc_requirements	Search FERC cybersecurity requirements by keyword
get_pipeline_directive	Retrieve a TSA Pipeline Security Directive by identifier
get_nuclear_control	Retrieve NRC 10 CFR 73.54 nuclear cybersecurity controls
search_smart_grid	Search NISTIR 7628 smart grid cybersecurity controls
get_grid_threat	Retrieve threat scenarios for energy subsectors
get_energy_regulation	Retrieve any energy cybersecurity regulation by identifier
search_energy_controls	Cross-jurisdiction search across all energy security controls
map_energy_to_framework	Map an energy security control to other frameworks (NIST 800-53, IEC 62443, ISO 27001:2022)
list_sources	List all data sources with item counts and freshness dates
get_energy_standard	Retrieve a specific standard by its database ID

Full tool documentation with parameters, return values, and examples: TOOLS.md

Documentation

• TOOLS.md — Full tool reference with parameters and examples
• COVERAGE.md — What's included, what's not, data freshness
• sources.yml — Data provenance and retrieval methods
• DISCLAIMER.md — Usage terms and liability
• PRIVACY.md — Data collection (none) and privacy architecture
• CHANGELOG.md — Version history

Part of the Ansvar MCP Ecosystem

This MCP is one of 276+ servers in the Ansvar compliance intelligence platform. Explore the full catalog at ansvar.ai/mcp.

License

Apache-2.0 — see LICENSE.

Important: This MCP provides reference data for cybersecurity compliance research. It is not a substitute for professional security assessment. See DISCLAIMER.md.