Compliance Trestle MCP

MCP server to easily use compliance-trestle (OSCAL tool) from Claude, Roo, or any MCP-compliant client. Its 6 documented tools cover trestle, author, profile, generate. It runs locally over stdio via the published package.

People connecting documentation tools to Claude, Cursor, VS Code, or another MCP client. The project is written in Python.

VERIFIED ACTIVE

LAST COMMIT 2026-08-12 · ★ 2 · #105 OF 183 MAINTAINED DOCUMENTATION · VERIFIED 2026-08-25

Apache-2.0 · Python servers · how we verify → /methodology

01 · Install Compliance Trestle MCP

Claude Code

claude mcp add oscal-compass-compliance-trestle-mcp -- uvx compliance-trestle-mcp

Claude Desktop / Cursor / VS Code - add to config

{
  "mcpServers": {
    "oscal-compass-compliance-trestle-mcp": {
      "command": "uvx",
      "args": [
        "compliance-trestle-mcp"
      ]
    }
  }
}

Same JSON for Cursor. For VS Code, rename the top-level key from `mcpServers` to `servers`.

Using another client? Same JSON, different key

Claude Desktop · mcpServers

Cursor · mcpServers

VS Code · servers

Windsurf · mcpServers

Zed · context_servers

Cline · mcpServers

Roo Code · mcpServers

Continue · mcpServers

LibreChat · mcpServers

Gemini CLI · mcpServers

Codex CLI · mcp_servers

Full setup guides: every client.

02 · Evidence

Security posture

What to check before giving this server access to your agent - from the registry, GitHub, and our own probes. We don't score safety; we show what's verifiable.

runs as local process (stdio) - runs on your machine with your user's permissions

license Apache-2.0 - declared in the repository

pypi package compliance-trestle-mcp - check the name against the project README before installing (PyPI has no namespace ownership)

registry namespace io.github.oscal-compass is GitHub-verified and matches the repo owner

03 · What Compliance Trestle MCP can do

Prose above is summarized from the project's README and registry record - no invented capabilities.

What you can build

With this server connected, an agent can generate markdown controls from a catalog, generate markdown for profiles, and resolve profile to catalog.

Capability map

Tools grouped from the project's README - what Compliance Trestle MCP lets an agent do.

auth & access

4 tools - e.g. Generate markdown controls from a catalog; Generate markdown for profiles; Resolve profile to catalog

trestle_author_catalog_generate · trestle_author_profile_generate · trestle_author_profile_resolve · trestle_author_profile_assemble

Trestle

2 tools - e.g. Initialize a trestle workspace; Import OSCAL models (Catalog/Profile/etc.) from a file or URL

trestle_init · trestle_import

04 · Who maintains Compliance Trestle MCP

compliance-trestle-mcp is maintained by oscal-compass. It's the only MCP server we track from this author; the repo dates to Feb 2026.

05 · Facts

category
documentation - ranked #105 of 183 actively-maintained documentation servers as of 2026-08-25.
registry
io.github.oscal-compass/compliance-trestle-mcp (active, first published 2026-02-26)
packages
pypi:compliance-trestle-mcp

06 · Compliance Trestle MCP FAQ

Is Compliance Trestle MCP still maintained?

Yes - as of 2026-08-25, its last commit was 2026-08-12. We re-verify nightly.

What can Compliance Trestle MCP do?

With this server connected, an agent can generate markdown controls from a catalog, generate markdown for profiles, and resolve profile to catalog.

How do I install Compliance Trestle MCP?

Run `uvx compliance-trestle-mcp`. You can also paste the ready-made client config above.

Does Compliance Trestle MCP run locally?

Yes - it's a stdio server: it runs on your machine (via uvx) with your user's permissions. Your data stays local unless the server itself calls external APIs.

07 · Alternatives to Compliance Trestle MCP