MCP SiftCurated directory

NIST CSF 2.0 MCP 服务器

by rocklambros

针对 NIST 网络安全框架 2.0（NIST Cybersecurity Framework 2.0）提供的全面 Model Context Protocol（MCP）服务器实现，支持通过 36 个专业 MCP 工具对所有框架元素进行编程访问，具备多层安全性、全面评估能力和高级报告功能。需要外部数据文件，如 './nist_csf.db'（数据库）和 './data/csf-2.0-framework.json'（框架数据），可通过环境变量进行配置。

Education & sciencestdioCommunity

Repository-wide counts · Cached 2025-11-04

View on GitHubCheck installation steps

Overview

The NIST CSF 2.0 MCP 服务器 MCP server is a publicly available project. Review the upstream repository for installation instructions, supported tools, compatibility, permissions, and current maintenance status.

Configuration

Configuration, transport, authentication, and runtime requirements vary by project. Open the repository before connecting and use the smallest set of credentials and permissions required.

Open the NIST CSF 2.0 MCP 服务器 repository to read the latest documentation.

KEEP EXPLORING

Compare source, connection, and authentication details before choosing an implementation.

View the complete category

Deep Research

u14app

Community

Deep Research 使用强大的 AI 模型快速生成深入的研究报告。支持 SSE API 和 MCP 服务器。需要在 .env 文件中配置环境变量以设置服务器端的 API 密钥和相关参数。

Education & science

TorchLeet

Exorust

Community

TorchLeet provides 68 PyTorch problems from real ML/AI interviews at companies like Google, Meta, and Anthropic. It includes an AI Tutor MCP server that gives AI assistants access to problems, hints, prep plans, and learning paths with a no-spoilers teaching style.

Education & science

Zotero MCP

54yyyu

Community

用于 Zotero 的模型上下文协议（MCP）服务器，将您的 Zotero 研究库与 Claude 及其他 AI 助手连接。支持本地和 Web API 访问、PDF 注释提取以及高级搜索功能。完整本地 API 功能需要 Python 3.10 及 Zotero 7 以上版本。配置可以通过环境变量或 JSON 配置文件进行设置。

Education & science

mcp-brasil

mcp-brasil

Community

MCP Server for 70 Brazilian public data sources covering economy, legislation, transparency, judiciary, elections, environment, health, education, public security, and more. Some APIs require optional API keys configured via environment variables (e.g., TRANSPARENCIA_API_KEY, DATAJUD_API_KEY, META_ACCESS_TOKEN).

Education & science
FROM THE SOURCE

Repository README

Build-time snapshot · Retrieved 2026-10-05

View original

NIST CSF 2.0 Assessment Platform

Docker TypeScript MCP Tools

Complete NIST Cybersecurity Framework 2.0 implementation with professional assessment GUI and comprehensive MCP server. Built for cybersecurity professionals, CISOs, and AI integration.

🎯 740 assessment questions • 🛡️ Multi-tier security • 📊 Executive dashboards • 🤖 40+ MCP tools

🚀 Quick Start

Choose your deployment option based on your use case:

Perfect for: CISOs, Security Teams, Executive Presentations

git clone https://github.com/rocklambros/nist-csf-2-mcp-server.git
cd nist-csf-2-mcp-server/gui-platform
docker-compose up

Access Your Platform:

Features:

  • Company-size aware question filtering
  • Persistent assessment sessions (pause/resume anytime)
  • Real-time executive dashboards with industry benchmarking
  • Professional PDF reports for board presentations

Option 2: MCP Server for AI Integration

Perfect for: Claude Desktop, ChatGPT, Technical Users

Claude Desktop Setup:

{
  "mcpServers": {
    "nist-csf": {
      "command": "sh",
      "args": ["-c", "docker run -i --rm ghcr.io/rocklambros/nist-csf-2-mcp-server:latest node dist/index.js 2>/dev/null"],
      "env": {"MCP_SERVER": "true"}
    }
  }
}

🎨 Assessment GUI Experience

Workflow

  1. Organization Setup (2 minutes): Name, size, industry → automatic question filtering
  2. Function Assessment (2-4 hours, resumable): Navigate NIST CSF functions with dual questions
  3. Executive Dashboard (Instant): Real-time results with industry comparison

Professional Features

  • Dual Question Types: Maturity rating + Implementation status per subcategory
  • Smart Filtering: 740 total questions → relevant subset based on organization size
  • Industry Benchmarking: Compare against similar organizations in your sector
  • Executive Ready: Professional styling suitable for CISO and board presentations

🤖 MCP Tools (40 Tools)

Assessment & Scoring

  • start_assessment_workflow - Begin comprehensive assessment
  • persistent_comprehensive_assessment - Resume assessments across sessions
  • assess_maturity - Calculate maturity scores across NIST functions
  • calculate_risk_score - Risk assessment with heat map generation
  • get_assessment_questions - 740-question bank with size filtering

Planning & Implementation

  • generate_gap_analysis - Current vs target state analysis
  • create_implementation_plan - Phased roadmap with timelines
  • generate_priority_matrix - Effort/impact prioritization
  • estimate_implementation_cost - Financial planning and ROI analysis
  • track_progress - Implementation progress monitoring

Reporting & Export

  • generate_executive_report - Board-ready executive summaries
  • generate_dashboard - Real-time dashboard data
  • export_data - Multi-format data export (PDF, CSV, Excel)
  • generate_compliance_report - Multi-framework compliance mapping

Complete Tool Documentation with Examples →

📊 Technical Specifications

  • Framework: Complete NIST CSF 2.0 (6 functions, 34 categories, 185 subcategories)
  • Questions: 740 across 4 dimensions (Risk, Maturity, Implementation, Effectiveness)
  • Performance: <100ms response times, 100+ concurrent users
  • Security: Multi-tier authentication (development → API key → OAuth 2.1)
  • Integration: MCP protocol, REST API, WebSocket real-time updates

🔧 Advanced Configuration

Security Modes

# Development
AUTH_MODE=disabled docker-compose up

# Production
AUTH_MODE=oauth OAUTH_ISSUER=https://your-provider.com docker-compose up

Performance Options

# Monitoring enabled
ENABLE_MONITORING=true docker-compose up

# Development with hot reload
docker-compose -f docker-compose.dev.yml up

📚 Documentation

🆘 Support

📋 License

MIT License

Enterprise-grade cybersecurity assessment platform for NIST CSF 2.0 compliance, executive reporting, and professional security evaluation.