# mcp-server-for-oscal

> OSCAL tools for AI agents

- **URL**: https://www.freshcrate.ai/projects/mcp-server-for-oscal
- **Author**: awslabs
- **Category**: MCP Servers
- **Latest version**: `v0.4.0` (2026-04-02)
- **License**: Apache-2.0
- **Source**: https://github.com/awslabs/mcp-server-for-oscal
- **Language**: Python
- **GitHub**: 38 stars, 6 forks
- **Registry**: github
- **Tags**: `compliance-as-code`, `compliance-automation`, `continuous-compliance`, `mcp-server`, `oscal`, `python`, `security-as-code`, `security-assurance`, `strands-agents`

## Description

OSCAL tools for AI agents

## Recent releases

| Version | Date | Urgency | Changes |
| --- | --- | --- | --- |
| `v0.4.0` | 2026-04-02 | High | ## What's Changed  * #96 OSCAL Content Index (OscalStore)  by @dfkunstler in https://github.com/awslabs/mcp-server-for-oscal/pull/99. A new SQLite-backed content store that indexes all 8 OSCAL model types (catalogs, SSPs, profiles, component definitions, assessment plans/results, POA&Ms, mapping collections). Includes: -- FTS5 full-text search across all indexed OSCAL documents -- LRU caching for parsed Trestle models -- Change detection via SHA-256 content hashing -- Three database modes: |
| `v0.3.3` | 2026-03-23 | Medium | ## What's Changed * feat(#89) refactor oscal strands agent and wire up for standalone use @dfkunstler in https://github.com/awslabs/mcp-server-for-oscal/pull/90 and https://github.com/awslabs/mcp-server-for-oscal/pull/91   **Full Changelog**: https://github.com/awslabs/mcp-server-for-oscal/compare/v0.3.2...v0.3.3 |
| `v0.3.2` | 2026-03-20 | Low | * CI bug-fix only; see release notes for v0.3.1 for details |
| `v0.3.1` | 2026-03-20 | Low | ## What's Changed * ci(mcp-registry): #87 Add MCP Registry publishing support  by @dfkunstler in https://github.com/awslabs/mcp-server-for-oscal/pull/88 * build(deps): #82 Upgrade compliance-trestle to 4.0.1  by @dfkunstler in https://github.com/awslabs/mcp-server-for-oscal/pull/83 * fix(tools): #84 Add offset/limit pagination to list tools by @dfkunstler in https://github.com/awslabs/mcp-server-for-oscal/pull/86 * build(deps): bump pyjwt from 2.11.0 to 2.12.0 by @dependabot[bot] in https:// |
| `v0.3.0` | 2026-03-06 | Low | ## What's Changed * feat(tools): #65 Add support for OSCAL Capabilities to query_component_definition by @dfkunstler in https://github.com/awslabs/mcp-server-for-oscal/pull/68 * Basic agentcore runtime support (#69) by @dfkunstler in https://github.com/awslabs/mcp-server-for-oscal/pull/71 * feat(#6): add validate_oscal_content, validate_oscal_file MCP tools by @ethanolivertroy in https://github.com/awslabs/mcp-server-for-oscal/pull/58 * chore(#75): Upgrade to OSCAL v1.2.1; improve Kiro steer |
| `v0.2.4` | 2026-02-17 | Low | ## What's Changed * refactor(main): Defer tool registration and improve logging configuration (#54) by @dfkunstler in https://github.com/awslabs/mcp-server-for-oscal/pull/55 * #51 update tools readme to reflect new component definition tools by @dfkunstler in https://github.com/awslabs/mcp-server-for-oscal/pull/56 * build(deps): bump cryptography from 46.0.3 to 46.0.5 by @dependabot[bot] in https://github.com/awslabs/mcp-server-for-oscal/pull/57 * Issue 20 update awesome oscal by @networkbm |
| `v0.2.1` | 2026-02-09 | Low | ## What's Changed * fix(query_component_definition): Add deduplication logic to prevent unnecessary reprocessing of zip files by @dfkunstler in https://github.com/awslabs/mcp-server-for-oscal/pull/53   **Full Changelog**: https://github.com/awslabs/mcp-server-for-oscal/compare/v0.2.0...v0.2.1 |
| `v0.2.0` | 2026-02-06 | Low | ## What's Changed * feat:(#45) Added 3 new mcp tools to query component definitions (Experimental component definitions for AWS bundled with this release) by @dfkunstler in https://github.com/awslabs/mcp-server-for-oscal/pull/50 * build(deps): bump the minor-updates group with 6 updates by @dependabot[bot] in https://github.com/awslabs/mcp-server-for-oscal/pull/47 * build(deps): bump python-multipart from 0.0.21 to 0.0.22 by @dependabot[bot] in https://github.com/awslabs/mcp-server-for-oscal/ |
| `v0.1.9` | 2026-01-20 | Low | ## What's Changed * Improved install instructions, etc. in README * build(deps): bump the minor-updates group with 4 updates by @dependabot[bot] in https://github.com/awslabs/mcp-server-for-oscal/pull/39 * build(deps): bump the minor-updates group with 4 updates by @dependabot[bot] in https://github.com/awslabs/mcp-server-for-oscal/pull/40 * fix(#41): Skip test test_exact_filename_matching_behavior() if not ru… by @dfkunstler in https://github.com/awslabs/mcp-server-for-oscal/pull/42   ** |
| `v0.1.8` | 2026-01-07 | Low | ## What's Changed * chore: Update project metadata and improve documentation by @dfkunstler   * build(deps): bump strands-agents from 1.19.0 to 1.21.0 by @dependabot[bot] in https://github.com/awslabs/mcp-server-for-oscal/pull/33 * build(deps): bump the minor-updates group with 8 updates by @dependabot[bot] in https://github.com/awslabs/mcp-server-for-oscal/pull/34 * build(deps): bump wrapt from 1.17.3 to 2.0.1 in the major-updates-prod group by @dependabot[bot] in https://github.com/awslab |

## Citation

- HTML: https://www.freshcrate.ai/projects/mcp-server-for-oscal
- Markdown: https://www.freshcrate.ai/projects/mcp-server-for-oscal.md
- Dependencies JSON: https://www.freshcrate.ai/api/projects/mcp-server-for-oscal/deps

_Generated by freshcrate.ai. Indexes github releases for AI-agent ecosystem packages._