AWS OSCAL

Official Amazon Web Services Security

AI agent tools for Open Security Controls Assessment Language (OSCAL)

Official

Published from the GitHub organization awslabs, whose domain GitHub verified.

as of Oct 4, 2026

Commands and config follow each client’s own MCP docs. Some servers also need an API key or environment variables; see the server’s documentation.

claude mcp add aws-oscal -- uvx mcp-server-for-oscal

codex mcp add aws-oscal -- uvx mcp-server-for-oscal

Cursor mcp.json

{
  "mcpServers": {
    "aws-oscal": {
      "command": "uvx",
      "args": [
        "mcp-server-for-oscal"
      ]
    }
  }
}

Gemini CLI settings.json

{
  "mcpServers": {
    "aws-oscal": {
      "command": "uvx",
      "args": [
        "mcp-server-for-oscal"
      ]
    }
  }
}

VS Code .vscode/mcp.json

{
  "servers": {
    "aws-oscal": {
      "command": "uvx",
      "args": [
        "mcp-server-for-oscal"
      ]
    }
  }
}

By transport: whether the client’s docs list a transport this server offers. It doesn’t cover sign-in or other requirements.

This data comes from the Official MCP Registry.