compliancecow/cow-mcp

このページは AI により自動翻訳されています。技術的な詳細は原文をご確認ください。原文を見る

13 stars 19 forks 品質 72 トレンド 34

This repository contains the MCP servers for ComplianceCow. It leverages four specialized servers—Rules, Insights, Workflow, and Assistant—to automate GRC tasks, execute compliance rules, and...

概要

MCP (Model Context Protocol) servers are designed to process structured requests from AI agents, perform domain-specific operations, and return context-aware responses. The ComplianceCow MCP servers enable seamless integration with MCP-compatible hosts like Claude Desktop and Goose Desktop/CLI for secure, modular, and intelligent compliance automation. The ComplianceCow MCP servers support the for seamless local integration with your MCP host. At the core is the , which continuously ingests data such as assessment runs, evidence, and compliance status. The server actively pulls information from: - Vector stores for semantic search - Relational databases for structured data - Graph databases for relationship queries - File storage systems for evidence artifacts We have organized ComplianceCow’s MCP tools into 4 distinct servers. In the MCP ecosystem, using fewer tools per server yields better results and better performance.

README

以下は原文 README の抜粋です。原文を見る。

ComplianceCow MCP Servers

Introduction
Glossary
Architecture
MCP Servers
Getting Started
MCP Host Setup
- Claude Desktop
- Goose Desktop/CLI
Running Locally
Tools Reference
FAQ

Introduction

Glossary

Keyword	Description	Example
Control	A compliance or security control that needs to be implemented to ensure adherence to regulations, standards, and policies	Ensure MFA is enabled for all users
Assessment	A collection of controls organized hierarchically, representing an industry standard or cybersecurity framework	PCI DSS 4.0
Assessment Run	The verification of controls in an assessment for a given time period, including evidence collection	-
Check	A rule or verification for compliance or conformance	Check if MFA is enabled for all AWS users
Resource Type	Category or class of resources	AWS EC2, AWS S3
Resource	Instance of a resource type for which checks are performed	Specific EC2 instances, GitHub repositories
Asset	A group of resources of various types	AWS services, Kubernetes, GitHub
Evidence	Data aggregated through checks against resources for a given control	CSV file with AWS users and their MFA status
Action	Activity (automated or manual) to respond or remediate based on conditions	Create a JIRA ticket for non-compliant EC2 instance
Rule	A reusable automation unit that executes tasks and generates evidence	AWS MFA Compliance Check Rule
Workflow	An event-driven automation sequence with conditions and activities	Alert workflow on critical finding

Architecture

The ComplianceCow MCP servers support the STDIO transport mechanism for seamless local integration with your MCP host. At the core is the Compliance Graph, which continuously ingests data such as assessment runs, evidence, and compliance status. The server actively pulls information from:

Vector stores for semantic search
Relational databases for structured data
Graph databases for relationship queries
File storage systems for evidence artifacts

MCP Servers

We have organized ComplianceCow’s MCP tools into 4 distinct servers.

GitHub で README 全文を見る

インストール

This server does not publish a one-line install command.

Open the repository installation guide MCP 初心者？mcpskill.org のガイドから始めましょう →

設定

{
  "mcpServers": {
    "ComplianceCow-Rules": {
      "command": "<UV_BIN_PATH>",
      "args": [
        "--directory",
        "<PATH_TO_COW_MCP_REPO>",
        "run",
        "main.py"
      ],
      "env": {
        "CCOW_HOST": "<YOUR_CCOW_HOST>",
        "CCOW_CLIENT_ID": "<YOUR_CLIENT_ID>",
        "CCOW_CLIENT_SECRET": "<YOUR_CLIENT_SECRET>",
        "MCP_TOOLS_TO_BE_INCLUDED": "rules"
      }
    },
    "ComplianceCow-Insights": {
      "command": "<UV_BIN_PATH>",
      "args": [
        "--directory",
        "<PATH_TO_COW_MCP_REPO>",
        "run",
        "main.py"
      ],
      "env": {
        "CCOW_HOST": "<YOUR_CCOW_HOST>",
        "CCOW_CLIENT_ID": "<YOUR_CLIENT_ID>",
        "CCOW_CLIENT_SECRET": "<YOUR_CLIENT_SECRET>",
        "MCP_TOOLS_TO_BE_INCLUDED": "insights"
      }
    },
    "ComplianceCow-Workflow": {
      "command": "<UV_BIN_PATH>",
      "args": [
        "--directory",
        "<PATH_TO_COW_MCP_REPO>",
        "run",
        "main.py"
      ],
      "env": {
        "CCOW_HOST": "<YOUR_CCOW_HOST>",
        "CCOW_CLIENT_ID": "<YOUR_CLIENT_ID>",
        "CCOW_CLIENT_SECRET": "<YOUR_CLIENT_SECRET>",
        "MCP_TOOLS_TO_BE_INCLUDED": "workflow"
      }
    },
    "ComplianceCow-Assistant": {
      "command": "<UV_BIN_PATH>",
      "args": [
        "--directory",
        "<PATH_TO_COW_MCP_REPO>",
        "run",
        "main.py"
      ],
      "env": {
        "CCOW_HOST": "<YOUR_CCOW_HOST>",
        "CCOW_CLIENT_ID": "<YOUR_CLIENT_ID>",
     
…