An MCP server that provides tools to author OSCAL security compliance documentation
MCPpedia last refreshed this data
io.github.oscal-compass/compliance-trestle-mcp is an MCP server that an MCP server that provides tools to author OSCAL security compliance documentation. Its tool list has not been published yet over stdio, sse and http, requires no API key, and scores 82/100 on MCPpedia's security, maintenance and efficiency rubric.
Config is the same across clients - only the file and path differ.
{
"mcpServers": {
"trestle": {
"args": [
"--from",
"./trestle-mcp-tmp",
"trestle-mcp"
],
"command": "uvx"
}
}
}Are you the author?
Add this badge to your README to show your security score and help users find safe servers.
An MCP server that provides tools to author OSCAL security compliance documentation
This server supports HTTP transport. Be the first to test it - help the community know if it works.
Five weighted categories - click any category to see the underlying evidence.
No known CVEs.
Checked mcp-cli against OSV.dev.
Click any tool to inspect its schema.
Be the first to review
Have you used this server?
Share your experience - it helps other developers decide.
Sign in to write a review.
Others in legal
Korean law: statutes, precedents, ordinances, treaties and citation verification (법제처 API).
Supplier lien and notice deadlines by project scope. Public lien guides for all 50 states and DC.
Missouri Revised Statutes — state statutes by citation.
Nevada Revised Statutes — state statutes by citation.
MCP Security Weekly
Get CVE alerts and security updates for io.github.oscal-compass/compliance-trestle-mcp and similar servers.
Start a conversation
Ask a question, share a tip, or report an issue.
Sign in to join the discussion.
MCP server to easily use compliance-trestle (OSCAL tool) from OpenCode, Claude, or any MCP-compliant client.
mcp-name: io.github.oscal-compass/compliance-trestle-mcp
This project can be used in the following two ways:
Choose the option that best fits your workflow.
Add the following to opencode.json in your workspace:
{
"mcp": {
"trestle": {
"type": "local",
"command": ["uvx", "--from", "compliance-trestle-mcp==<version>", "trestle-mcp"],
"environment": { "TRESTLE_MCP_TOOLS": "all" },
"enabled": true
}
}
}
Replace <version> with the release you want; drop ==<version> to track the
latest. TRESTLE_MCP_TOOLS chooses how much of the command surface to expose —
all is every tool, and the default without it is the authoring lifecycle. See
Choosing which tools are exposed.
Open OpenCode, confirm the trestle tools are listed, and execute as needed.
https://github.com/user-attachments/assets/a85b0927-4981-41d1-9a03-f22becb7a6e2
mcp.json config{
"mcpServers": {
"trestle": {
"command": "uvx",
"args": ["--from", "./trestle-mcp-tmp", "trestle-mcp"]
}
}
}
Save this as mcp.json in your current directory.
uvx mcp-cli tools --config-file mcp.json
Sample output (tools available):
13 Available Tools
┌─────────┬───────────────────────────────────┬───────────────────────────────────────────────────────────────────┐
│ Server │ Tool │ Description │
├─────────┼───────────────────────────────────┼───────────────────────────────────────────────────────────────────┤
│ trestle │ trestle_init │ Initialize a trestle working directory. │
│ trestle │ trestle_import │ Import an existing OSCAL model into the trestle workspace. │
│ trestle │ trestle_validate │ Validate a standalone OSCAL file against the OSCAL schema. │
│ trestle │ trestle_author_catalog_generate │ Generate Catalog controls in markdown form from a catalog. │
│ trestle │ trestle_author_catalog_assemble │ Assemble markdown files of controls into a Catalog json file. │
│ trestle │ trestle_author_profile_generate │ Generate markdown documentation set for controls in a profile. │
│ trestle │ trestle_author_profile_assemble │ Assemble markdown controls into a Profile JSON file. │
│ trestle │ trestle_author_profile_resolve │ Resolve an OSCAL profile to a resolved profile catalog. │
│ trestle │ trestle_author_component_generate │ Generate component markdown from a component-definition. │
│ trestle │ trestle_author_component_assemble │ Assemble markdown controls into a component-definition json file. │
│ trestle │ trestle_task_csv_to_oscal_cd │ Convert a CSV file to an OSCAL component definition. │
│ trestle │ trestle_task_csv_to_oscal_mc │ Convert a CSV file to an OSCAL mapping collection. │
│ trestle │ trestle_task_xlsx_to_oscal_poam │ Convert a FedRAMP XLSX spreadsheet to an OSCAL POA&M. │
└─────────┴───────────────────────────────────┴───────────────────────────────────────────────────────────────────┘
Those 13 are the default selection. The server implements 29 tools in all: 28 that groups