Security Framework
Unified NIST and OWASP security frameworks MCP server with 41 tools covering vulnerability triage, compliance mapping, and threat
Security Framework combines NIST and OWASP data sources into a unified MCP server providing over 4,700 security data points. NIST coverage includes SP 800-53 controls (1,196 items) and CSF 2.0 (225 items), while OWASP data spans 418 projects, ASVS 5.0, WSTG, Top 10 lists, MASVS, 815+ CWEs, and 559 CAPEC patterns. Live APIs provide NVD/CVE vulnerability data, CISA KEV, and EPSS scores. The 41 tools support security search, control retrieval, vulnerability triage, compliance mapping, threat modeling, and stack assessment.
Source
Repository: https://github.com/zer0-kr/security-framework-mcp
Maintain Security Framework?
Let people know it's listed here — add the badge (live metrics, light/dark aware) or a plain link to your README or docs.
[Security Framework on getagentictools](https://getagentictools.com/mcp/zer0-kr-security-framework-mcp?ref=badge)