← Back to search

FedRAMP 20x Requirements

KevinRabun NOASSERTION Scanned 48d ago

An MCP server that provides access to FedRAMP 20x security requirements and controls.

D
58.9 / 100

Versions

1.3.0 latest
May 19, 2026
1.2.0
Feb 5, 2026
1.1.0
Feb 4, 2026
1.0.0
Jan 13, 2026
0.13.0
Dec 18, 2025
0.12.1
Dec 17, 2025
0.12.0
Dec 17, 2025
0.11.0
Dec 15, 2025
0.10.0
Dec 12, 2025
0.9.0
Dec 10, 2025
0.8.0
Dec 9, 2025
0.7.0
Dec 7, 2025
0.6.0
Dec 4, 2025
0.5.0
Dec 4, 2025
0.4.9
Dec 3, 2025
0.4.8
Dec 3, 2025
0.4.7
Dec 3, 2025
0.4.6
Dec 3, 2025
0.4.5
Dec 3, 2025
0.4.4
Dec 3, 2025
0.4.3
Dec 3, 2025
0.4.2
Dec 3, 2025
0.4.1
Dec 3, 2025
0.4.0
Dec 3, 2025
0.3.3
Dec 2, 2025
0.3.2
Dec 2, 2025
0.3.0
Dec 2, 2025
0.2.1
Dec 2, 2025
0.2.0
Dec 2, 2025
0.1.0
Nov 26, 2025
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 0

No tools indexed yet.

Permissions 0

No permissions indexed yet.

Scan Findings 115

low
Tool 'get_ksi_evidence_automation' has no annotations annotation_checker · 100%
low
Tool 'get_ksi_evidence_queries' has no annotations annotation_checker · 100%
low
Tool 'get_ksi_evidence_artifacts' has no annotations annotation_checker · 100%
low
Tool 'analyze_frr_code' has no annotations annotation_checker · 100%
low
Tool 'analyze_all_frrs' has no annotations annotation_checker · 100%
low
Tool 'analyze_frr_family' has no annotations annotation_checker · 100%
low
Tool 'list_frrs_by_family' has no annotations annotation_checker · 100%
info
Tool: check_package_vulnerabilities manifest_parser · 90%
low
Tool 'get_frr_metadata' has no annotations annotation_checker · 100%
low
Tool 'get_frr_evidence_automation' has no annotations annotation_checker · 100%
low
Tool 'get_frr_implementation_status' has no annotations annotation_checker · 100%
low
Tool 'search_documentation' has no annotations annotation_checker · 100%
low
Tool 'get_documentation_file' has no annotations annotation_checker · 100%
low
Tool 'list_documentation_files' has no annotations annotation_checker · 100%
low
Tool 'export_to_excel' has no annotations annotation_checker · 100%
low
Tool 'export_to_csv' has no annotations annotation_checker · 100%
low
Tool 'generate_ksi_specification' has no annotations annotation_checker · 100%
low
Tool 'compare_with_rev4' has no annotations annotation_checker · 100%
low
Tool 'get_implementation_examples' has no annotations annotation_checker · 100%
low
Tool 'check_requirement_dependencies' has no annotations annotation_checker · 100%
low
Tool 'estimate_implementation_effort' has no annotations annotation_checker · 100%
low
Tool 'get_cloud_native_guidance' has no annotations annotation_checker · 100%
low
Tool 'validate_architecture' has no annotations annotation_checker · 100%
low
Tool 'generate_implementation_questions' has no annotations annotation_checker · 100%
low
Tool 'get_ksi_implementation_matrix' has no annotations annotation_checker · 100%
low
Tool 'generate_implementation_checklist' has no annotations annotation_checker · 100%
low
Tool 'get_infrastructure_code_for_ksi' has no annotations annotation_checker · 100%
low
Tool 'get_evidence_collection_code' has no annotations annotation_checker · 100%
low
Tool 'get_ksi_coverage_summary' has no annotations annotation_checker · 100%
low
Tool 'get_evidence_automation_architecture' has no annotations annotation_checker · 100%
info
Could not connect to MCP server for behavioral verification behavioral_verifier · 100%
low
Tool 'analyze_infrastructure_code' has no annotations annotation_checker · 100%
low
Tool 'validate_fedramp_config' has no annotations annotation_checker · 100%
info
No dependency files found for SBOM generation sbom_generator · 100%
info
MITRE ATLAS technique coverage summary atlas_annotator · 100%
low
Tool 'analyze_application_code' has no annotations annotation_checker · 100%
low
Tool 'analyze_cicd_pipeline' has no annotations annotation_checker · 100%
info
pyproject.toml metadata manifest_parser · 100%
info
Tool: get_control manifest_parser · 90%
info
Tool: list_family_controls manifest_parser · 90%
info
Tool: search_requirements manifest_parser · 90%
info
Tool: get_definition manifest_parser · 90%
info
Tool: list_definitions manifest_parser · 90%
info
Tool: search_definitions manifest_parser · 90%
info
Tool: get_ksi manifest_parser · 90%
info
Tool: list_ksi manifest_parser · 90%
info
Tool: get_ksi_implementation_summary manifest_parser · 90%
info
Tool: get_ksi_evidence_automation manifest_parser · 90%
info
Tool: get_ksi_evidence_queries manifest_parser · 90%
low
Tool 'search_definitions' has no annotations annotation_checker · 100%
info
Tool: get_ksi_evidence_artifacts manifest_parser · 90%
info
Tool: analyze_frr_code manifest_parser · 90%
info
Tool: analyze_all_frrs manifest_parser · 90%
info
Tool: analyze_frr_family manifest_parser · 90%
info
Tool: list_frrs_by_family manifest_parser · 90%
info
Tool: get_frr_metadata manifest_parser · 90%
info
Tool: get_frr_evidence_automation manifest_parser · 90%
info
Tool: get_frr_implementation_status manifest_parser · 90%
info
Tool: search_documentation manifest_parser · 90%
info
Tool: get_documentation_file manifest_parser · 90%
info
Tool: list_documentation_files manifest_parser · 90%
info
Tool: export_to_excel manifest_parser · 90%
info
Tool: export_to_csv manifest_parser · 90%
info
Tool: generate_ksi_specification manifest_parser · 90%
info
Tool: compare_with_rev4 manifest_parser · 90%
info
Tool: get_implementation_examples manifest_parser · 90%
info
Tool: check_requirement_dependencies manifest_parser · 90%
info
Tool: estimate_implementation_effort manifest_parser · 90%
info
Tool: get_cloud_native_guidance manifest_parser · 90%
info
Tool: validate_architecture manifest_parser · 90%
info
Tool: generate_implementation_questions manifest_parser · 90%
info
Tool: get_ksi_implementation_matrix manifest_parser · 90%
info
Tool: generate_implementation_checklist manifest_parser · 90%
info
Tool: get_infrastructure_code_for_ksi manifest_parser · 90%
info
Tool: get_evidence_collection_code manifest_parser · 90%
info
Tool: get_evidence_automation_architecture manifest_parser · 90%
low
Tool 'get_ksi' has no annotations annotation_checker · 100%
low
Tool 'list_ksi' has no annotations annotation_checker · 100%
info
Tool: analyze_infrastructure_code manifest_parser · 90%
info
Tool: validate_fedramp_config manifest_parser · 90%
info
Tool: analyze_application_code manifest_parser · 90%
info
Tool: analyze_cicd_pipeline manifest_parser · 90%
info
Tool: get_ksi_coverage_summary manifest_parser · 90%
info
Tool: get_ksi_coverage_status manifest_parser · 90%
low
Tool 'get_ksi_implementation_summary' has no annotations annotation_checker · 100%
info
Tool: scan_dependency_file manifest_parser · 90%
info
Tool: get_ksi_implementation_status manifest_parser · 90%
info
Tool: get_ksi_family_status manifest_parser · 90%
info
Tool: add_requirement_comments manifest_parser · 90%
info
Required env vars (5) manifest_parser · 80%
low
Tool 'get_control' has no annotations annotation_checker · 100%
low
Tool 'list_family_controls' has no annotations annotation_checker · 100%
low
Tool 'search_requirements' has no annotations annotation_checker · 100%
low
Tool 'get_definition' has no annotations annotation_checker · 100%
low
Tool 'list_definitions' has no annotations annotation_checker · 100%
low
Tool 'get_ksi_coverage_status' has no annotations annotation_checker · 100%
low
Tool 'check_package_vulnerabilities' has no annotations annotation_checker · 100%
low
Tool 'scan_dependency_file' has no annotations annotation_checker · 100%
low
Tool 'get_ksi_implementation_status' has no annotations annotation_checker · 100%
low
Tool 'get_ksi_family_status' has no annotations annotation_checker · 100%
low
Tool 'add_requirement_comments' has no annotations annotation_checker · 100%
medium
OAuth implementation without PKCE auth_checker · 75%
medium
Permission: network access detected permission_analyzer · 90%
low
Permission: filesystem access detected permission_analyzer · 80%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
medium
Vulnerable dependency: mcp@1.2.0 (GHSA-3qhf-m339-9g5v) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.2.0 (GHSA-9h52-p55h-vw2f) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.2.0 (GHSA-j975-95f5-7wqh) dependency_analyzer · 95%
high
Generic API Key Assignment found in docs/PATTERN_AUTHORING_GUIDE.md secret_scanner · 75%
high
Hardcoded Password found in src/fedramp_20x_mcp/tools/enhancements.py secret_scanner · 65%
info
SLSA Build Level 2 detected slsa_assessor · 85%
info
Could not connect to MCP server for output poisoning scan output_poisoning · 100%
info
ATLAS: Adversarial ML Supply Chain (AML.T0043) atlas_annotator · 100%
info
ATLAS: Poison Training Data (AML.T0020) atlas_annotator · 100%