Scf MCP server
app.scfcontrolsplatform/mcp-server-scf·v3.4.2·2 starsMCP server for the SCF Controls Platform — 187 tools for controls, evidence, risk, and TPRM.
2 stars563 downloads/wk
Reviews
Write oneNobody has reviewed Scf yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Scf tools
No tool declarations could be read from the package source. They show once the server is installed.
Public scan report
scanner v0.1.10 · 2026-10-03 · same rubric, same numbers if you re-run it
- Code scan35 source files scanned25/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitystatic API keys via environment variables6/15
- Maintenancelast push 3 days ago15/15
- Maintainer identitynamespace and repository owner differ; GitHub account older than a year5/10
How Scf compares
Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 78/100
- higher than 57% of 48,255 servers
- GitHub stars
- 2
- more than 75% of 28,688 servers
- Downloads a week
- 563
- more than 90% of 12,191 servers with a package
Install Scf in Claude Code, Cursor or VS Code
Runs npx -y mcp-server-scf on your machine. Read the scan report first; the gateway never runs local packages.
claude mcp add mcp-server-scf -- npx -y mcp-server-scf
What the publisher says
From the Scf repository's README, as published. We do not edit it. Read it on GitHub
mcp-server-scf
<!-- Build & Security -->
<!-- Package & License -->
<!-- Registries & Marketplaces -->
<!-- Tech Stack -->
Security compliance controls, frameworks, and risk management for AI agents.
Give your AI assistant access to 1,451 SCF security controls, 354+ framework mappings (NIST 800-53, ISO 27001, SOC 2, FedRAMP, GDPR), evidence tracking, risk registers, and vendor risk management — all through the Model Context Protocol.
Built for the SCF Controls Platform. Maintained by ComplianceGenie.io.
🆕 The platform is now open-source, self-hosted software. The SCF Controls Platform — SCF-native GRC tooling for the free Secure Controls Framework content — is published under AGPL-3.0 at scf-controls-platform-oss. Companies download and host it themselves via Docker Compose.
Having trouble? → docs/troubleshooting.md · API key setup → docs/authentication.md · How it works → docs/architecture.md
Overview
mcp-server-scf connects AI assistants to the SCF Controls Platform via MCP, enabling natural language interaction with your compliance program. Your AI can browse the full SCF control catalog, track implementation progress, manage evidence collection, assess risks, and monitor third-party vendors — all without leaving your editor or chat.
189 tools across 13 domains — click through for full parameter tables and example prompts:
Shortened. The full README is on GitHub.
Nothing above is checked by us. What we check is on the safety report.
Scf: common questions
- Is Scf MCP server safe?
- Mostly: it is graded B (78/100). Read the Scf safety report
- How do I install Scf?
- It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
- Does Scf need an API key?
- Yes. The registry entry asks for
SCF_API_KEY. - Is Scf maintained?
- The last commit was 35 days ago (2026-09-30). The latest release is v3.4.2.
- How does Scf compare with other MCP servers?
- safety score 78/100 (higher than 57% of 48,255 servers); github stars 2 (more than 75% of 28,688 servers); downloads a week 563 (more than 90% of 12,191 servers with a package). Full comparison.