Google Cloud Compliance Manager

Provides an MCP server to interact with Google Cloud Compliance Manager for frameworks, controls, and deployments.

python

1

GitHub Stars

python

Language

6 months ago

First Indexed

2 months ago

Catalog Refreshed

Documentation & install

Readme and setup notes from the catalogue, plus a client-ready config you can copy for your MCP host.

Installation

Add the following to your MCP client configuration file.

Configuration

View docs

{
  "mcpServers": {
    "vb30-compliance-manager-mcp-server": {
      "command": "uv",
      "args": [
        "--env-file=/path/to/your/env",
        "--directory",
        "/path/to/the/repo",
        "run",
        "compliance_manager_mcp.py"
      ]
    }
  }
}

You can deploy and manage Google Cloud Compliance Manager using this MCP server, enabling automated interactions with frameworks, cloud controls, and deployments to organize your Google Cloud environment.

How to use

Use an MCP client to connect to the Compliance Manager MCP Server and perform operations to discover, inspect, deploy, monitor, and manage compliance posture across your organization, folders, or projects. You can list available frameworks, view detailed framework and cloud control information, create and delete framework deployments, and inspect deployment states and configurations.

How to install

Prerequisites: you need Python runtime and the MCP client tooling installed in your environment. You will run the server through a local MCP command runner.

Step by step commands:

# Install the MCP runtime tooling (if required by your setup)
# Follow your environment’s standard practice to install uv and Python dependencies

# Prepare your environment and repository

# Run the MCP server using the provided entry point
uv run compliance_manager_mcp.py

Configuration and usage notes

Configure your MCP client to connect to this server using a dedicated MCP server entry. The server in this guide is exposed as a local stdio server started via uv. You will need to reference the command and arguments exactly as shown in the configuration snippet.

Authentication is handled through Google Cloud authentication mechanisms. Ensure you have one of the following available where the server runs: Application Default Credentials or the GOOGLE_APPLICATION_CREDENTIALS environment variable pointing to a valid service account key file.

Available tools

list_frameworks

Lists all compliance frameworks available within an organization, including built-in and custom frameworks.

get_framework

Retrieves detailed information about a specific framework, including its cloud controls and regulatory mappings.

list_cloud_controls

Lists all cloud controls available for an organization, which are the technical items used to meet compliance requirements.

get_cloud_control

Gets detailed information about a specific cloud control, including its rules, parameters, and enforcement mode.

list_framework_deployments

Lists all framework deployments for a given parent resource such as an organization, folder, or project.

get_framework_deployment

Retrieves detailed information about a specific framework deployment, including its state and configuration.

create_framework_deployment

Creates a new framework deployment on a target resource to apply a compliance framework.

delete_framework_deployment

Deletes a framework deployment from a target resource.

list_cloud_control_deployments

Lists all cloud control deployments for a given parent resource.

get_cloud_control_deployment

Retrieves detailed information about a specific cloud control deployment, including its state and enforcement mode.