About Hackathon 12 MCP Compliance
Hackathon 12 MCP Compliance is an MCP server published by grafana in the Developer Tools category: an mcp server to support compliance operations in AI agents.
The repository has 4 stars and 1 forks, with the last commit 3 months ago. Recent commit activity is the strongest signal that reported issues will get attention.
Install
git clone https://github.com/grafana/hackathon-12-mcp-complianceThis server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.
Ask AI
Ask AI about Hackathon 12 MCP Compliance
Powered by Claude · Grounded in docs
Security checks
Static checks derived from the repository 7 days ago. Heuristics on the source, not an audit.
- ✓README presentThe repository ships documentation.
- !License declaredNo license file. Legally you have no right to use it in a product.
- !Tests presentNo tests found. Behaviour changes may go unnoticed between versions.
- ✓Dependencies pinnedA lockfile pins dependency versions.
- ✓No dynamic code executionSource scan found no eval, dynamic Function, or shell execution.
- !Scoped permissionsDoesn't declare a permission scope. Assume it can do anything its process can.
README
MCP Compliance
A project for compliance that provides CLI tools and an MCP server for agents to interact with compliance data.
Overview
The FedRAMP Compliance MCP Server is designed to support users throughout their compliance journey, which consists of three main phases:
- Understanding - Learning about security controls, their requirements, and how they apply to your system
- Implementing - Designing and implementing controls in your system to meet compliance requirements
- Evidencing - Collecting and documenting evidence to demonstrate compliance with controls
This project provides tools for working with FedRAMP compliance data, including:
- CLI tools for processing and querying FedRAMP baseline data
- An MCP server that exposes compliance data to LLM agents
Roadmap
This project is missing the automation of evidence collection. There needs to be a way to securely store what may be sensitive data in a shared location that provides the proper ACLs and data protection. This is intended to be added in a future hackathon or additional roadmap time.
Easy Button Quick Start
For the quickest setup:
# Create the directory for the MCP compliance binary
mkdir -p ~/.mcp-compliance/bin
# Add to your PATH (add this to your .bashrc or .zshrc for persistence)
export PATH=$PATH:~/.mcp-compliance/bin
# Clone the repository
git clone https://github.com/grafana/hackathon-12-mcp-compliance.git
cd hackathon-12-mcp-compliance
# Build and deploy locally
make deploy-local
Now you can configure your agent (Cursor or Claude Desktop) to use the MCP compliance server. See the Getting Started Guide for configuration details.
Documentation
- Getting Started Guide - Instructions for setting up and using the project
- Concept of Operations - Detailed explanation of system architecture and data flow
MCP Server
The MCP server provides the following tools for LLM agents:
get_control: Get detailed information about a specific controlget_control_family: Get all controls in a specific familylist_control_families: List all control families in a programsearch_controls: Search for controls by keywordget_control_evidence_guidance: Get detailed guidance for evidence about a specific control
Data Sources
The FedRAMP baseline files are sourced from the official GSA FedRAMP Automation GitHub repository:
README fetched from the repository 7 days ago. The original is authoritative.