MCP.Market

Fedramp Docs MCP server

by ethanolivertroy·io.github.ethanolivertroy/fedramp-docs-mcp·v0.2.2·18 stars
No reviews yet

Query FedRAMP 20x KSIs, NIST controls, and compliance docs via 20 MCP tools.

B71/100grade B
Write a reviewInstall
What users say
No reviews yet
Be the first
Safety scan
B71/100

full report

Adoption
New

18 stars

Reviews

Write one

Nobody has reviewed Fedramp Docs yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Fedramp Docs tools

No tool declarations could be read from the package source. They show once the server is installed.

Public scan report

scanner v0.1.10 · 2026-10-01 · same rubric, same numbers if you re-run it

1 high
  • Code scan70 source files scanned25/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitylocal package, no credentials required12/15
  • Maintenancerepository archived0/15
  • Maintainer identityregistry namespace matches repository owner; GitHub account older than a year9/10

Findings (1)

  • highRepository is archivedmaint.archived
Overall 71/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How Fedramp Docs compares

Against every graded Productivity MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
71/100
higher than 32% of 1,299 Productivity servers
GitHub stars
18
more than 82% of 854 Productivity servers

Install Fedramp Docs in Claude Code, Cursor or VS Code

Runs npx -y fedramp-docs-mcp on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add fedramp-docs-mcp -- npx -y fedramp-docs-mcp
Add to Cursor

What the publisher says

From the Fedramp Docs repository's README, as published. We do not edit it. Read it on GitHub

FedRAMP Docs MCP Server

## ⚠️ This project is sunsetting

This MCP server is no longer under active development. The FedRAMP search and FRMR parsing capabilities are being folded into GRC Clanker and myctrl.tools, where they live inside an actual GRC workflow instead of as a standalone subprocess.

The npm package and this repository remain available for existing users, but no new features will land here. For the reasoning and post-mortem, see the project writeup.

— Ethan (2026-04-15)

Disclaimer: This is an unofficial, community project and is not affiliated with, endorsed by, or associated with FedRAMP or the U.S. federal government. The author is not officially affiliated with FedRAMP. The FedRAMP name and any related marks are property of their respective owners.

Custom Model Context Protocol (MCP) server that makes the FedRAMP/docs repository queryable with FRMR-aware tooling. The server scans FRMR JSON datasets and supporting markdown guidance, exposes structured tools for analysis, and can optionally clone and cache the upstream repository for you.

Demo

See the FedRAMP Docs MCP Server in action with Claude Desktop:

https://github.com/user-attachments/assets/653c3956-0bfb-46c4-9e72-8a6d75e3a80d

Documentation

Additional resources:

  • Local Development - Build from source
  • Docker Setup - Container deployment
  • Security Hardening - Production configurations
  • Contributing - How to contribute

Prerequisites

  • Node.js 18 or higher
  • npm 8 or higher

Features

  • Auto-detects all 12 FRMR JSON document types and builds typed metadata.
  • Extracts KSI entries, flattened control mappings, and Significant Change references.
  • Fast markdown search via an inverted index backed by Lunr with snippets and line numbers.
  • Indexes 62+ markdown files from tools/site/content/ (Zensical static site content).
  • Structured diffing between FRMR versions, including per-item change detection.
  • Health check, version listing, and curated Significant Change guidance aggregator.
  • Claude Plugin with slash commands, agent skills, and compliance analyst agent.
  • Docker support with security hardening following 2025 best practices.

Supported Document Types

Getting Started

Local Development

  1. Install dependencies:
npm install
  1. Build the project:
npm run build
  1. Run the server:
node dist/index.js

Global Installation

To install globally and use the fedramp-docs-mcp command:

npm install -g .
fedramp-docs-mcp

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

Fedramp Docs: common questions

Is Fedramp Docs MCP server safe?
Mostly: it is graded B (71/100). Read the Fedramp Docs safety report
How do I install Fedramp Docs?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does Fedramp Docs need an API key?
No secret keys are declared. It reads 3 settings from the environment.
Is Fedramp Docs maintained?
The last commit was 202 days ago (2026-04-15). The latest release is v0.2.2.
What can I use instead of Fedramp Docs?
Servers from other publishers that do the same job: Context7 MCP server, Svelte MCP server and SvGrid MCP server.
How does Fedramp Docs compare with other Productivity MCP servers?
safety score 71/100 (higher than 32% of 1,299 Productivity servers); github stars 18 (more than 82% of 854 Productivity servers). Full comparison.

Alternatives to Fedramp Docs

Same job from other publishers: the closest match first, then the best rated.

  • Context7
    Up-to-date docs for AI agents
    A
  • Svelte MCP
    The official Svelte MCP server providing docs and autofixing tools for Svelte development
    A
  • SvGrid
    Checks AI-written SvGrid code against the real API, plus version-pinned Svelte 5 grid docs.
    A
  • Coolify
    46 optimized tools for managing Coolify infrastructure, diagnostics, and docs search
    B
  • Agent-Native Content
    Open-source Obsidian for MDX - edit local docs with agent assistance
    A