MCP servers tagged grc
25 live MCP servers tagged "grc", ranked by trust score. Tags come from package metadata and repository topics, so this list covers servers across every category that work with grc.
Fedramp Docs MCP
MCP Documentation Server Using the Official FedRAMP/docs Repo
Probo
Open source solutions for SOC2, GDPR, and ISO27001
server-scf
MCP server for the SCF Controls Platform — security compliance controls, frameworks, evidence, and risk management for AI agents
Guardian Agent
Local workstation and network security with ContextCypher diagrams, threat analysis and GRC. Use standalone or through scoped MCP, CLI and HTTP interfaces. Windows, macOS and Linu…
Secure Sdlc Agents
A team of Claude Code sub-agents that enforce security across the full SDLC, from ASVS requirements and threat modelling to SAST triage, IaC review, compliance attestation and rel…
Keelgrc
Model Context Protocol server for the Keel GRC API: drive your compliance program from Claude, Cursor, or any MCP client.
MCPServers
MCP Servers for BlockChain, Cyber Security and AI Automation A cutting-edge Model Context Protocol (MCP) server infrastructure designed to power the next generation of decentraliz…
Risk Control Kg
Open-source compliance knowledge graph & AI governance harness. Eliminates LLM hallucinations in risk audits using graph-grounded reasoning, 2D semantic crosswalks, NLI cross-enco…
Coregrc CLI
Core GRC from your terminal: third-party risk, privacy policies, cookie consent, privacy rights and website accessibility tools, using your existing Core GRC permissions. More inf…
OmniSec
O OmniSec é um SOC autônomo orquestrado por IA (Swarm). Integra agentes especializados, detecção, sandbox, inteligência de ameaças, playbooks de resposta a incidentes, ferramentas…
Milstdlint
Lint documents against MIL-STD / DoD formatting and classification-marking rules.
Gsafinder
GSA Schedule opportunity surveyor — SAM.gov + eBuy + FedConnect
Ewcorr
Correlate electronic-warfare event logs by time/frequency/bearing to cluster emitters.
Marq
Universal cyber assistant: ~80 audited Kali tools + an expert skills library, driven by any model over MCP or direct run
Compliance Atlas
Condensed, cross-walked reference for SOC2, ISO 27001, NIST CSF/800-53/800-171, CMMC, GDPR, CCPA, HIPAA, PCI DSS, EU AI Act
Sekit Grc Skills
Open-source GRC skills for consultants using Sekit across Claude, ChatGPT, and Codex
Audit Lens
AuditLens: The impeccable, agentic compliance engine. Transform evidence into audit-ready interactive workspaces with AI. Support for ISO 27001, SOC 2, HIPAA, and more.
Vendorvet
Third-party / vendor risk questionnaires with SBOM cross-ref
Dpiaforge
DPIA and EU AI Act impact-assessment generator
Frameworkmap
Crosswalk controls across NIST, ISO 27001, SOC 2, CMMC, PCI
Auditrail
Tamper-evident audit-log aggregator with hash-chained attestation
Compliance Evidence MCP
MCP server exposing SOC 2 / ISO 27001 control evidence to AI agents, with the authorization boundary enforced in the server rather than the prompt
S3sniff
Flag risky cloud-bucket ACLs/policies from a listing or policy JSON
Senyar
Working register for Qatar's National Information Assurance Standard v2.1 with an ISO 27001 and NIST CSF 2.0 crosswalk, PDPPL obligations and an MCP server
Thoropass
Thoropass — independent third-party profile of a public API surface, by API Evangelist. Thoropass is an auditor-led, AI-powered compliance and audit automation platform that combi…