compliancecow/cow-mcp

이 페이지는 AI로 자동 번역되었습니다. 기술적인 세부 사항은 원문을 확인하세요. 원문 보기

13 stars 19 forks 품질 72 트렌드 34

This repository contains the MCP servers for ComplianceCow. It leverages four specialized servers—Rules, Insights, Workflow, and Assistant—to automate GRC tasks, execute compliance rules, and...

개요

MCP (Model Context Protocol) servers are designed to process structured requests from AI agents, perform domain-specific operations, and return context-aware responses. The ComplianceCow MCP servers enable seamless integration with MCP-compatible hosts like Claude Desktop and Goose Desktop/CLI for secure, modular, and intelligent compliance automation. The ComplianceCow MCP servers support the for seamless local integration with your MCP host. At the core is the , which continuously ingests data such as assessment runs, evidence, and compliance status. The server actively pulls information from: - Vector stores for semantic search - Relational databases for structured data - Graph databases for relationship queries - File storage systems for evidence artifacts We have organized ComplianceCow’s MCP tools into 4 distinct servers. In the MCP ecosystem, using fewer tools per server yields better results and better performance.

README

원문 README의 일부입니다. 원문 보기.

ComplianceCow MCP Servers

Introduction
Glossary
Architecture
MCP Servers
Getting Started
MCP Host Setup
- Claude Desktop
- Goose Desktop/CLI
Running Locally
Tools Reference
FAQ

Introduction

Glossary

Keyword	Description	Example
Control	A compliance or security control that needs to be implemented to ensure adherence to regulations, standards, and policies	Ensure MFA is enabled for all users
Assessment	A collection of controls organized hierarchically, representing an industry standard or cybersecurity framework	PCI DSS 4.0
Assessment Run	The verification of controls in an assessment for a given time period, including evidence collection	-
Check	A rule or verification for compliance or conformance	Check if MFA is enabled for all AWS users
Resource Type	Category or class of resources	AWS EC2, AWS S3
Resource	Instance of a resource type for which checks are performed	Specific EC2 instances, GitHub repositories
Asset	A group of resources of various types	AWS services, Kubernetes, GitHub
Evidence	Data aggregated through checks against resources for a given control	CSV file with AWS users and their MFA status
Action	Activity (automated or manual) to respond or remediate based on conditions	Create a JIRA ticket for non-compliant EC2 instance
Rule	A reusable automation unit that executes tasks and generates evidence	AWS MFA Compliance Check Rule
Workflow	An event-driven automation sequence with conditions and activities	Alert workflow on critical finding

Architecture

The ComplianceCow MCP servers support the STDIO transport mechanism for seamless local integration with your MCP host. At the core is the Compliance Graph, which continuously ingests data such as assessment runs, evidence, and compliance status. The server actively pulls information from:

Vector stores for semantic search
Relational databases for structured data
Graph databases for relationship queries
File storage systems for evidence artifacts

MCP Servers

We have organized ComplianceCow’s MCP tools into 4 distinct servers.

GitHub에서 전체 README 보기

설치

This server does not publish a one-line install command.

Open the repository installation guide MCP 초보자라면? mcpskill.org 가이드부터 시작하세요 →

설정

{
  "mcpServers": {
    "ComplianceCow-Rules": {
      "command": "<UV_BIN_PATH>",
      "args": [
        "--directory",
        "<PATH_TO_COW_MCP_REPO>",
        "run",
        "main.py"
      ],
      "env": {
        "CCOW_HOST": "<YOUR_CCOW_HOST>",
        "CCOW_CLIENT_ID": "<YOUR_CLIENT_ID>",
        "CCOW_CLIENT_SECRET": "<YOUR_CLIENT_SECRET>",
        "MCP_TOOLS_TO_BE_INCLUDED": "rules"
      }
    },
    "ComplianceCow-Insights": {
      "command": "<UV_BIN_PATH>",
      "args": [
        "--directory",
        "<PATH_TO_COW_MCP_REPO>",
        "run",
        "main.py"
      ],
      "env": {
        "CCOW_HOST": "<YOUR_CCOW_HOST>",
        "CCOW_CLIENT_ID": "<YOUR_CLIENT_ID>",
        "CCOW_CLIENT_SECRET": "<YOUR_CLIENT_SECRET>",
        "MCP_TOOLS_TO_BE_INCLUDED": "insights"
      }
    },
    "ComplianceCow-Workflow": {
      "command": "<UV_BIN_PATH>",
      "args": [
        "--directory",
        "<PATH_TO_COW_MCP_REPO>",
        "run",
        "main.py"
      ],
      "env": {
        "CCOW_HOST": "<YOUR_CCOW_HOST>",
        "CCOW_CLIENT_ID": "<YOUR_CLIENT_ID>",
        "CCOW_CLIENT_SECRET": "<YOUR_CLIENT_SECRET>",
        "MCP_TOOLS_TO_BE_INCLUDED": "workflow"
      }
    },
    "ComplianceCow-Assistant": {
      "command": "<UV_BIN_PATH>",
      "args": [
        "--directory",
        "<PATH_TO_COW_MCP_REPO>",
        "run",
        "main.py"
      ],
      "env": {
        "CCOW_HOST": "<YOUR_CCOW_HOST>",
        "CCOW_CLIENT_ID": "<YOUR_CLIENT_ID>",
     
…