kevinrabun avatar

FedRAMP 20x Requirements

kevinrabun/fedramp20xmcp

If you're building systems that need FedRAMP 20x authorization, this server gives you programmatic access to all 321 requirements: 199 FedRAMP Requirements, 72 Key Security Indicators, and 50 official definitions. You can query controls by family or keyword, search the official documentation markdown files, and run AST-based code analysis against 381 YAML patterns across 14 languages including Python, C#, Java, and IaC tools like Bicep and Terraform. The implementation guidance leans heavily toward Azure Government services. It also generates strategic interview questions for implementation planning and exports compliance evidence in Excel or Word formats. Reach for this when you need to map your cloud architecture to specific FedRAMP 20x controls or automate evidence collection for authorization packages.

GitHub stars
5
tools
13
transport
STDIO
last updated
Feb 13, 2026

Tools

13 tools

Public tool metadata for what this MCP can expose to an agent.

get_controlGet detailed information about a specific FedRAMP requirement or control.

Get detailed information about a specific FedRAMP requirement or control.

No parameter schema in public metadata yet.

list_family_controlsList all requirements within a specific family.

List all requirements within a specific family.

No parameter schema in public metadata yet.

search_requirementsSearch for requirements containing specific keywords.

Search for requirements containing specific keywords.

No parameter schema in public metadata yet.

get_definitionGet the FedRAMP definition for a specific term.

Get the FedRAMP definition for a specific term.

No parameter schema in public metadata yet.

list_definitionsList all FedRAMP definitions with their terms.

List all FedRAMP definitions with their terms.

No parameter schema in public metadata yet.

search_definitionsSearch FedRAMP definitions by keywords.

Search FedRAMP definitions by keywords.

No parameter schema in public metadata yet.

get_ksiGet detailed information about a specific Key Security Indicator.

Get detailed information about a specific Key Security Indicator.

No parameter schema in public metadata yet.

list_ksiList all Key Security Indicators.

List all Key Security Indicators.

No parameter schema in public metadata yet.

get_ksi_evidence_automationGet evidence automation recommendations for a specific KSI.

Get evidence automation recommendations for a specific KSI.

No parameter schema in public metadata yet.

get_ksi_evidence_queriesGet ready-to-use evidence collection queries for a specific KSI.

Get ready-to-use evidence collection queries for a specific KSI.

No parameter schema in public metadata yet.

get_ksi_evidence_artifactsGet specifications for evidence artifacts to collect for a specific KSI.

Get specifications for evidence artifacts to collect for a specific KSI.

No parameter schema in public metadata yet.

analyze_frr_codeAnalyze code against a specific FedRAMP Requirement (FRR) for compliance issues.

Analyze code against a specific FedRAMP Requirement (FRR) for compliance issues.

No parameter schema in public metadata yet.

analyze_all_frrsAnalyze code against all 199 FedRAMP requirements for compliance analysis.

Analyze code against all 199 FedRAMP requirements for compliance analysis.

No parameter schema in public metadata yet.

Sponsors

Readme

FedRAMP 20x MCP Server

Tests PyPI version Python Versions

An MCP (Model Context Protocol) server that provides access to FedRAMP 20x security requirements and controls with Azure-first guidance.

Overview

This server loads FedRAMP 20x data from the official FedRAMP documentation repository and provides tools for querying requirements by control, family, or keyword.

Data Sources:


View the full README on GitHub

Details

Repository
github.com/kevinrabun/fedramp20xmcp
Category
Security & Pentesting
Package
fedramp-20x-mcp
Transport
STDIO
Registry
MCP registry, active

More from kevinrabun

Related Security & Pentesting MCP servers

View all
1revsmoke avatarPromptrejectormcprevsmoke/promptrejectormcpSecurity gateway for AI agents: detects prompt injections, jailbreaks, and common vulnerabilities.2stars
2willianpinho avatarMCP Gateway Scanwillianpinho/mcp-gateway-scanRead-only MCP/agent-gateway readiness scanner — scores a repo across 7 security dimensions.2stars
3fetter-io avatarFetter MCPfetter-io/fetter-mcpReal-time Python package and vulnerability data for AI coding agents.1stars
4nan786521 avatarRecon Kit Mcpnan786521/recon-mcpRead-only network & security recon tools (DNS, TLS, headers, CORS) for AI agents, each graded.1stars
5studiomeyer-io avatarmcp-armorstudiomeyer-io/mcp-armorSecurity sidecar for MCP servers: 11 read-only control-plane tools for prompt-injection checks.1stars
6node-man avatarMcpnode-man/dechonet-mcp30 security tools for AI agents: phishing links, exposure maps, DNS, SSL, PQC, history, pivots.1stars