71
/ 100
5 days ago
pulsemcp
AWS OSCAL
Provides AI assistants with tools to work with NIST's Open Security Controls Assessment Language. Includes OSCAL schema access, resource discovery, documentation queries, and component definition tools for security compliance workflows.
Is this your MCP?
Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.
Install from
M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.
// key findings
✅
No credential exfiltration, no sensitive file access, no obfuscation
Static analysis found nothing flowing your secrets to unexpected places.
✅
Open source with a license and README
Anyone can audit the code, the license is declared, and the publisher documents what it does.
// required environment variables
This server reads these from
process.env. You'll be asked to provide them before it can run.config
OSCAL_KB_IDconfig
AWS_PROFILEconfig
AWS_REGIONconfig
LOG_LEVELconfig
OSCAL_MCP_SERVER_NAMEconfig
OSCAL_MCP_TRANSPORTconfig
OSCAL_MCP_HOSTconfig
OSCAL_MCP_STATELESS_HTTPconfig
OSCAL_ALLOW_REMOTE_URISconfig
OSCAL_REQUEST_TIMEOUTconfig
OSCAL_MAX_URI_DEPTHconfig
OSCAL_COMPONENT_DEFINITIONS_DIRconfig
OSCAL_STORE_DB_PATH— _(empty)_ Path to a persistent SQLite database. When set, the index is reused across server restarts instead of being rebuilt each time.config
OSCAL_STORE_CACHE_SIZE— 100 Maximum number of parsed OSCAL documents to keep in the in-memory LRU cache.config
OSCAL_DOCUMENTS_DIR— Set the environment variable to the path of your OSCAL content directory. The path can be absolute or relative to the server's package directory. For example, in your MCP configuration:config
OSCAL_AGENT_SESSION_STORAGEconfig
OSCAL_AGENT_SESSION_DIRconfig
OSCAL_AGENT_SESSION_S3_BUCKETconfig
OSCAL_AGENT_MAX_TOKENSconfig
OSCAL_AGENT_MAX_RETRY_ATTEMPTSconfig
OSCAL_AGENT_RETRY_INITIAL_DELAYconfig
OSCAL_AGENT_RETRY_MAX_DELAY// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 5 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[](https://m8ven.ai/mcp/awslabs-mcp-server-for-oscal-1pkvp4)commit: de7f35614f50c9ade5d08b3e1c617112ea573ad1
code hash: f04927b11c8bbd2c8bebb795f4a6c6ccb6e336fe8cae1af21cb78f24292cb3be
verified: 7/26/2026, 8:45:43 AM