FedRAMP 20x Requirements MCP Server

An MCP (Model Context Protocol) server that provides access to FedRAMP 20x security requirements and controls with Azure-first guidance. Its 23 documented tools cover ksi, evidence, definitions. It runs locally over stdio via the published package.

People connecting cloud infrastructure tools to Claude, Cursor, VS Code, or another MCP client. The project is written in Python.

VERIFIED ACTIVE

LAST COMMIT 2026-02-21 · ★ 5 · #89 OF 141 MAINTAINED CLOUD INFRASTRUCTURE · VERIFIED 2026-08-25

NOASSERTION · Python servers · how we verify → /methodology

01 · Install FedRAMP 20x Requirements

Claude Code

claude mcp add kevinrabun-fedramp20xmcp -- uvx fedramp-20x-mcp

Claude Desktop / Cursor / VS Code - add to config

{
  "mcpServers": {
    "kevinrabun-fedramp20xmcp": {
      "command": "uvx",
      "args": [
        "fedramp-20x-mcp"
      ]
    }
  }
}

Same JSON for Cursor. For VS Code, rename the top-level key from `mcpServers` to `servers`.

Using another client? Same JSON, different key

Claude Desktop · mcpServers

Cursor · mcpServers

VS Code · servers

Windsurf · mcpServers

Zed · context_servers

Cline · mcpServers

Roo Code · mcpServers

Continue · mcpServers

LibreChat · mcpServers

Gemini CLI · mcpServers

Codex CLI · mcp_servers

Full setup guides: every client.

02 · Evidence

Security posture

What to check before giving this server access to your agent - from the registry, GitHub, and our own probes. We don't score safety; we show what's verifiable.

runs as local process (stdio) - runs on your machine with your user's permissions

license no standard license detected - usage rights unclear; check the repo before commercial use

pypi package fedramp-20x-mcp - check the name against the project README before installing (PyPI has no namespace ownership)

registry namespace io.github.KevinRabun is GitHub-verified and matches the repo owner

03 · What FedRAMP 20x Requirements can do

Prose above is summarized from the project's README and registry record - no invented capabilities.

What you can build

With this server connected, an agent can get detailed information about a specific FedRAMP requirement or control, list all requirements within a specific family, search for requirements containing specific keywords, and get the FedRAMP definition for a specific term.

Capability map

Tools grouped from the project's README - what FedRAMP 20x Requirements lets an agent do.

Ksi

5 tools - e.g. Get detailed information about a specific Key Security Indicator.; List all Key Security Indicators.; Get evidence automation recommendations for a specific KSI. 65 active KSIs include automated evidence…

get_ksi · list_ksi · get_ksi_evidence_automation · get_ksi_evidence_queries · get_ksi_evidence_artifacts

read & search

4 tools - e.g. Get detailed information about a specific FedRAMP requirement or control.; List all requirements within a specific family.; Search for requirements containing specific keywords.

get_control · list_family_controls · search_requirements · get_definition

Definitions

2 tools - e.g. List all FedRAMP definitions with their terms.; Search FedRAMP definitions by keywords.

list_definitions · search_definitions

Power Shell

1 tool - e.g. Azure PowerShell cmdlets for automated collection

PowerShell

Vdr

1 tool - e.g. Vulnerability Detection and Response (59 requirements): Vulnerability scanning, patch management, remediation timeframes, deviation tracking, KEV vulnerability

VDR

Rsc

1 tool - e.g. Recommended Secure Configuration (10 requirements): Security baselines, configuration management, hardening standards

RSC

Ucm

1 tool - e.g. Using Cryptographic Modules (4 requirements): FIPS 140-3 compliance, key management, encryption standards

UCM

Scn

1 tool - e.g. Significant Change Notifications (26 requirements): Change management, notification procedures, impact assessment

SCN

Latest releases

v1.3.0 · 2026-02-13

Context-Aware False Positive Reduction · Adds an application_profile parameter to all code analysis tools, enabling users to specify their application type (CLI tool, MCP server, web app, etc.) to suppress irrelevant…

v1.2.0 · 2026-02-05

v1.1.0 · 2026-02-04

04 · Who maintains FedRAMP 20x Requirements

FedRAMP 20x Requirements is maintained by kevinrabun. We track 3 MCP servers from kevinrabun - 3 actively maintained, 14 combined GitHub stars, oldest repo from Nov 2025. Full record: all servers from kevinrabun.

  1. Judges Panel 45 judges that evaluate AI-generated code for security, cost, and quality with built-in AST. ★ 7
  2. GDPR Shift-Left Compliance GDPR compliance MCP server - article lookup, DPIA, ROPA, DSR, IaC analysis, Bicep templates. ★ 2

05 · Facts

category
cloud infrastructure - ranked #89 of 141 actively-maintained cloud infrastructure servers as of 2026-08-25.
registry
io.github.KevinRabun/FedRAMP20xMCP (active, first published 2025-12-02 · 19 versions)
packages
pypi:fedramp-20x-mcp

06 · FedRAMP 20x Requirements FAQ

Is FedRAMP 20x Requirements still maintained?

Yes - as of 2026-08-25, its last commit was 2026-02-21. We re-verify nightly.

What can FedRAMP 20x Requirements do?

With this server connected, an agent can get detailed information about a specific FedRAMP requirement or control, list all requirements within a specific family, search for requirements containing specific keywords, and get the FedRAMP definition for a specific term.

How do I install FedRAMP 20x Requirements?

Run `uvx fedramp-20x-mcp`. You can also paste the ready-made client config above.

Does FedRAMP 20x Requirements run locally?

Yes - it's a stdio server: it runs on your machine (via uvx) with your user's permissions. Your data stays local unless the server itself calls external APIs.

07 · Alternatives to FedRAMP 20x Requirements

More cloud infrastructure MCP servers · WHOIS · Rogue Binary MCP · Yaver · Kubently · Artifacts

More Python MCP servers · GDPR Shift-Left Compliance · Mockups Gallery · Argus Retrieval · Spotify Bulk Actions MCP · Viznoir · see all