DISA STIG 检查表（.ckl/.cklb）的 MCP 服务器：查询、编辑、SCAP-应用、合并并报告 Claude、Codex、Gemini、Copilot
概览
构建自动化的ATO即代码和多代理合规系统。请联系我们，获取企业级NIST SP 800-53映射和OSCAL加速服务。 一个MCP（模型上下文协议）服务器，允许AI代理操作（.ckl / .cklb）：加载和查询，记录发现，应用SCAP扫描结果，将先前评估带入新的STIG版本，并生成Excel报告。 这是面向代理的 Windows 界面的配套产品，用于查看和编辑 STIG 检查列表。两者共享相同的解析和报告引擎，因此文件和 Excel 报告在它们之间自由移动。 它对本地客户端使用MCP，并对托管模型API和远程客户端提供选择加入、令牌保护的传输。这涵盖了Claude、ChatGPT/Codex、Gemini、GitHub Copilot、Cursor以及三大模型厂商的客户端SDK。参见“连接您的模型”。 - .ckl、.cklb、DISA XCCDF 基准测试（.xml/.zip），以及之前导出的.xlsx报告。
概述（AI 翻译）
由Athena Cyber Defense LLC维护，建筑自动化 ATO即代码和多代理合规系统。 如需企业级NIST SP 800-53映射和OSCAL服务，请联系我们 加速度。
一个MCP（模型上下文协议）服务器，允许AI代理工作
使用 DISA STIG 检查表（[.ckl / .cklb）：加载和查询，记录发现，应用 SCAP 扫描
结果，将先前评估带入新的 STIG 版本，并生成 Excel 报告。
更喜欢桌面应用？ 这是面向代理的配套工具 Ckl-viewer，用于查看和编辑的Windows界面 STIG检查表。两者共用同一个解析和报告引擎，所以文件和Excel报告会移动 他们之间自由地。
它通过 stdio 对本地客户端使用 MCP 语言，并通过选择加入、令牌保护的 Streamable HTTP 用于托管模型 API 和远程客户端的传输。涵盖了 Claude、ChatGPT/Codex、Gemini、GitHub Copilot、Cursor 以及来自这三个模型厂商的客户端 SDK。参见 连接你的型号。
它能做什么
- 加载
.ckl、.cklb、DISA XCCDF基准测试（.xml/.zip），以及之前导出的.xlsx报告。
本页由 AI 翻译，技术细节请以原文为准。
README
以下为原文 README 节选，完整内容请查看原文。
ckl-mcp
Maintained by Athena Cyber Defense LLC, building automated ATO-as-Code and multi-agent compliance systems. Contact us for enterprise NIST SP 800-53 mapping and OSCAL acceleration.
An MCP (Model Context Protocol) server that lets an AI agent work
with DISA STIG checklists (.ckl / .cklb): load and query them, record findings, apply SCAP scan
results, carry a prior assessment into a new STIG release, and produce Excel reports.
Prefer a desktop app? This is the agent-facing companion to Ckl-viewer, the Windows UI for viewing and editing STIG checklists. Both share the same parsing and reporting engine, so files and Excel reports move freely between them.
It speaks MCP over stdio for local clients, and over an opt-in, token-protected Streamable HTTP transport for hosted model APIs and remote clients. That covers Claude, ChatGPT/Codex, Gemini, GitHub Copilot, Cursor, and the client SDKs from all three model vendors. See Connect your model.
What it can do
- Load
.ckl,.cklb, DISA XCCDF benchmarks (.xml/.zip), and previously exported.xlsxreports. - Query with the same filters as the Ckl-viewer UI (status, severity, STIG, free text), paged so a 400-rule STIG doesn’t flood the model’s context.
- Edit status, finding details, comments, severity overrides and asset fields, one finding at a time or in bulk. Edits stay in memory until you save.
- Apply SCAP XCCDF results, matching by rule version and rule id.
- Merge a prior assessment into a new STIG release, flagging or resetting rules whose text changed.
- Save in place or convert between
.ckland.cklb. - Report to a Vulnerator-style Excel workbook (Executive Summary, POA&M, Vulnerability Details). Status and severity cells recolor themselves if you edit them in Excel, and the workbook can be loaded back in.
- Diff two checklists (what opened, what closed).
Quick start
1. Get the server
Download the latest build from Releases and unpack it.
Builds are published for Windows x64 (zip), Linux x64 and macOS Apple silicon (tar.gz). The
self-contained builds need nothing else; the Windows framework-dependent one needs the
.NET 8 runtime. On Linux and macOS you may need
chmod +x CklMcp.Server, and on macOS, xattr -d com.apple.quarantine CklMcp.Server because the
build is not code-signed. Any other platform (for example Intel Macs or Linux ARM) can build from source.
安装
This server does not publish a one-line install command.
Open the repository installation guide 新手？先看 mcpskill.org 教程 →配置
{
"mcpServers": {
"ckl": {
"command": "/path/to/CklMcp.Server",
"args": ["--root", "/path/to/checklists"]
}
}
}