Fedramp MCP Server

Query FedRAMP 20x KSIs, NIST controls, and compliance docs via 20 MCP tools.

Local serverstdioPython

What is the Fedramp MCP Server?

Query FedRAMP 20x KSIs, NIST controls, and compliance docs via 20 MCP tools.

What you get

Custom Model Context Protocol (MCP) server that makes the FedRAMP/docs repository queryable with FRMR-aware tooling. The server scans FRMR JSON datasets and supporting markdown guidance, exposes structured tools for analysis, and can optionally clone and cache the upstream repository for you.

  • Auto-detects all 12 FRMR JSON document types and builds typed metadata
  • Extracts KSI entries, flattened control mappings, and Significant Change references
  • Fast markdown search via an inverted index backed by Lunr with snippets and line numbers
  • Indexes 62+ markdown files from tools/site/content/ (Zensical static site content)
  • Structured diffing between FRMR versions, including per-item change detection
  • Health check, version listing, and curated Significant Change guidance aggregator

Configuration and credentials

  • Node.js 18 or higher - npm 8 or higher

More MCP options

Compare MCP servers by category, or browse hosted MCP servers if you prefer an endpoint over a local process.

Maintainer setup documentation.

Recorded tools

Check the linked publisher documentation and your connected client's tool list. Names and availability can vary with the server version and account permissions.

ToolWhat it does
search_toolsRequired for discovering other tools
search_markdownMost common entry point for documentation queries
list_frmr_documentsStarting point for FRMR data exploration
health_checkDiagnostics and status verification
get_requirement_by_idUniversal ID lookup across all document types

How to install the Fedramp MCP Server

{
  "mcpServers": {
    "fedramp-docs": {
      "command": "fedramp-docs-mcp",
      "env": {
        "FEDRAMP_DOCS_AUTO_UPDATE": "false"
      }
    }
  }
}

Configuration as documented by the project. Restart the client after saving.

Configuration

  • Node.js 18 or higher - npm 8 or higher
VariableDescriptionRequired
FEDRAMP_DOCS_AUTO_UPDATEConfiguration value read at startup.Optional
FEDRAMP_DOCS_UPDATE_CHECK_HOURSConfiguration value read at startup.Optional
FEDRAMP_DOCS_PATHFilesystem location the server is allowed to use.Optional

Example prompts to try

  • “Use Fedramp to search tools.”
  • “Use Fedramp to search markdown.”
  • “Use Fedramp to list frmr documents.”

Frequently asked questions

Query FedRAMP 20x KSIs, NIST controls, and compliance docs via 20 MCP tools. Confirm the tools offered by your installed version in the connected client. Tool availability and permissions depend on the server and account configuration.