security-controls-mcp 0.2.1__py3-none-any.whl → 0.3.2__py3-none-any.whl
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- security_controls_mcp/__init__.py +1 -1
- {security_controls_mcp-0.2.1.dist-info → security_controls_mcp-0.3.2.dist-info}/METADATA +59 -9
- {security_controls_mcp-0.2.1.dist-info → security_controls_mcp-0.3.2.dist-info}/RECORD +8 -8
- {security_controls_mcp-0.2.1.dist-info → security_controls_mcp-0.3.2.dist-info}/WHEEL +0 -0
- {security_controls_mcp-0.2.1.dist-info → security_controls_mcp-0.3.2.dist-info}/entry_points.txt +0 -0
- {security_controls_mcp-0.2.1.dist-info → security_controls_mcp-0.3.2.dist-info}/licenses/LICENSE +0 -0
- {security_controls_mcp-0.2.1.dist-info → security_controls_mcp-0.3.2.dist-info}/licenses/LICENSE-DATA.md +0 -0
- {security_controls_mcp-0.2.1.dist-info → security_controls_mcp-0.3.2.dist-info}/top_level.txt +0 -0
|
@@ -1,16 +1,15 @@
|
|
|
1
1
|
Metadata-Version: 2.4
|
|
2
2
|
Name: security-controls-mcp
|
|
3
|
-
Version: 0.2
|
|
3
|
+
Version: 0.3.2
|
|
4
4
|
Summary: MCP server for querying security framework controls (SCF) - map between ISO 27001, NIST CSF, DORA, PCI DSS, and more
|
|
5
5
|
Author-email: Ansvar Systems <hello@ansvar.eu>
|
|
6
|
-
License: Apache-2.0
|
|
6
|
+
License-Expression: Apache-2.0
|
|
7
7
|
Project-URL: Homepage, https://github.com/Ansvar-Systems/security-controls-mcp
|
|
8
8
|
Project-URL: Repository, https://github.com/Ansvar-Systems/security-controls-mcp
|
|
9
9
|
Project-URL: Issues, https://github.com/Ansvar-Systems/security-controls-mcp/issues
|
|
10
10
|
Keywords: mcp,security,compliance,iso27001,nist,dora,pci-dss
|
|
11
|
-
Classifier: Development Status ::
|
|
11
|
+
Classifier: Development Status :: 4 - Beta
|
|
12
12
|
Classifier: Intended Audience :: Developers
|
|
13
|
-
Classifier: License :: OSI Approved :: Apache Software License
|
|
14
13
|
Classifier: Programming Language :: Python :: 3
|
|
15
14
|
Classifier: Programming Language :: Python :: 3.10
|
|
16
15
|
Classifier: Programming Language :: Python :: 3.11
|
|
@@ -62,9 +61,6 @@ Built on the [Secure Controls Framework (SCF)](https://securecontrolsframework.c
|
|
|
62
61
|
- Control filtering by framework, domain, or keyword
|
|
63
62
|
- SCF control metadata including PPTDF categories and security domain weights
|
|
64
63
|
|
|
65
|
-
**Integration:**
|
|
66
|
-
- Works seamlessly with [EU Regulations MCP](https://github.com/Ansvar-Systems/eu-regulations-mcp) for complete EU compliance coverage
|
|
67
|
-
|
|
68
64
|
---
|
|
69
65
|
|
|
70
66
|
## Why This Exists
|
|
@@ -73,8 +69,6 @@ When you're implementing security controls, you face a common problem: different
|
|
|
73
69
|
|
|
74
70
|
This MCP server solves that by giving you instant **bidirectional mapping** between any two frameworks via the SCF rosetta stone. Ask Claude "What DORA controls does ISO 27001 A.5.15 map to?" and get an immediate, authoritative answer backed by ComplianceForge's comprehensive framework database.
|
|
75
71
|
|
|
76
|
-
**Works with:** [EU Regulations MCP](https://github.com/Ansvar-Systems/eu-regulations-mcp) for complete EU compliance coverage (DORA + NIS2 + AI Act + GDPR + more).
|
|
77
|
-
|
|
78
72
|
---
|
|
79
73
|
|
|
80
74
|
## 🔒 Add Your Purchased Standards (Optional)
|
|
@@ -456,6 +450,62 @@ Based on **SCF 2025.4** released December 29, 2025.
|
|
|
456
450
|
|
|
457
451
|
---
|
|
458
452
|
|
|
453
|
+
## Related Projects: Complete Compliance Suite
|
|
454
|
+
|
|
455
|
+
This server is part of **Ansvar's Compliance Suite** - three MCP servers that work together for end-to-end compliance coverage:
|
|
456
|
+
|
|
457
|
+
### 🇪🇺 [EU Regulations MCP](https://github.com/Ansvar-Systems/EU_compliance_MCP)
|
|
458
|
+
**Query 47 EU regulations directly from Claude**
|
|
459
|
+
- GDPR, AI Act, DORA, NIS2, MiFID II, PSD2, eIDAS, Medical Device Regulation, and 39 more
|
|
460
|
+
- Full regulatory text with article-level search
|
|
461
|
+
- Cross-regulation reference and comparison
|
|
462
|
+
- **Install:** `npx @ansvar/eu-regulations-mcp`
|
|
463
|
+
|
|
464
|
+
### 🇺🇸 [US Regulations MCP](https://github.com/Ansvar-Systems/US_Compliance_MCP)
|
|
465
|
+
**Query US federal and state compliance laws directly from Claude**
|
|
466
|
+
- HIPAA, CCPA, SOX, GLBA, FERPA, COPPA, FDA 21 CFR Part 11, and 8 more
|
|
467
|
+
- Federal and state privacy law comparison
|
|
468
|
+
- Breach notification timeline mapping
|
|
469
|
+
- **Install:** `npm install @ansvar/us-regulations-mcp`
|
|
470
|
+
|
|
471
|
+
### 🔐 Security Controls MCP (This Project)
|
|
472
|
+
**Query 1,451 security controls across 28 frameworks**
|
|
473
|
+
- ISO 27001, NIST CSF, DORA, PCI DSS, SOC 2, CMMC, FedRAMP, and 21 more
|
|
474
|
+
- Bidirectional framework mapping and gap analysis
|
|
475
|
+
- Import your purchased standards for official text
|
|
476
|
+
- **Install:** `pipx install security-controls-mcp`
|
|
477
|
+
|
|
478
|
+
### How They Work Together
|
|
479
|
+
|
|
480
|
+
**Regulations → Controls Implementation Workflow:**
|
|
481
|
+
|
|
482
|
+
```
|
|
483
|
+
1. "What DORA requirements apply to ICT risk management?"
|
|
484
|
+
→ EU Regulations MCP returns Article 6 full text
|
|
485
|
+
|
|
486
|
+
2. "What security controls satisfy DORA Article 6?"
|
|
487
|
+
→ Security Controls MCP maps to ISO 27001, NIST CSF, and SCF controls
|
|
488
|
+
|
|
489
|
+
3. "Show me ISO 27001 A.8.1 implementation details"
|
|
490
|
+
→ Security Controls MCP returns control requirements and framework mappings
|
|
491
|
+
```
|
|
492
|
+
|
|
493
|
+
**Complete compliance in one chat:**
|
|
494
|
+
- **EU/US Regulations MCPs** tell you WHAT compliance requirements you must meet
|
|
495
|
+
- **Security Controls MCP** tells you HOW to implement controls that satisfy those requirements
|
|
496
|
+
|
|
497
|
+
### Specialized: OT/ICS Security
|
|
498
|
+
|
|
499
|
+
### 🏭 [OT Security MCP](https://github.com/Ansvar-Systems/ot-security-mcp)
|
|
500
|
+
**Query IEC 62443, NIST 800-82/53, and MITRE ATT&CK for ICS**
|
|
501
|
+
- Specialized for OT/ICS environments (manufacturing, energy, critical infrastructure)
|
|
502
|
+
- Security levels, Purdue Model, zone/conduit architecture
|
|
503
|
+
- MITRE ATT&CK for ICS threat intelligence
|
|
504
|
+
- **Install:** `npm install @ansvar/ot-security-mcp`
|
|
505
|
+
- **Use case:** Industrial control systems, SCADA, PLCs, critical infrastructure
|
|
506
|
+
|
|
507
|
+
---
|
|
508
|
+
|
|
459
509
|
## Developer Information
|
|
460
510
|
|
|
461
511
|
**Built by:** [Ansvar Systems](https://ansvar.eu) (Stockholm, Sweden) — specializes in AI-accelerated threat modeling and compliance tools
|
|
@@ -1,4 +1,4 @@
|
|
|
1
|
-
security_controls_mcp/__init__.py,sha256=
|
|
1
|
+
security_controls_mcp/__init__.py,sha256=PgbOBImGrDRMuQvn3U2E2rG6ywolNObFCWm8NLIJEPk,108
|
|
2
2
|
security_controls_mcp/__main__.py,sha256=4qAnCoMWk197dfiYhSjKJjYWpM-ZCQEHDu6dhZmf3Co,132
|
|
3
3
|
security_controls_mcp/cli.py,sha256=7LoL0pJOVIrvfvZn7TfBb9V8sLg8UdDBn35JI5c9r3s,7540
|
|
4
4
|
security_controls_mcp/config.py,sha256=7MW9pxKf9Fc0A8D25VW9SqSJbTMWw5r7mSezX164-oQ,4996
|
|
@@ -12,10 +12,10 @@ security_controls_mcp/data/framework-to-scf.json,sha256=cR0-3b8QDJ_0NVVrCqkcxr-E
|
|
|
12
12
|
security_controls_mcp/data/scf-controls.json,sha256=U6gtDVE8z_HtHdypLn9CLkCh4ZCS0Q78fk6EwQZyq9E,2188171
|
|
13
13
|
security_controls_mcp/extractors/__init__.py,sha256=_dQ1HOD7gTyw2FwQMMtgVTYQVSpxIdwBwqsdkSo1nyE,143
|
|
14
14
|
security_controls_mcp/extractors/pdf_extractor.py,sha256=nYd8mbKn_ejeEm02VZrFColRIfYFbP_oOuUm2SfOVqc,7490
|
|
15
|
-
security_controls_mcp-0.2.
|
|
16
|
-
security_controls_mcp-0.2.
|
|
17
|
-
security_controls_mcp-0.2.
|
|
18
|
-
security_controls_mcp-0.2.
|
|
19
|
-
security_controls_mcp-0.2.
|
|
20
|
-
security_controls_mcp-0.2.
|
|
21
|
-
security_controls_mcp-0.2.
|
|
15
|
+
security_controls_mcp-0.3.2.dist-info/licenses/LICENSE,sha256=RjWhs6k8-dS1rdwUk40lp3R0kf8UVOrlASOO0FTDRnU,743
|
|
16
|
+
security_controls_mcp-0.3.2.dist-info/licenses/LICENSE-DATA.md,sha256=I7iuA6E8TQyL3SMQltKFoOO12Ew2W0D8NSEmFAL5XDw,2096
|
|
17
|
+
security_controls_mcp-0.3.2.dist-info/METADATA,sha256=cIHlxZ1Df4fP-r09SvPyGKHrWRJvRZszqQcXrhspJvo,20377
|
|
18
|
+
security_controls_mcp-0.3.2.dist-info/WHEEL,sha256=wUyA8OaulRlbfwMtmQsvNngGrxQHAvkKcvRmdizlJi0,92
|
|
19
|
+
security_controls_mcp-0.3.2.dist-info/entry_points.txt,sha256=pDgfu1FAwJGyGp2yGU4uhiLrt9Wy06uzTybWh7frYCs,59
|
|
20
|
+
security_controls_mcp-0.3.2.dist-info/top_level.txt,sha256=BEEvk-ppPSeK1_OyEy0SIpt04wnf3nUorVOFU0fEmS0,22
|
|
21
|
+
security_controls_mcp-0.3.2.dist-info/RECORD,,
|
|
File without changes
|
{security_controls_mcp-0.2.1.dist-info → security_controls_mcp-0.3.2.dist-info}/entry_points.txt
RENAMED
|
File without changes
|
{security_controls_mcp-0.2.1.dist-info → security_controls_mcp-0.3.2.dist-info}/licenses/LICENSE
RENAMED
|
File without changes
|
|
File without changes
|
{security_controls_mcp-0.2.1.dist-info → security_controls_mcp-0.3.2.dist-info}/top_level.txt
RENAMED
|
File without changes
|