
Security News
The Hidden Blast Radius of the Axios Compromise
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.
@compligent/csf-cli
Advanced tools
Compligent CSF MCP Client - Connect to NIST CSF 2.0 via Compligent Gateway
Compligent CSF MCP Client - Connect to NIST CSF 2.0 via Compligent Gateway
A streamlined NPX client for accessing NIST Cybersecurity Framework 2.0 tools through the Compligent platform. This client provides authenticated access to your hosted database with cross-framework mappings and unified compliance tools.
# Authenticate with Compligent Gateway via GitHub OAuth
npx @compligent/csf-cli auth
# Generate Claude Desktop configuration automatically
npx @compligent/csf-cli setup
# List available CSF tools
npx @compligent/csf-cli tools list
# Call a specific CSF tool
npx @compligent/csf-cli tools call list_csf_functions
# Get help
npx @compligent/csf-cli --help
After running npx @compligent/csf-cli setup, add this to your Claude Desktop config:
Location: ~/.config/claude_desktop/config.json (macOS/Linux)
{
"mcpServers": {
"compligent-csf": {
"command": "npx",
"args": ["@compligent/csf-cli"]
}
}
}
Then restart Claude Desktop and ask:
auth - Authenticate with GitHub OAuthlogout - Clear authenticationstatus - Show authentication and config statusconfig show - Display current configurationconfig reset - Reset to default settingsconfig set-env <env> - Set environment (development/staging/production)tools list - List all available CSF toolstools call <tool> [params] - Call a specific tool
--json '{"param": "value"}' for JSON parametersparam=value for simple parameterssetup - Generate Claude Desktop configurationThrough the Compligent Gateway, you have access to 13+ CSF tools:
list_csf_functions - List all 6 CSF functionsget_csf_function - Get function detailssearch_csf_categories - Search categories and subcategoriesget_csf_implementation_guide - Implementation guidance by organization typeget_csf_implementation_examples - Practical implementation examplesget_csf_examples_by_topic - Examples by topic (zero trust, cloud, etc.)get_csf_industry_examples - Industry-specific examplesmap_csf_to_framework - Map to other frameworks (SP 800-53, ISO 27001, etc.)search_csf_implementation_examples - Advanced example searchget_csf_implementation_statistics - Coverage statisticsget_csf_maturity_indicators - Maturity indicatorsfind_similar_csf_examples - Find similar examplesnpx @compligent/csf-cli - no setup complexitynpx @compligent/csf-cli authnpx @compligent/csf-cli config set-env development
# Uses: http://localhost:8787
npx @compligent/csf-cli config set-env production
# Uses: https://compligent-gateway.workers.dev
npx @compligent/csf-cli config set-env staging
# Uses: https://staging-api.compligent.io
npx @compligent/csf-cli tools call list_csf_functions
npx @compligent/csf-cli tools call get_csf_examples_by_topic \
--json '{"topic": "zero_trust", "max_examples": 5}'
npx @compligent/csf-cli tools call search_csf_implementation_examples \
--json '{"query": "cloud security", "max_results": 10}'
npx @compligent/csf-cli tools call map_csf_to_framework \
--json '{"target_framework": "SP 800-53", "function_id": "GV"}'
When using the Compligent Gateway, you get access to exclusive features:
# Clear authentication and retry
npx @compligent/csf-cli logout
npx @compligent/csf-cli auth
# Reset configuration
npx @compligent/csf-cli config reset
npx @compligent/csf-cli status
# Enable verbose output for debugging
npx @compligent/csf-cli --verbose tools list
# View current authentication and config status
npx @compligent/csf-cli status
MIT License - see LICENSE file for details.
Built with ❤️ by the Compligent Team
Transform your cybersecurity compliance with unified, intelligent tools.
FAQs
Compligent CSF MCP Client - Connect to NIST CSF 2.0 via Compligent Gateway
We found that @compligent/csf-cli demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.