{"name":"io.github.CSOAI-ORG/oscal-generator-mcp","slug":"csoai-org-oscal-generator-mcp","title":null,"description":"Generate machine-readable NIST OSCAL packages (SSP/component-definition) + FedRAMP RFC-0024","url":"https://mcp.market/server/csoai-org-oscal-generator-mcp","rating":null,"grade":"C","score":65,"certified":false,"status":"active","category":"other","tags":[],"presence":{"score":0,"stars":null,"forks":null,"downloads_week":null,"last_push_at":null,"license":"Apache-2.0"},"uptime":null,"claimed":false,"transport":"pypi","callable_via_gateway":false,"default_price_micros":0,"repository":null,"website":null,"version":"0.1.2","remotes":[],"packages":[{"registryType":"pypi","identifier":"oscal-generator-mcp","version":"0.1.2","runtimeHint":"python","transport":{"type":"stdio"}}],"tools":[{"name":"generate_component_definition","description":"Generate a NIST OSCAL Component Definition for a reusable component (e.g. an MCP server, a service).","write_action":false,"price_micros":0,"input_schema":null},{"name":"generate_protocol_package","description":"Generate ONE Ed25519-signed OSCAL Component Definition describing an entire protocol — every component (e.g. each Layer-0 bridge/MCP) mapped to its frameworks' NIST controls. Makes the whole protocol a machine-readable, signed, offline-verifiable compliance package. components: [{name, type?, frameworks[]}].","write_action":false,"price_micros":0,"input_schema":null},{"name":"generate_ssp","description":"Generate a NIST OSCAL System Security Plan (SSP) skeleton for a system. impact_level: low|moderate|high. controls: NIST 800-53 control ids (e.g. AC-2, AU-6); defaults to a baseline set.","write_action":false,"price_micros":0,"input_schema":null},{"name":"rfc0024_readiness","description":"Score readiness for FedRAMP RFC-0024 (machine-readable OSCAL packages, first deadline 30 Sep 2026).","write_action":false,"price_micros":0,"input_schema":null},{"name":"sign_oscal","description":"Ed25519-sign an OSCAL document (canonical JSON) → a cryptographically signed, offline-verifiable package. Satisfies the RFC-0024 signed-package requirement; same scheme as the CSOAI Compliance Passport.","write_action":false,"price_micros":0,"input_schema":null},{"name":"validate_oscal","description":"Validate an OSCAL document's structure (root model, uuid, metadata, oscal-version, control-implementation).","write_action":false,"price_micros":0,"input_schema":null},{"name":"validate_oscal_strict","description":"Strictly validate an OSCAL document against the standard community toolchain (oscal-compass/compliance-trestle's NIST-schema-derived models). If trestle isn't installed (pip install 'oscal-generator-mcp[validate]'), this gracefully falls back to the built-in structural validator and says so. A pass here = \"validates under the standard OSCAL toolchain\" — the credibility claim for the FedRAMP RFC-00","write_action":false,"price_micros":0,"input_schema":null},{"name":"verify_oscal_signature","description":"Verify an Ed25519 signature over an OSCAL document — offline, no account. Returns valid True/False.","write_action":false,"price_micros":0,"input_schema":null}],"scan":{"score":65,"grade":"C","scanned_at":"2026-09-26T16:32:21.255Z","report":{"scannerVersion":"0.1.9","scannedAt":"2026-09-26T16:32:21.206Z","components":{"code":{"score":25,"max":25,"notes":["2 source files scanned"]},"reliability":{"score":-1,"max":20,"notes":["no gateway calls yet and no remote to probe"]},"poisoning":{"score":-1,"max":15,"notes":["tools not inspected (local package is not executed); not counted"]},"auth":{"score":12,"max":15,"notes":["local package, no credentials required"]},"maintenance":{"score":3,"max":15,"notes":["no repository listed"]},"identity":{"score":2,"max":10,"notes":["no repository or website to verify"]}},"findings":[{"id":"maint.no-repo","severity":"low","component":"maintenance","title":"No source repository listed"}],"inputs":{"packages":[{"registryType":"pypi","identifier":"oscal-generator-mcp","version":"0.1.2","found":true,"license":"Apache-2.0","dependencyCount":5,"publishedAt":"2026-06-27T06:05:26.658807Z"}],"repo":{"found":false},"icon":{"url":null,"source":"none"},"presence":{"stars":null,"forks":null,"downloadsWeek":null,"license":"Apache-2.0","lastPushAt":null,"score":0}}}},"grade_history":[],"reviews":[]}