com.mactechsolutionsllc.www/stig

Est-ce que com.mactechsolutionsllc.www/stig est sûr ?

Au dernier audit MCP Hub, le serveur MCP « com.mactechsolutionsllc.www/stig » est classé « Non encore testé ». Référencé dans l'annuaire. Seul le pentest comportemental fait foi, et il n'a pas encore été exécuté sur ce serveur. Le verdict est réévalué en continu ; consultez la fiche pour l'état à jour.

Méthode : MCP Hub analyse la description de chaque outil (couche 1) et, pour le verdict fort, exécute le serveur dans une micro-VM isolée avec leurres et réseau bloqué (couche 2). On publie des noms et des compteurs, jamais le contenu brut renvoyé par un outil.

Les 4 outils

• export_stig_checklist≈ 712 tokens

  Generate a DISA STIG Viewer checklist (.ckl XML) for a benchmark, optionally filtered by severity and pre-populated with findings. This is the artifact an assessment actually hands over - STIG Viewer opens it, eMASS ingests it, and a POA&M is written from it. Rules you do not supply a status for come out as Not_Reviewed. Call this when the user wants a checklist, a scan result recorded, or evidence to submit, rather than just to read a rule.

  Paramètres, retour & exemple (6)

  Paramètres

  • host_ip · string · optionnel
  • product · string · requis · cisco_ios_router_ndm | cisco_ios_router_rtr | cisco_ios_switch_l2s | cisco_ios_switch_ndm | cisco_ios_switch_rtr | cisco_ise_nac | cisco_ise_ndm | cisco_nxos_switch_l2s
    Which benchmark to build the checklist from
  • findings · array · optionnel
    Per-rule results. Anything omitted stays Not_Reviewed - an unreviewed rule must never be reported as passing.
  • severity · string · optionnel · high | medium | low
    Limit to one severity, e.g. high for a CAT I-only checklist
  • host_fqdn · string · optionnel
  • host_name · string · optionnel
    Asset hostname recorded in the checklist

  Exemple d'appel

  {"name": "export_stig_checklist", "arguments": {"product": "cisco_ios_router_ndm"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"ckl": "texte", "note": "texte", "filename": "texte", "benchmark": "texte", "rule_count": 1, "status_counts": {}}}

• get_stig_rule≈ 431 tokens

  Get the complete detail for one DISA STIG rule by its SV id (from search_stig): the requirement discussion, the exact check procedure an assessor runs, the fix text, severity, NIST control mapping, and whether it is SCAP-automatable. Call this when the user needs to implement or verify a specific rule.

  Paramètres, retour & exemple (1)

  Paramètres

  • sv_id · string · requis
    Rule id, e.g. "SV-257777r991589_rule" (fragments matched if unique)

  Exemple d'appel

  {"name": "get_stig_rule", "arguments": {"sv_id": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"sv_id": "texte", "title": "texte", "nist_id": "texte", "product": "texte", "category": "texte", "fix_text": "texte", "severity": "texte", "benchmark": "texte", "check_text": "texte", "description": "texte", "automation_level": "texte", "automation_source": "texte"}}

• list_stig_benchmarks≈ 120 tokens

  List the DISA STIG benchmarks this server covers, with versions, rule counts, and severity breakdowns. Call this first when unsure whether a platform is covered.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "list_stig_benchmarks", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• search_stig≈ 561 tokens

  Search DISA STIG hardening rules across RHEL 8, RHEL 9, Windows 11, Windows Server 2022, and Cisco IOS Router NDM benchmarks - by keyword (matched against rule IDs and titles first, then descriptions), filterable by product, severity (high/medium/low, mapping to CAT I/II/III), category, and automation level. Call this when the user asks how to harden one of these platforms, what a STIG requires, or which rules cover a topic like SSH, passwords, or auditing. Returns summaries; use get_stig_rule for full check and fix text.

  Paramètres, retour & exemple (7)

  Paramètres

  • limit · integer · optionnel
    Max results per page (default 20)
  • query · string · requis
    Keyword or rule id fragment, e.g. "ssh banner" or "SV-257777"
  • format · string · optionnel · summary | links
    "summary" (default) returns each rule inline as JSON. "links" returns MCP resource links, which hosts can render as pickable items the user opens on demand. Not smaller - the title and severity you need in order to choose are the bulk of either shape - so choose on how the client presents results, not to save tokens.
  • offset · integer · optionnel
    Skip this many matches. Pass the next_offset from a previous response to reach results beyond the first page.
  • product · string · optionnel · cisco_ios_router_ndm | cisco_ios_router_rtr | cisco_ios_switch_l2s | cisco_ios_switch_ndm | cisco_ios_switch_rtr | cisco_ise_nac | cisco_ise_ndm | cisco_nxos_switch_l2s
    Limit to one benchmark
  • severity · string · optionnel · high | medium | low
    high=CAT I, medium=CAT II, low=CAT III
  • automation · string · optionnel · automated | manual_only

  Exemple d'appel

  {"name": "search_stig", "arguments": {"query": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

C'est votre serveur ?

Revendiquez-le sur l'espace créateur (preuve GitHub, domaine ou npm) pour afficher le badge « propriétaire vérifié » et lancer un pentest comportemental à la demande afin d'obtenir le badge « Vérifié ».

Créer un compte / revendiquer →

Source

https://www.mactechsolutionsllc.com/api/mcp/stig