Claude MarketplacesSubmit

Compliance Trestle Mcp

oscal-compass/compliance-trestle-mcp

Wraps compliance-trestle, the OSCAL authoring toolkit, as an MCP server so you can initialize workspaces, import catalogs and profiles, and generate or assemble markdown controls directly from Claude or any MCP client. You get six tools covering the main trestle workflow: trestle_init for workspace setup, trestle_import for pulling in OSCAL models from files or URLs, and four author commands for generating markdown from catalogs, generating and resolving profiles, and assembling markdown back into profile JSON. If you're building security compliance documentation in OSCAL format and want an agent to handle the trestle CLI orchestration, this bridges that gap. Runs via uvx with stdio transport.

GitHub stars: 2
tools: 9
transport: STDIO
last updated: Feb 26, 2026

Tools

9 tools

Public tool metadata for what this MCP can expose to an agent.

trestle_initInitialize a trestle workspace

Initialize a trestle workspace

No parameter schema in public metadata yet.

trestle_importImport OSCAL models (Catalog/Profile/etc.) from a file or URL

Import OSCAL models (Catalog/Profile/etc.) from a file or URL

No parameter schema in public metadata yet.

trestle_author_catalog_generateGenerate markdown controls from a catalog

Generate markdown controls from a catalog

No parameter schema in public metadata yet.

trestle_author_profile_generateGenerate markdown for profiles

Generate markdown for profiles

No parameter schema in public metadata yet.

trestle_author_profile_resolveResolve profile to catalog

Resolve profile to catalog

No parameter schema in public metadata yet.

trestle_author_profile_assembleAssemble markdown controls into profile JSON

Assemble markdown controls into profile JSON

No parameter schema in public metadata yet.

trestle_task_csv_to_oscal_cdConvert a CSV mapping file into an OSCAL component definition

Convert a CSV mapping file into an OSCAL component definition

No parameter schema in public metadata yet.

trestle_task_xlsx_to_oscal_poamConvert a FedRAMP-format XLSX spreadsheet into an OSCAL Plan of Action and Milestones (POA&M)

Convert a FedRAMP-format XLSX spreadsheet into an OSCAL Plan of Action and Milestones (POA&M)

No parameter schema in public metadata yet.

trestle_validateValidate a standalone OSCAL file (any top-level model, e.g. POA&M) against the OSCAL schema (and trestle's semantic checks)

Validate a standalone OSCAL file (any top-level model, e.g. POA&M) against the OSCAL schema (and trestle's semantic checks)

No parameter schema in public metadata yet.

Sponsors

Promote your product hereReach 125k+ visitors monthly Promote your product hereReach 125k+ visitors monthly

Agent CaffeineSponsoredClose your lid, come back to finished work

SnugSponsoredThe clipboard manager for the AI era Promote your product hereReach 125k+ visitors monthly

WaxSponsoredBlock anything with supervision, without erasing your iPhone Promote your product hereReach 125k+ visitors monthly

knobsSponsoredSee your site on any phone, any day, in any language

Readme

Trestle MCP

MCP server to easily use compliance-trestle (OSCAL tool) from OpenCode, Claude, or any MCP-compliant client.

mcp-name: io.github.oscal-compass/compliance-trestle-mcp

Getting Started

This project can be used in the following two ways:

Usage from a coding agent (OpenCode): Use Trestle-MCP from OpenCode via MCP.
Usage from CLI (MCP Client): Invoke Trestle-MCP directly using an MCP CLI client.

Choose the option that best fits your workflow.

Usage from OpenCode

Add the following to opencode.json in your workspace:

{
    "mcp": {
        "trestle": {
            "type": "local",
            "command": ["uvx", "--from", "compliance-trestle-mcp==<version>", "trestle-mcp"],
            "environment": { "TRESTLE_MCP_TOOLS": "all" },
            "enabled": true
        }
    }
}

View the full README on GitHub

Details

Repository: github.com/oscal-compass/compliance-trestle-mcp
Website: oscal-compass.dev/compliance-trestle/latest
Category: Security & Pentesting
Package: compliance-trestle-mcp
Transport: STDIO
Registry: MCP registry, active

Related Security & Pentesting MCP servers

1

Mcp Guardianrudraneel93/mcp-guardianSecurity, cost, and health governance proxy for MCP infrastructure2stars

2

Create Starterstarter-series/create-starterScaffold Starter Series projects and check release, deployment, security, and agent instructions.2stars

3

Pop Pay100xpercent/pop-payRuntime security for AI agent commerce. CLI + MCP server blocks hallucinated purchases.1stars

4

Vibescan Mcp Serveraguantar/vibescan-mcp-serverMCP server for VibeScan — scan projects for leaked secrets and security issues1stars

5

Arcjetarcjet/mcpAn MCP server for Arcjet - the runtime security platform that ships with your AI code.0stars

6

Systemores AI Agent & MCP Security Auditorbobcar0/systemores-pluginAI agent security, MCP 2026 schema & graph audits, <250ms guardrails, and compliance dossiers1stars