Mcp Server Scf
Wire your agent into the SCF Controls Platform to manage controls, evidence, risk, and third-party risk (TPRM) from chat during security and compliance work.
Overview
mcp-server-scf is a Ship-phase MCP server that connects your agent to 72 SCF Controls Platform tools for controls, evidence, risk, and TPRM.
What is this MCP server?
- 72 MCP tools for controls, evidence, risk, and TPRM on SCF Controls Platform
- stdio npm package mcp-server-scf with required SCF_API_KEY (scf_ prefix)
- Configurable SCF_API_URL with UK default https://uk.scfcontrolsplatform.app
- Version 1.4.4 from MarkAC007/mcp-server-scf on GitHub
- 72 tools for controls, evidence, risk, and TPRM
- Package version 1.4.4 as mcp-server-scf on npm
- Required secret env SCF_API_KEY; default API URL https://uk.scfcontrolsplatform.app
What problem does it solve?
Founders drowning in security questionnaires and control trackers cannot let their agent update evidence or risks without a governed API bridge.
Who is it for?
Solo SaaS builders already on SCF Controls Platform who want agent-assisted compliance, evidence, and vendor risk workflows.
Skip if: Teams without an SCF subscription, builders who only need static policy templates, or pure offensive pentest tooling.
What do I get? / Deliverables
Once SCF_API_KEY is set and mcp-server-scf is registered, your agent can query and mutate controls-platform data for audits and TPRM from the IDE.
- stdio MCP bridge exposing 72 SCF platform tools to your agent
- Agent-driven updates and queries for controls, evidence, risk, and TPRM records
Recommended MCP Servers
Journey fit
How it compares
GRC platform MCP connector with 72 tools, not an on-repo static security linter skill.
Common Questions / FAQ
Who is mcp-server-scf for?
mcp-server-scf is for builders and operators using the SCF Controls Platform who want MCP clients to manage controls, evidence, risk, and TPRM programmatically.
When should I use mcp-server-scf?
Use it in Ship and Operate when you are gathering evidence, mapping controls, or running TPRM reviews—and during Validate when scoping compliance scope for a new product.
How do I add mcp-server-scf to my agent?
Install the npm package mcp-server-scf, set SCF_API_KEY from Settings > API Keys (scf_ prefix), optionally set SCF_API_URL, and add the stdio MCP server in Claude Code or Cursor.