FedRAMP 20x Requirements MCP Server
An MCP (Model Context Protocol) server that provides access to FedRAMP 20x security requirements and controls with Azure-first guidance. Its 23 documented tools cover ksi, evidence, definitions. It runs locally over stdio via the published package.
People connecting cloud infrastructure tools to Claude, Cursor, VS Code, or another MCP client. The project is written in Python.
VERIFIED ACTIVE
LAST COMMIT 2026-02-21 · ★ 5 · #89 OF 141 MAINTAINED CLOUD INFRASTRUCTURE · VERIFIED 2026-08-25
NOASSERTION · Python servers · how we verify → /methodology
01 · Install FedRAMP 20x Requirements
Claude Code
claude mcp add kevinrabun-fedramp20xmcp -- uvx fedramp-20x-mcp Claude Desktop / Cursor / VS Code - add to config
{
"mcpServers": {
"kevinrabun-fedramp20xmcp": {
"command": "uvx",
"args": [
"fedramp-20x-mcp"
]
}
}
} Same JSON for Cursor. For VS Code, rename the top-level key from `mcpServers` to `servers`.
Using another client? Same JSON, different key
Claude Desktop · mcpServers
Cursor · mcpServers
VS Code · servers
Windsurf · mcpServers
Zed · context_servers
Cline · mcpServers
Roo Code · mcpServers
Continue · mcpServers
LibreChat · mcpServers
Gemini CLI · mcpServers
Codex CLI · mcp_servers
Full setup guides: every client.
02 · Evidence
Security posture
What to check before giving this server access to your agent - from the registry, GitHub, and our own probes. We don't score safety; we show what's verifiable.
runs as local process (stdio) - runs on your machine with your user's permissions
license no standard license detected - usage rights unclear; check the repo before commercial use
pypi package fedramp-20x-mcp - check the name against the project README before installing (PyPI has no namespace ownership)
registry namespace io.github.KevinRabun is GitHub-verified and matches the repo owner
03 · What FedRAMP 20x Requirements can do
Prose above is summarized from the project's README and registry record - no invented capabilities.
What you can build
With this server connected, an agent can get detailed information about a specific FedRAMP requirement or control, list all requirements within a specific family, search for requirements containing specific keywords, and get the FedRAMP definition for a specific term.
Capability map
Tools grouped from the project's README - what FedRAMP 20x Requirements lets an agent do.
Ksi
5 tools - e.g. Get detailed information about a specific Key Security Indicator.; List all Key Security Indicators.; Get evidence automation recommendations for a specific KSI. 65 active KSIs include automated evidence…
get_ksi · list_ksi · get_ksi_evidence_automation · get_ksi_evidence_queries · get_ksi_evidence_artifacts
read & search
4 tools - e.g. Get detailed information about a specific FedRAMP requirement or control.; List all requirements within a specific family.; Search for requirements containing specific keywords.
get_control · list_family_controls · search_requirements · get_definition
Definitions
2 tools - e.g. List all FedRAMP definitions with their terms.; Search FedRAMP definitions by keywords.
list_definitions · search_definitions
Power Shell
1 tool - e.g. Azure PowerShell cmdlets for automated collection
PowerShell
Vdr
1 tool - e.g. Vulnerability Detection and Response (59 requirements): Vulnerability scanning, patch management, remediation timeframes, deviation tracking, KEV vulnerability
VDR
Rsc
1 tool - e.g. Recommended Secure Configuration (10 requirements): Security baselines, configuration management, hardening standards
RSC
Ucm
1 tool - e.g. Using Cryptographic Modules (4 requirements): FIPS 140-3 compliance, key management, encryption standards
UCM
Scn
1 tool - e.g. Significant Change Notifications (26 requirements): Change management, notification procedures, impact assessment
SCN
Latest releases
v1.3.0 · 2026-02-13
Context-Aware False Positive Reduction · Adds an application_profile parameter to all code analysis tools, enabling users to specify their application type (CLI tool, MCP server, web app, etc.) to suppress irrelevant…
v1.2.0 · 2026-02-05
v1.1.0 · 2026-02-04
04 · Who maintains FedRAMP 20x Requirements
FedRAMP 20x Requirements is maintained by kevinrabun. We track 3 MCP servers from kevinrabun - 3 actively maintained, 14 combined GitHub stars, oldest repo from Nov 2025. Full record: all servers from kevinrabun.
05 · Facts
- repository
- github.com/kevinrabun/fedramp20xmcp
- category
- cloud infrastructure - ranked #89 of 141 actively-maintained cloud infrastructure servers as of 2026-08-25.
- registry
- io.github.KevinRabun/FedRAMP20xMCP (active, first published 2025-12-02 · 19 versions)
- packages
- pypi:fedramp-20x-mcp
06 · FedRAMP 20x Requirements FAQ
Is FedRAMP 20x Requirements still maintained?
Yes - as of 2026-08-25, its last commit was 2026-02-21. We re-verify nightly.
What can FedRAMP 20x Requirements do?
With this server connected, an agent can get detailed information about a specific FedRAMP requirement or control, list all requirements within a specific family, search for requirements containing specific keywords, and get the FedRAMP definition for a specific term.
How do I install FedRAMP 20x Requirements?
Run `uvx fedramp-20x-mcp`. You can also paste the ready-made client config above.
Does FedRAMP 20x Requirements run locally?
Yes - it's a stdio server: it runs on your machine (via uvx) with your user's permissions. Your data stays local unless the server itself calls external APIs.
07 · Alternatives to FedRAMP 20x Requirements
Alternatives to FedRAMP 20x Requirements
Maintained cloud infrastructure servers if FedRAMP 20x Requirements isn't the fit.
- Cloudflare MCP Server Cloudflare MCP servers ★ 4,105 · 2026-08-22
- Azure MCP Server All Azure MCP tools to create a seamless connection between AI agents and Azure services. ★ 3,598 · 2026-08-21
- Kubernetes MCP Server A Model Context Protocol (MCP) server for Kubernetes and OpenShift ★ 2,016 · 2026-08-24
- Azure DevOps (ADO) The MCP server for Azure DevOps, bringing the power of Azure DevOps directly to your agents. ★ 1,977 · 2026-08-24
- Terra Vision Cloud architecture diagrams generated from terraform plan, with official AWS, Azure, GCP icons ★ 1,615 · 2026-08-10
- Terraform Generate more accurate Terraform and automate workflows for HCP Terraform and Terraform Enterprise ★ 1,511 · 2026-08-24
Pairs well with
Servers that cover what FedRAMP 20x Requirements doesn't - only shown when the pairing reason fits the companion.
More cloud infrastructure MCP servers · WHOIS · Rogue Binary MCP · Yaver · Kubently · Artifacts
More Python MCP servers · GDPR Shift-Left Compliance · Mockups Gallery · Argus Retrieval · Spotify Bulk Actions MCP · Viznoir · see all