{"$schema":"https://wellknown.network/schemas/agent-record-v1.json","schemaVersion":"1","id":"ag_xupzkpwucknw","handle":"compliance-kb-mcp","url":"https://wellknown.network/agents/compliance-kb-mcp","links":{"self":"https://wellknown.network/agents/compliance-kb-mcp/record.json","html":"https://wellknown.network/agents/compliance-kb-mcp","markdown":"https://wellknown.network/agents/compliance-kb-mcp/record.md","api":"https://wellknown.network/api/v1/agents/compliance-kb-mcp","status":"https://wellknown.network/api/v1/agents/compliance-kb-mcp/status","claim":"https://wellknown.network/agents/compliance-kb-mcp/claim","claimApi":"https://wellknown.network/api/v1/claims","claimDescriptor":"https://wellknown.network/agents/compliance-kb-mcp/claim.json","badge":"https://wellknown.network/agents/compliance-kb-mcp/badge.svg","openapi":"https://wellknown.network/openapi.json","history":"https://wellknown.network/api/v1/agents/compliance-kb-mcp/history","tools":"https://wellknown.network/api/v1/agents/compliance-kb-mcp/tools"},"ard":{"identifier":"urn:air::server:compliance-kb-mcp","type":"application/mcp-server-card+json"},"kind":"mcp_server","declared":{"name":"compliance-kb-mcp","summary":"NIST SP 800-53 Rev 5 knowledge-base MCP server (324 controls) with SOC 2 TSC mappings and BM25 search.","description":"# compliance-kb-mcp\n\n[![License: Apache 2.0](https://img.shields.io/badge/License-Apache%202.0-blue.svg)](https://opensource.org/licenses/Apache-2.0)\n[![PyPI](https://img.shields.io/pypi/v/compliance-kb-mcp)](https://pypi.org/project/compliance-kb-mcp/)\n[![npm](https://img.shields.io/npm/v/@auditpilot/compliance-kb-mcp)](https://www.npmjs.com/package/@auditpilot/compliance-kb-mcp)\n\n`compliance-kb-mcp` is a typed MCP server that exposes the canonical\n**NIST Special Publication 800-53 Revision 5** control catalog (324 base\ncontrols across 20 families) over stdio transport. Each control is annotated\nwith the SOC 2 Trust Services Criteria identifiers it helps satisfy, derived\nfrom publicly available crosswalks.\n\nThis package is part of the AuditPilot SOC 2 readiness reference architecture\nand is designed to be easy to fork for other control catalogs.\n\n## Why NIST 800-53?\n\n- **Public domain.** NIST 800-53 is a U.S. federal government work and is in\n  the public domain (17 U.S.C. 105). The full canonical control text can be\n  redistributed without licensing concerns.\n- **Machine-readable canonical source.** NIST publishes the catalog in OSCAL\n  JSON, XML, and YAML at\n  [usnistgov/oscal-content](https://github.com/usnistgov/oscal-content).\n- **Well-mapped to SOC 2.** The AICPA publishes a TSC to 800-53 mapping\n  (registration required); supplementary public crosswalks like the\n  [Open Security Architecture project](https://opensecurityarchitecture.org/frameworks/soc2-tsc)\n  make the relationship transparent.\n\n## Positioning\n\n> AuditPilot maps your environment to NIST 800-53 controls and shows which\n> SOC 2 Trust Services Criteria are satisfied by your 800-53 coverage. The\n> included `compliance-kb-mcp` ships with NIST 800-53 Rev 5 (public domain)\n> and curated SOC 2 TSC mappings. For canonical SOC 2 TSC text, refer to\n> AICPA-CIMA's published 2017 Trust Services Criteria -- that text is\n> copyright-protected and is not redistributed in this package.\n\n## Features\n\n- Strict…","publisher":null,"homepage":"https://github.com/Tharanitharan-M/auditpilot","repository":"https://github.com/Tharanitharan-M/auditpilot","version":"0.2.0","license":"Apache-2.0","protocols":["mcp"],"tags":["auditpilot","compliance","mcp","model-context-protocol","nist-800-53","soc2"],"pricing":null,"endpoints":[{"url":"pypi:compliance-kb-mcp","type":"package_pypi","auth":null,"probeable":false}],"skills":null,"tools":null,"extra":null,"attribution":{"kind":"pypi","name":"pypi","license":"pypi","repoUrl":"pypi","summary":"pypi","version":"pypi","description":"pypi","homepageUrl":"pypi"}},"derived":{"capabilities":[{"slug":"dev.package-management","name":"Packages & Dependencies","confidence":1,"provenance":"derived"}],"categories":["dev"],"language":"en"},"observed":{"status":"unknown","statusReason":"Distributed as a package to run locally; no network endpoint to check.","lastOkAt":null,"lastProbedAt":null,"statusComputedAt":null,"reliability30d":null,"latestObservations":[],"tools":null,"package":{"name":"compliance-kb-mcp","registry":"pypi","observedAt":"2026-11-09T02:25:49.979Z","publishedAt":"2026-05-06T03:01:46.902624Z","latestVersion":"0.2.0"},"toolSurface":null,"endpointFacts":[]},"verification":{"claimed":false,"claimedAt":null,"proofs":[]},"provenance":{"sources":[{"source":"pypi","key":"compliance-kb-mcp","url":"https://pypi.org/project/compliance-kb-mcp/","firstSeenAt":"2026-09-09T12:27:23.289Z","fetchedAt":"2026-11-09T02:24:33.694Z","normalizedAt":"2026-11-09T02:24:33.694Z"}]},"firstSeenAt":"2026-09-09T12:27:23.289Z","updatedAt":"2026-11-09T02:25:49.979Z"}