{"name":"io.github.KevinRabun/FedRAMP20xMCP","slug":"kevinrabun-fedramp20xmcp","title":"FedRAMP 20x Requirements","description":"An MCP server that provides access to FedRAMP 20x security requirements and controls.","url":"https://mcp.market/server/kevinrabun-fedramp20xmcp","rating":null,"grade":"C","score":68,"certified":false,"status":"active","category":"security","tags":["security"],"presence":{"score":11,"stars":6,"forks":0,"downloads_week":null,"last_push_at":"2026-02-21T17:06:09.000Z","license":"NOASSERTION"},"uptime":null,"claimed":false,"transport":"pypi","callable_via_gateway":false,"default_price_micros":0,"repository":"https://github.com/KevinRabun/FedRAMP20xMCP","website":null,"version":"1.3.0","remotes":[],"packages":[{"registryType":"pypi","identifier":"fedramp-20x-mcp","version":"1.3.0","transport":{"type":"stdio"}}],"tools":[{"name":"add_requirement_comments","description":"Add FedRAMP requirement comments to code or IaC templates.","write_action":false,"price_micros":0,"input_schema":null},{"name":"analyze_all_frrs","description":"Analyze code against all FedRAMP requirements.","write_action":false,"price_micros":0,"input_schema":null},{"name":"analyze_application_code","description":"Analyze application code for FedRAMP 20x security compliance issues.","write_action":false,"price_micros":0,"input_schema":null},{"name":"analyze_cicd_pipeline","description":"Analyze CI/CD pipeline configuration for FedRAMP 20x DevSecOps compliance.","write_action":false,"price_micros":0,"input_schema":null},{"name":"analyze_frr_code","description":"Analyze code against a specific FedRAMP requirement (FRR).","write_action":false,"price_micros":0,"input_schema":null},{"name":"analyze_frr_family","description":"Analyze code against all requirements in a specific FRR family.","write_action":false,"price_micros":0,"input_schema":null},{"name":"analyze_infrastructure_code","description":"Analyze Infrastructure as Code (Bicep/Terraform) for FedRAMP 20x compliance issues.","write_action":false,"price_micros":0,"input_schema":null},{"name":"check_package_vulnerabilities","description":"Check a package for known CVE vulnerabilities against authoritative databases.","write_action":false,"price_micros":0,"input_schema":null},{"name":"check_requirement_dependencies","description":"Show which requirements are related or dependent on a specific requirement.","write_action":false,"price_micros":0,"input_schema":null},{"name":"compare_with_rev4","description":"Compare FedRAMP 20x requirements to Rev 4/Rev 5 to understand changes.","write_action":false,"price_micros":0,"input_schema":null},{"name":"estimate_implementation_effort","description":"Provide rough effort estimates for implementing a specific requirement.","write_action":false,"price_micros":0,"input_schema":null},{"name":"export_to_csv","description":"Export FedRAMP 20x data to CSV format.","write_action":false,"price_micros":0,"input_schema":null},{"name":"export_to_excel","description":"Export FedRAMP 20x data to Excel format.","write_action":false,"price_micros":0,"input_schema":null},{"name":"generate_implementation_checklist","description":"Generate actionable step-by-step implementation checklist for a specific KSI.","write_action":false,"price_micros":0,"input_schema":null},{"name":"generate_implementation_questions","description":"Generate strategic questions for PMs and engineers about implementing a requirement.","write_action":false,"price_micros":0,"input_schema":null},{"name":"generate_ksi_specification","description":"Generate a detailed product specification document for a KSI.","write_action":false,"price_micros":0,"input_schema":null},{"name":"get_cloud_native_guidance","description":"Get cloud-native specific guidance for implementing FedRAMP 20x.","write_action":false,"price_micros":0,"input_schema":null},{"name":"get_control","description":"Get detailed information about a specific FedRAMP 20x requirement.","write_action":false,"price_micros":0,"input_schema":null},{"name":"get_definition","description":"Get the FedRAMP definition for a specific term.","write_action":false,"price_micros":0,"input_schema":null},{"name":"get_documentation_file","description":"Get the full content of a specific FedRAMP documentation file.","write_action":false,"price_micros":0,"input_schema":null},{"name":"get_evidence_automation_architecture","description":"Provide comprehensive architecture guidance for automated evidence collection.","write_action":false,"price_micros":0,"input_schema":null},{"name":"get_evidence_collection_code","description":"Provide code examples for collecting KSI evidence programmatically.","write_action":false,"price_micros":0,"input_schema":null},{"name":"get_frr_evidence_automation","description":"Get evidence automation recommendations for a specific FRR.","write_action":false,"price_micros":0,"input_schema":null},{"name":"get_frr_implementation_status","description":"Get implementation status summary across all FRR analyzers.","write_action":false,"price_micros":0,"input_schema":null},{"name":"get_frr_metadata","description":"Get detailed metadata for a specific FRR.","write_action":false,"price_micros":0,"input_schema":null},{"name":"get_implementation_examples","description":"Get practical implementation examples for a requirement.","write_action":false,"price_micros":0,"input_schema":null},{"name":"get_infrastructure_code_for_ksi","description":"Generate infrastructure code templates for automating KSI evidence collection.","write_action":false,"price_micros":0,"input_schema":null},{"name":"get_ksi","description":"Get detailed information about a specific Key Security Indicator.","write_action":false,"price_micros":0,"input_schema":null},{"name":"get_ksi_coverage_status","description":"Check if a specific KSI has analyzer coverage and what the limitations are.","write_action":false,"price_micros":0,"input_schema":null},{"name":"get_ksi_coverage_summary","description":"Get a summary of KSI analyzer coverage and recommendation quality assessment.","write_action":false,"price_micros":0,"input_schema":null},{"name":"get_ksi_evidence_artifacts","description":"Get list of evidence artifacts to collect for a specific KSI.","write_action":false,"price_micros":0,"input_schema":null},{"name":"get_ksi_evidence_automation","description":"Get evidence automation recommendations for a specific KSI.","write_action":false,"price_micros":0,"input_schema":null},{"name":"get_ksi_evidence_queries","description":"Get evidence collection queries for a specific KSI.","write_action":false,"price_micros":0,"input_schema":null},{"name":"get_ksi_family_status","description":"Get implementation status for a specific KSI family.","write_action":false,"price_micros":0,"input_schema":null},{"name":"get_ksi_implementation_matrix","description":"Get implementation matrix showing all KSIs in a family with Azure services, effort, and priority.","write_action":false,"price_micros":0,"input_schema":null},{"name":"get_ksi_implementation_status","description":"Get comprehensive implementation status of all KSI analyzers.","write_action":false,"price_micros":0,"input_schema":null},{"name":"get_ksi_implementation_summary","description":"Get a summary of KSI implementation status across all families.","write_action":false,"price_micros":0,"input_schema":null},{"name":"list_definitions","description":"List all FedRAMP definitions with their terms.","write_action":false,"price_micros":0,"input_schema":null},{"name":"list_documentation_files","description":"List all available FedRAMP documentation files.","write_action":false,"price_micros":0,"input_schema":null},{"name":"list_family_controls","description":"List all requirements within a specific document family.","write_action":false,"price_micros":0,"input_schema":null},{"name":"list_frrs_by_family","description":"List all FRR requirements in a specific family.","write_action":false,"price_micros":0,"input_schema":null},{"name":"list_ksi","description":"List all Key Security Indicators with their implementation status.","write_action":false,"price_micros":0,"input_schema":null},{"name":"scan_dependency_file","description":"Scan an entire dependency file for vulnerable packages.","write_action":false,"price_micros":0,"input_schema":null},{"name":"search_definitions","description":"Search FedRAMP definitions by keywords.","write_action":false,"price_micros":0,"input_schema":null},{"name":"search_documentation","description":"Search FedRAMP official documentation by keywords.","write_action":false,"price_micros":0,"input_schema":null},{"name":"search_requirements","description":"Search for FedRAMP 20x requirements containing specific keywords.","write_action":false,"price_micros":0,"input_schema":null},{"name":"validate_architecture","description":"Validate a cloud architecture against FedRAMP 20x requirements.","write_action":false,"price_micros":0,"input_schema":null},{"name":"validate_fedramp_config","description":"Validate Infrastructure as Code against FedRAMP 20x MANDATORY requirements BEFORE generating/deploying.","write_action":false,"price_micros":0,"input_schema":null}],"scan":{"score":68,"grade":"C","scanned_at":"2026-09-28T14:28:19.184Z","report":{"scannerVersion":"0.1.10","scannedAt":"2026-09-28T14:28:19.182Z","components":{"code":{"score":20,"max":25,"notes":["70 source files scanned"]},"reliability":{"score":-1,"max":20,"notes":["no gateway calls yet and no remote to probe"]},"poisoning":{"score":-1,"max":15,"notes":["tools not inspected (local package is not executed); not counted"]},"auth":{"score":12,"max":15,"notes":["local package, no credentials required"]},"maintenance":{"score":4,"max":15,"notes":["last push 219 days ago"]},"identity":{"score":8,"max":10,"notes":["registry namespace matches repository owner","GitHub account older than a year"]}},"findings":[{"id":"exec.eval","severity":"medium","component":"code","title":"eval / new Function used","evidence":"fedramp_20x_mcp-1.3.0/data/patterns/ced_patterns.yaml: …ired):**\\n```python\\n# INSECURE: Direct eval() of user\\ \\ input\\nuser_input = reque…"}],"inputs":{"packages":[{"registryType":"pypi","identifier":"fedramp-20x-mcp","version":"1.3.0","found":true,"license":"MIT","dependencyCount":15,"publishedAt":"2026-02-13T20:02:02.912625Z","repositoryUrl":"https://github.com/KevinRabun/FedRAMP20xMCP"}],"repo":{"found":true,"owner":"KevinRabun","repo":"FedRAMP20xMCP","archived":false,"pushedAt":"2026-02-21T17:06:09Z","stars":6,"forks":0,"openIssues":1,"ownerType":"User","ownerAvatarUrl":"https://avatars.githubusercontent.com/u/10634349?v=4","ownerCreatedAt":"2015-01-21T16:17:16Z","license":"NOASSERTION"},"icon":{"url":"https://avatars.githubusercontent.com/u/10634349?v=4&s=128","source":"github"},"presence":{"stars":6,"forks":0,"downloadsWeek":null,"license":"NOASSERTION","lastPushAt":"2026-02-21T17:06:09.000Z","score":11}}}},"grade_history":[],"reviews":[]}