1. Conduid
  2. Security
  3. Nist Csf 2 MCP Server
MCP server · Security

Nist Csf 2 MCP Server

by · github.com/rocklambros/nist-csf-2-mcp-server

MCP server implementation for NIST Cybersecurity Framework 2.0

Unclaimed last commit 9 months ago security
InstallView source
55Fair

Scored 3 months ago · breakdown

About Nist Csf 2 MCP Server

Nist Csf 2 MCP Server is an MCP server published by rocklambros in the Security category: mCP server implementation for NIST Cybersecurity Framework 2.0. It has been installed 0 times through Conduid.

The repository has 52 stars and 8 forks, with the last commit 9 months ago. Six months or more without a commit doesn't mean the server is broken, but check the open issues (0) before depending on it in production.

Install

Install
npx nist-csf-2-mcp-server

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Ask AI

✦

Ask AI about Nist Csf 2 MCP Server

Powered by Claude · Grounded in docs

I know everything about Nist Csf 2 MCP Server. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

  • ·README presentNot checked yet.
  • ·License declaredNot checked yet.
  • ·Tests presentNot checked yet.
  • ·Dependencies pinnedNot checked yet.
  • ·No dynamic code executionNot checked yet.
  • !Scoped permissionsDoesn't declare a permission scope. Assume it can do anything its process can.

README

NIST CSF 2.0 Assessment Platform

Docker TypeScript MCP Tools

Complete NIST Cybersecurity Framework 2.0 implementation with professional assessment GUI and comprehensive MCP server. Built for cybersecurity professionals, CISOs, and AI integration.

🎯 740 assessment questions • 🛡️ Multi-tier security • 📊 Executive dashboards • 🤖 40+ MCP tools

🚀 Quick Start

Choose your deployment option based on your use case:

Option 1: Professional Assessment GUI (Recommended)

Perfect for: CISOs, Security Teams, Executive Presentations

git clone https://github.com/rocklambros/nist-csf-2-mcp-server.git
cd nist-csf-2-mcp-server/gui-platform
docker-compose up

Access Your Platform:

  • 🌐 Assessment Interface: http://localhost:3000
  • 📊 Executive Dashboard: Real-time progress and benchmarking
  • 🔧 Health Status: http://localhost:3001/health

Features:

  • Company-size aware question filtering
  • Persistent assessment sessions (pause/resume anytime)
  • Real-time executive dashboards with industry benchmarking
  • Professional PDF reports for board presentations

Option 2: MCP Server for AI Integration

Perfect for: Claude Desktop, ChatGPT, Technical Users

Claude Desktop Setup:

{
  "mcpServers": {
    "nist-csf": {
      "command": "sh",
      "args": ["-c", "docker run -i --rm ghcr.io/rocklambros/nist-csf-2-mcp-server:latest node dist/index.js 2>/dev/null"],
      "env": {"MCP_SERVER": "true"}
    }
  }
}

🎨 Assessment GUI Experience

Workflow

  1. Organization Setup (2 minutes): Name, size, industry → automatic question filtering
  2. Function Assessment (2-4 hours, resumable): Navigate NIST CSF functions with dual questions
  3. Executive Dashboard (Instant): Real-time results with industry comparison

Professional Features

  • Dual Question Types: Maturity rating + Implementation status per subcategory
  • Smart Filtering: 740 total questions → relevant subset based on organization size
  • Industry Benchmarking: Compare against similar organizations in your sector
  • Executive Ready: Professional styling suitable for CISO and board presentations

🤖 MCP Tools (40 Tools)

Assessment & Scoring

  • start_assessment_workflow - Begin comprehensive assessment
  • persistent_comprehensive_assessment - Resume assessments across sessions
  • assess_maturity - Calculate maturity scores across NIST functions
  • calculate_risk_score - Risk assessment with heat map generation
  • get_assessment_questions - 740-question bank with size filtering

Planning & Implementation

  • generate_gap_analysis - Current vs target state analysis
  • create_implementation_plan - Phased roadmap with timelines
  • generate_priority_matrix - Effort/impact prioritization
  • estimate_implementation_cost - Financial planning and ROI analysis
  • track_progress - Implementation progress monitoring

Reporting & Export

  • generate_executive_report - Board-ready executive summaries
  • generate_dashboard - Real-time dashboard data
  • export_data - Multi-format data export (PDF, CSV, Excel)
  • generate_compliance_report - Multi-framework compliance mapping

Complete Tool Documentation with Examples →

📊 Technical Specifications

  • Framework: Complete NIST CSF 2.0 (6 functions, 34 categories, 185 subcategories)
  • Questions: 740 across 4 dimensions (Risk, Maturity, Implementation, Effectiveness)
  • Performance: <100ms response times, 100+ concurrent users
  • Security: Multi-tier authentication (development → API key → OAuth 2.1)
  • Integration: MCP protocol, REST API, WebSocket real-time updates

🔧 Advanced Configuration

Security Modes

# Development
AUTH_MODE=disabled docker-compose up

# Production
AUTH_MODE=oauth OAUTH_ISSUER=https://your-provider.com docker-compose up

Performance Options

# Monitoring enabled
ENABLE_MONITORING=true docker-compose up

# Development with hot reload
docker-compose -f docker-compose.dev.yml up

📚 Documentation

🆘 Support

📋 License

MIT License

Enterprise-grade cybersecurity assessment platform for NIST CSF 2.0 compliance, executive reporting, and professional security evaluation.

README mirrored from the source repository 3 months ago. The original is authoritative.

Questions

About Nist Csf 2 MCP Server

How do I install Nist Csf 2 MCP Server?

Run npx nist-csf-2-mcp-server, then add the server to your MCP client's configuration. Conduid has recorded 0 installs, so the command is known to work with current clients.

Is Nist Csf 2 MCP Server safe to use with an AI agent?

Its trust score is 55 out of 100 (fair). It passes 0 of 1 static security checks; the failures are listed above. It has no ConduID identity yet, so agent calls to it are not receipted.

Is Nist Csf 2 MCP Server still maintained?

The last commit was 9 months ago, with 0 open issues. That's long enough that you should check whether the maintainer is responding to issues before depending on it.