AI agent tools for Open Security Controls Assessment Language (OSCAL)
Connect Runs on your machine
claude mcp add mcp-server-for-oscal -e BEDROCK_MODEL_ID=<BEDROCK_MODEL_ID> -e OSCAL_KB_ID=<OSCAL_KB_ID> -e AWS_PROFILE=<AWS_PROFILE> -e AWS_REGION=<AWS_REGION> -e LOG_LEVEL=<LOG_LEVEL> -- uvx mcp-server-for-oscal==0.4.0{
"mcpServers": {
"mcp-server-for-oscal": {
"command": "uvx",
"args": [
"mcp-server-for-oscal==0.4.0"
],
"env": {
"BEDROCK_MODEL_ID": "<BEDROCK_MODEL_ID>",
"OSCAL_KB_ID": "<OSCAL_KB_ID>",
"AWS_PROFILE": "<AWS_PROFILE>",
"AWS_REGION": "<AWS_REGION>",
"LOG_LEVEL": "<LOG_LEVEL>"
}
}
}
}{
"mcpServers": {
"mcp-server-for-oscal": {
"command": "uvx",
"args": [
"mcp-server-for-oscal==0.4.0"
],
"env": {
"BEDROCK_MODEL_ID": "<BEDROCK_MODEL_ID>",
"OSCAL_KB_ID": "<OSCAL_KB_ID>",
"AWS_PROFILE": "<AWS_PROFILE>",
"AWS_REGION": "<AWS_REGION>",
"LOG_LEVEL": "<LOG_LEVEL>"
}
}
}
}{
"servers": {
"mcp-server-for-oscal": {
"type": "stdio",
"command": "uvx",
"args": [
"mcp-server-for-oscal==0.4.0"
],
"env": {
"BEDROCK_MODEL_ID": "<BEDROCK_MODEL_ID>",
"OSCAL_KB_ID": "<OSCAL_KB_ID>",
"AWS_PROFILE": "<AWS_PROFILE>",
"AWS_REGION": "<AWS_REGION>",
"LOG_LEVEL": "<LOG_LEVEL>"
}
}
}
}Replace the values in angle brackets with your own. Keys stay on your machine; we never see them.
Tools
This server runs locally, so its tools are listed by your MCP client once it starts.
Environment variables
| Name | Description |
|---|---|
BEDROCK_MODEL_IDOptional | AWS Bedrock model ID for OSCAL documentation queries |
OSCAL_KB_IDOptional | AWS Bedrock Knowledge Base ID for OSCAL documentation |
AWS_PROFILEOptional | AWS CLI profile name for credential resolution |
AWS_REGIONOptional | AWS region for Bedrock API calls |
LOG_LEVELOptional | Logging verbosity level (DEBUG, INFO, WARNING, ERROR) |
Details
| Package | [email protected] (PYPI, stdio) |
| First published | 2 Apr 2026 |
| Last updated | 2 Apr 2026 |
| Registry name | io.github.awslabs/mcp-server-for-oscal |
More ai and media servers See all
Listing data from the official MCP registry. Status and tools from NestDaddy's daily check. Browse all MCP servers.