MCP server

MacTech CMMC / NIST 800-171

com.mactechsolutionsllc.www/cmmc

Checked 26 Oct 2026, 08:29 UTC · Connected to it and listed its tools

NIST 800-171 controls and 800-171A objectives, crosswalks, exact SPRS scoring, POA&M generation.

Working at last checkVerified publisher: mactechsolutionsllc.comAbout 4,019 tokens per request once connected13 tools

Website

https://www.mactechsolutionsllc.com/api/mcp

At a glance

Type: MCP server
Publisher: mactechsolutionsllc.com (verified by the MCP Registry)
Status: Working at last check
Tools: 13
Token cost: About 4,019 tokens per request
Sets up in: Claude Code, Claude Desktop, Codex, Gemini CLI, Cursor, VS Code, Antigravity, ChatGPT, OpenAI API, Grok
Last checked: 26 Oct 2026, 08:29 UTC

Connect it to your agent

Add to Cursor Add to VS Code VS Code Insiders

Opens the app, which shows the server and asks you to confirm. For other apps, copy the setup below.

Claude Code

claude mcp add --transport http cmmc https://www.mactechsolutionsllc.com/api/mcp

Claude Desktop

Settings → Connectors → Add custom connector, and paste the URL.

Codex (config.toml)

[mcp_servers.cmmc]
url = "https://www.mactechsolutionsllc.com/api/mcp"

Gemini CLI

{"mcpServers":{"cmmc":{"httpUrl":"https://www.mactechsolutionsllc.com/api/mcp"}}}

Cursor

{"mcpServers":{"cmmc":{"url":"https://www.mactechsolutionsllc.com/api/mcp"}}}

VS Code

{"servers":{"cmmc":{"type":"http","url":"https://www.mactechsolutionsllc.com/api/mcp"}}}

Antigravity

agy mcp add cmmc https://www.mactechsolutionsllc.com/api/mcp

ChatGPT

Settings → Apps & Connectors → Advanced settings: turn on Developer mode, then Create a connector and paste the URL. Which plans can do this varies.

OpenAI API (Responses tools)

{"type":"mcp","server_label":"cmmc","server_url":"https://www.mactechsolutionsllc.com/api/mcp","require_approval":"always"}

Grok (xAI API tools)

{"type":"mcp","server_label":"cmmc","server_url":"https://www.mactechsolutionsllc.com/api/mcp"}

Tools

calculate_sprs_score ~375 tokens
Compute an exact SPRS score per the DoD Assessment Methodology: start at 110 and subtract each unimplemented requirement's Annex A weight (floor −203). Pass the control numbers that are NOT implemented; optionally pass 3.5.3 and/or 3.13.11 as partially implemented for their sliding-scale values (MFA
check_contract_type_eligibility ~359 tokens
Determine whether a contractor can legally be awarded a given contract type, based on the business systems that type requires. A cost-reimbursement contract may be awarded only if the accounting system is adequate for determining costs (FAR 16.301-3), and T&M billing cannot be substantiated without
crosswalk_control ~233 tokens
Map a security control across frameworks: NIST SP 800-171 Rev 2 ↔ NIST SP 800-53 (FedRAMP Moderate) ↔ NIST CSF 2.0 ↔ SOC 2 Trust Services Criteria. Accepts an 800-171 number ("3.5.3"), an 800-53 id ("AC-2"), a CSF category ("PR.AA" style / "GV.RM"), or a SOC 2 criterion ("CC6"). Call this when the u
crosswalk_revisions ~219 tokens
Explain how NIST SP 800-171 Rev 2 and Rev 3 differ, and what happened to a specific requirement between them. Call this when someone is implementing Rev 3 early, holds a Rev 3 citation and needs the Rev 2 obligation, or asks which revision applies to them. Answers the question DoD guidance forces on
determine_cmmc_level ~339 tokens
Determine which CMMC level (1, 2, or 3) applies to a defense contractor based on the data they handle and the clauses in their contracts, and - separately - which assessment type may actually be designated today. Those are not the same question: CMMC Phase II was suspended on 13 July 2026, so C3PAO
generate_poam_entries ~512 tokens
Turn a list of unimplemented NIST SP 800-171 controls into structured Plan of Action & Milestones (POA&M) entries, and - the part that decides whether the plan is usable - sort them by eligibility under 32 CFR 170.21. Most gaps CANNOT go on a CMMC Level 2 POA&M: the rule bars every requirement worth
get_assessment_objectives ~197 tokens
Get the official NIST SP 800-171A assessment objectives for one NIST SP 800-171 Rev 2 requirement - the exact "Determine if..." objectives a CMMC Level 2 assessor scores, plus the potential assessment methods (what an assessor examines, who they interview, what they test). Call this when the user as
list_controls ~406 tokens
List NIST SP 800-171 Rev 2 requirements with their DoD Assessment Methodology (SPRS) weights, optionally filtered by control family name or by point weight (5, 3, or 1). Call this to enumerate the 110 CMMC Level 2 controls, to find all 5-point (highest-impact) requirements, or to see everything in o
list_level1_practices ~116 tokens
List all 17 CMMC Level 1 basic safeguarding practices with their FAR 52.204-21 clause citations - the complete requirement set for contractors handling Federal Contract Information (FCI) only. Call this when the user asks what CMMC Level 1 requires.
lookup_clause ~293 tokens
Explain what a FAR or DFARS cybersecurity clause obliges a contractor to do: what triggers it, the concrete duties, the reporting deadlines, what it flows down to subcontractors, and which other clauses come with it. Covers 52.204-21, 252.204-7008, 252.204-7012, 252.204-7019, 252.204-7020, 252.204-7
lookup_control ~311 tokens
Get one NIST SP 800-171 Rev 2 security requirement by number (e.g. "3.5.3"): the full requirement text, its control family, and its exact DoD Assessment Methodology (SPRS) point weight, including the sliding-scale rules for 3.5.3 (MFA) and 3.13.11 (FIPS cryptography). Call this when the user asks wh
lookup_rev3_requirement ~328 tokens
Get one NIST SP 800-171 REVISION 3 requirement by its zero-padded number (e.g. "03.01.01"): the requirement statement, its organization-defined parameters, the 800-171A Rev 3 assessment objectives, and whether it was withdrawn. Rev 3 has 97 active requirements of 130 numbered across 17 families, wit
scope_assessment ~331 tokens
Work out which assets fall inside a CMMC assessment boundary, and what each category obliges. Returns the DoD asset categories (CUI Asset, Security Protection Asset, Contractor Risk Managed Asset, Specialized Asset, Out-of-Scope) with how each is treated at assessment, plus the CUI categories that m

Browse

Related MCP servers

MacTech STIG
2,029 DISA STIG rules with official check/fix text, CCI mappings, and .ckl checklist export.
ContinueOps Public MCP
BC/DR & compliance tools: DORA, NIS2, NIST CSF, GDPR, SOC 2, CMMC, CAF, ISO 27001, FCA/PRA.
SignalTender B2B, GovCon & LegalTech MCP Server
B2B, GovCon & LegalTech MCP server for live RFPs, contract parsing, compliance & proposal tools.
Nist Standards
NIST Standards MCP pack
Compliance Intelligence
What one compliance standard already evidences of another, with the reasoning and the rejections.
Bidda Compliance
10,065 source-verified compliance nodes, 39 pillars, 25 MCP tools (EU AI Act, GDPR, NIST, MITRE).
BlackVeil DNS & Email Security Scanner
DNS and email security scanner with 81 MCP tools for SPF, DMARC, DNSSEC, SSL, and brand audits.
Keelen
Autonomous dev team steered from chat: plain-English requests in, tested merged PRs out.

Badge for your README

[![AptLynx](https://aptlynx.net/badge/com.mactechsolutionsllc.www/cmmc.svg)](https://aptlynx.net/servers/com.mactechsolutionsllc.www/cmmc)

Listing text is written by the maker; AptLynx lists tools and does not vouch for them. Find another tool · Browse by topic · For agents