
FedRAMP 20x Requirements
If you're building systems that need FedRAMP 20x authorization, this server gives you programmatic access to all 321 requirements: 199 FedRAMP Requirements, 72 Key Security Indicators, and 50 official definitions. You can query controls by family or keyword, search the official documentation markdown files, and run AST-based code analysis against 381 YAML patterns across 14 languages including Python, C#, Java, and IaC tools like Bicep and Terraform. The implementation guidance leans heavily toward Azure Government services. It also generates strategic interview questions for implementation planning and exports compliance evidence in Excel or Word formats. Reach for this when you need to map your cloud architecture to specific FedRAMP 20x controls or automate evidence collection for authorization packages.
- GitHub stars
- 5
- tools
- 13
- transport
- STDIO
- last updated
- Feb 13, 2026
Tools
13 toolsPublic tool metadata for what this MCP can expose to an agent.
get_controlGet detailed information about a specific FedRAMP requirement or control.
Get detailed information about a specific FedRAMP requirement or control.
No parameter schema in public metadata yet.
list_family_controlsList all requirements within a specific family.
List all requirements within a specific family.
No parameter schema in public metadata yet.
search_requirementsSearch for requirements containing specific keywords.
Search for requirements containing specific keywords.
No parameter schema in public metadata yet.
get_definitionGet the FedRAMP definition for a specific term.
Get the FedRAMP definition for a specific term.
No parameter schema in public metadata yet.
list_definitionsList all FedRAMP definitions with their terms.
List all FedRAMP definitions with their terms.
No parameter schema in public metadata yet.
search_definitionsSearch FedRAMP definitions by keywords.
Search FedRAMP definitions by keywords.
No parameter schema in public metadata yet.
get_ksiGet detailed information about a specific Key Security Indicator.
Get detailed information about a specific Key Security Indicator.
No parameter schema in public metadata yet.
list_ksiList all Key Security Indicators.
List all Key Security Indicators.
No parameter schema in public metadata yet.
get_ksi_evidence_automationGet evidence automation recommendations for a specific KSI.
Get evidence automation recommendations for a specific KSI.
No parameter schema in public metadata yet.
get_ksi_evidence_queriesGet ready-to-use evidence collection queries for a specific KSI.
Get ready-to-use evidence collection queries for a specific KSI.
No parameter schema in public metadata yet.
get_ksi_evidence_artifactsGet specifications for evidence artifacts to collect for a specific KSI.
Get specifications for evidence artifacts to collect for a specific KSI.
No parameter schema in public metadata yet.
analyze_frr_codeAnalyze code against a specific FedRAMP Requirement (FRR) for compliance issues.
Analyze code against a specific FedRAMP Requirement (FRR) for compliance issues.
No parameter schema in public metadata yet.
analyze_all_frrsAnalyze code against all 199 FedRAMP requirements for compliance analysis.
Analyze code against all 199 FedRAMP requirements for compliance analysis.
No parameter schema in public metadata yet.
Sponsors
Readme
FedRAMP 20x MCP Server
An MCP (Model Context Protocol) server that provides access to FedRAMP 20x security requirements and controls with Azure-first guidance.
Overview
This server loads FedRAMP 20x data from the official FedRAMP documentation repository and provides tools for querying requirements by control, family, or keyword.
Data Sources:
- Requirements Data: JSON files from github.com/FedRAMP/docs (root directory)
- Documentation: Markdown files from github.com/FedRAMP/docs/tree/main/docs
Details
- Repository
- github.com/kevinrabun/fedramp20xmcp
- Category
- Security & Pentesting
- Package
fedramp-20x-mcp- Transport
- STDIO
- Registry
- MCP registry, active