@compligent-mcp/csf/README.md

Compligent MCP Client - NIST CSF 2.0 with Prompts (connects to hosted compliance database)

# Compligent SP 800-53 Suite MCP Client

[![npm version](https://badge.fury.io/js/%40compligent-mcp%2F53-suite.svg)](https://badge.fury.io/js/%40compligent-mcp%2F53-suite)
[![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)

A thin MCP client that connects to Compligent's hosted NIST SP 800-53 Suite compliance database, providing access to 16+ security and privacy controls tools through the Model Context Protocol.

## ✨ Features

- **🚀 Easy NPX Installation**: Get started in seconds with `npx @compligent-mcp/53-suite`
- **☁️ Hosted Database**: Connect to Compligent's integrated compliance database
- **🛠️ 16+ Tools**: Complete SP 800-53/53A/53B toolkit via MCP protocol
- **🔒 Optional Authentication**: API key support for premium features
- **⚡ Real-time Updates**: Always access the latest compliance data
- **🌐 Cross-Framework Integration**: Built-in mappings to CSF, NICE, and other frameworks

## 🎯 Available Tools

### Base Tools (8)
- `list_sp53_control_families` - List all 20 SP 800-53 control families
- `get_sp53_family` - Get detailed family information with controls
- `get_sp53_control` - Get specific control with enhancements
- `search_sp53_controls` - Search controls by keyword and filters
- `get_sp53_assessment_procedures` - Get assessment procedures for controls
- `list_sp53_baselines` - List security and privacy baselines
- `get_sp53_baseline` - Get baseline details with control mappings
- `generate_sp53_assessment_plan` - Generate comprehensive assessment plans

### Enhanced Tools (8)
- `analyze_sp53_control_overlay` - Analyze control overlays for tailoring
- `generate_sp53_control_tailoring` - Generate tailored implementation guidance
- `generate_sp53_continuous_monitoring_dashboard` - Create monitoring configurations
- `generate_sp53_poam_template` - Generate POA&M templates
- `analyze_sp53_automation_opportunities` - Identify automation opportunities
- `map_sp53_control_to_frameworks` - Map controls to other frameworks
- `generate_sp53_ssp_content` - Generate System Security Plan content
- `analyze_sp53_control_dependencies` - Analyze control dependencies

## 🚀 Quick Start

### For Claude Desktop Users

1. **Install and configure** in your Claude Desktop MCP settings:

```json
{
  "mcpServers": {
    "sp-800-53-suite": {
      "command": "npx",
      "args": ["@compligent-mcp/53-suite"],
      "env": {
        "COMPLIGENT_API_KEY": "your_api_key_here"
      }
    }
  }
}
```

2. **Restart Claude Desktop** and start using SP 800-53 tools!

### For Direct MCP Usage

```bash
# Install globally
npm install -g @compligent-mcp/53-suite

# Or use with npx
npx @compligent-mcp/53-suite

# Test the connection
echo '{"jsonrpc":"2.0","method":"tools/list","id":1}' | npx @compligent-mcp/53-suite
```

## 🔧 Configuration

### Environment Variables

- `COMPLIGENT_API_KEY` (optional): API key for premium features and higher rate limits
- `NODE_ENV` (optional): Set to `production` for production usage

### Example Usage

```json
// List all control families
{
  "jsonrpc": "2.0",
  "method": "tools/call",
  "params": {
    "name": "list_sp53_control_families",
    "arguments": {}
  },
  "id": 1
}

// Get a specific control
{
  "jsonrpc": "2.0",
  "method": "tools/call",
  "params": {
    "name": "get_sp53_control",
    "arguments": {
      "control_id": "AC-02"
    }
  },
  "id": 2
}

// Search controls
{
  "jsonrpc": "2.0",
  "method": "tools/call",
  "params": {
    "name": "search_sp53_controls",
    "arguments": {
      "keyword": "access control",
      "family": "AC",
      "limit": 5
    }
  },
  "id": 3
}
```

## 📊 Data Coverage

- **SP 800-53**: 20 families, 324+ controls, 800+ enhancements
- **SP 800-53A**: 1000+ examine, interview, and test procedures
- **SP 800-53B**: Security and privacy baselines (Low, Moderate, High)
- **Cross-Framework Mappings**: Integrated relationships to CSF 2.0, NICE, CIS, and more

## 🔐 Authentication (Optional)

For premium features and higher rate limits, obtain an API key:

1. **Visit**: [https://compligent.io/api-keys](https://compligent.io/api-keys)
2. **Generate** your API key
3. **Configure** the environment variable:

```bash
export COMPLIGENT_API_KEY="your_api_key_here"
```

## 🌟 Why Use This Client?

### ✅ **Advantages of Hosted Database**
- Always up-to-date compliance data
- Cross-framework relationships and mappings
- Premium bridge tools (coming soon)
- High performance and reliability
- No local data management required

### ✅ **Easy Installation**
- Simple NPX command
- No complex setup or configuration
- Works with Claude Desktop out of the box
- Compatible with any MCP client

### ✅ **Enterprise Ready**
- Built for production compliance workflows
- Optional authentication for enhanced features
- Rate limiting and usage analytics
- Professional support available

## 🛠️ Troubleshooting

### Connection Issues
```bash
# Test connectivity
curl https://53-suite-mcp-server-production.up.railway.app/health

# Check client logs
npx @compligent-mcp/53-suite 2>&1 | head -10
```

### Common Solutions
- **406 Error**: Ensure your HTTP client accepts both `application/json` and `text/event-stream`
- **Connection Timeout**: Check internet connectivity and firewall settings
- **Rate Limited**: Consider using an API key for higher limits

## 📈 Performance

- **Tool Listing**: < 100ms
- **Simple Queries**: < 200ms  
- **Complex Analysis**: < 2s
- **Search Operations**: < 500ms

## 🤝 Support

- **Documentation**: [https://compligent.io/docs/53-suite](https://compligent.io/docs/53-suite)
- **Issues**: [GitHub Issues](https://github.com/compligent/mcp-platform/issues)
- **Enterprise**: [support@compligent.io](mailto:support@compligent.io)

## 📄 License

MIT © [Compligent](https://compligent.io)

---

**🚀 Get started today:** `npx @compligent-mcp/53-suite`