Skip to content
Agentmart
Submit a tool

Compliance AIops

Compliance evidence from AIops audit trails: HIPAA/PCI/SOC2/GDPR, OSCAL export, 19 tools.

Connector by AIops-tools · GitHub account verified by the MCP Registry

IndexedMITLocal (stdio)
Write a review

Install

Works with Claude Code, Codex, VS Code, Cursor, Windsurf, Claude Desktop. Read the repository before you give any tool access to your data.

npx agentmarket install connector/aiops-tools-compliance-aiops

Asks which of your tools to add it to (Claude Code, Codex, Cursor, VS Code, Windsurf, Gemini CLI, Claude Desktop) and shows the change first. See https://agentmart.dev/cli.

Get the weekly diff

The weekly diff: one email a week with new agent tools, notable updates and grade changes, plus security alerts for tools you follow. Double opt-in, one-click unsubscribe.

We use your email only for this newsletter. Privacy

About

Compliance evidence from AIops audit trails: HIPAA/PCI/SOC2/GDPR, OSCAL export, 19 tools.

No reviews yet. Installed it? Reviews come from verified installers only. How reviews work

Permissions

What this server can do and what it asks for, from its tool list, install config and code. Checked Oct 25, 2026.

Tools
14 read · 5 write · 0 delete
Secrets
None asked for
Install scripts
None found
Runs as
Python package

Tools by what they do 19

Read from the source code; the running server may list different tools.

Read 14 · Look things up without changing anything.

  • activity_timeline
  • approval_report
  • control_evidence
  • coverage_summary
  • exceptions_report
  • gap_analysis
  • list_audit_sources
  • list_bundles
  • list_frameworks
  • oscal_assessment_results
  • query_audit_events
  • undo_list
Show 2 more tools
  • verify_bundle
  • verify_source_chain

Write 5 · Create, change, send or run things.

  • bundle_schedule_hint
  • export_bundle
  • generate_evidence_bundle
  • sign_bundle
  • undo_apply

Network hosts it talks to 3

  • anthropic.com · found in code
  • github.com · found in code
  • glama.ai · found in code

Files it touches

  • Your home directory (~)
  • ~/.compliance-aiops
  • ~/.compliance-aiops/audit.db
  • ~/.compliance-aiops/bundles
  • ~/.compliance-aiops/secrets.enc
  • ~/.compliance-aiops/undo.db
  • Any path the agent passes to its tools

Tools (19)

Read from the source code; the running server may differ. Descriptions are the server’s own words; hidden characters are shown as [U+…].

  • activity_timeline

    [READ] Op counts bucketed by hour/day — monitoring-continuity evidence. Args: since / until: ISO timestamps bounding the period. bucket: "hour" or "day".

  • approval_report

    [READ] High-risk write ops with approver + rationale (the change-approval trail). The who/what/when/why/approval artifact for SOC 2 CC8.1, PCI 7-8, HIPAA §312(a). Args: since / until: ISO timestamps bounding the period. high_only: True = only high/critical-risk writes (default); False = all writes.

  • bundle_schedule_hint

    [READ] Ready-to-paste cron line + command for periodic sealed-bundle generation. WRITES NOTHING and starts no daemon — it only composes and validates the crontab line and the exact non-interactive `compliance-aiops bundle generate` invocation (with the master-password env note) an operator can schedule. Args: framework: hipaa / pci_dss / soc2 / gdpr / iso27001 / djcp_l3. cron: A standard 5-field cron expression (default: 02:00 every Monday). period: Relative window each run should cover (e.g. "7d", "last-7-days"). sign: If True, include --sign in the composed command.

  • control_evidence

    [READ] Evidence rows for ONE control + population size + reproducible query. Args: framework: hipaa / pci_dss / soc2 / gdpr. control_id: e.g. "164.312(b)", "10.2", "CC8.1", "Art.30". since / until: ISO timestamps bounding the period. sample_size: Number of representative evidence rows to include. ``populationSize`` is the full evidence count; ``sample`` is capped at ``sample_size`` and sets ``truncated`` when there was more. ``scanTruncated`` reports whether the underlying event scan itself hit its cap — if it is true, the population is a slice and no coverage claim should be…

  • coverage_summary

    [READ] Per-control coverage for a framework over a period (are we covered?). Args: framework: hipaa / pci_dss / soc2 / gdpr. since / until: ISO timestamps bounding the reporting period.

  • exceptions_report

    [READ] Denied / error / budget-exceeded ops — enforcement + anomaly evidence. Denials prove the governance controls actually block, not rubber-stamp. Args: since / until: ISO timestamps bounding the period.

  • export_bundle

    [WRITE][risk=medium] Render a bundle to markdown / csv / json / oscal. "oscal" emits a NIST OSCAL 1.2.3 Assessment Results document (written as <bundle>.oscal.json). Read oscal_assessment_results first if you need the document inline plus its limitations — notably that control ids are not resolved against an imported OSCAL catalog, and that OSCAL has no "partially satisfied" state for the controls this tool evidences only partially. Args: bundle_path: Path to a bundle .json. fmt: "markdown", "csv", "json", or "oscal". out_path: Output path (default: alongside the bundle).

  • gap_analysis

    [READ] Controls with no/weak evidence, each with an honest reason + remediation. States the design-vs-operating caveat: audit trails evidence operating effectiveness strongly and control design/configuration only partially. Args: framework: hipaa / pci_dss / soc2 / gdpr. since / until: ISO timestamps bounding the period.

  • generate_evidence_bundle

    [WRITE][risk=medium] Assemble + hash-chain-seal an evidence bundle for a framework. One-call happy path: coverage + approval trail + exceptions + sealed evidence records → a bundle .json under ~/.compliance-aiops/bundles/. Reads audit DBs and writes a local artifact only; touches no external system. Args: framework: hipaa / pci_dss / soc2 / gdpr / iso27001 / djcp_l3. period_start / period_end: ISO timestamps bounding the reporting period. out_path: Where to write the bundle (default: the bundle dir). sign: If True and a signing key is stored, attach an HMAC signature. per…

  • list_audit_sources

    [READ] List sibling audit DBs (~/.<tool>-aiops/audit.db) + readability/row counts. Call this first to see which governed AIops tools' trails are available as compliance evidence.

  • list_bundles

    [READ] Previously generated bundles + their chain head and metadata.

  • list_frameworks

    [READ] Supported compliance frameworks (HIPAA / PCI-DSS / SOC 2 / GDPR) + control counts.

  • oscal_assessment_results

    [READ] A sealed bundle as an OSCAL 1.2.3 Assessment Results document. Returns the document inline (writing a file is export_bundle's job) with a summary and an explicit limitations list. Three things OSCAL cannot express are handled rather than hidden: import-ap points at a back-matter resource saying no assessment plan exists; control ids are framework-native and NOT resolved against an imported catalog; and because status has only satisfied/not-satisfied, controls this tool evidences only PARTIALLY are reported satisfied with an evidence-strength prop plus remarks naming what the audit trai…

  • query_audit_events

    [READ] Cross-tool audit event query — the workhorse. Args: source: Restrict to one source tool (e.g. nutanix-aiops). skill / tool / status / risk_level: Field filters. approved: True = only ops with an approver; False = only ops without one. selector: Evidence class filter — audit_trail / attribution / change / enforcement / exception. since / until: ISO timestamps bounding the period. limit: Max rows to return. Returns ``{"events": [...], "count": N, "returned": N, "limit": L, "truncated": bool | null, "scanTruncated": bool}``. When ``truncated`` is true more…

  • sign_bundle

    [WRITE][risk=medium] Attach an HMAC signature over a bundle's seal (uses stored key). Requires a signing key in the encrypted store ('compliance-aiops secret set signing-key'). Medium risk because it reads the encrypted secret store. Args: bundle_path: Path to a bundle .json.

Show 4 more tools
  • undo_apply

    [WRITE][risk=medium] Apply a recorded undo by dispatching its inverse tool. The inverse runs through its own governed tool, so its real risk tier is recorded there. Pass dry_run=True to preview the inverse call without executing it. A token can only be applied once. Args: undo_id: The undoId from undo_list (or an ``_undo_id`` in a write result). dry_run: If True, preview the inverse tool + params without running it. target: Passed through to the inverse tool when it accepts a target.

  • undo_list

    [READ] List recorded, not-yet-applied undo tokens (most recent first). Each entry names the original tool, the inverse tool that ``undo_apply`` would run, and a human note. Use the ``undoId`` with ``undo_apply``. Returns {"undos": [...], "returned": N, "limit": L, "truncated": bool}. ``truncated`` is *measured* (one extra row is fetched), not guessed from a length coincidence: when it is true there are MORE tokens than shown, so re-run with a higher ``limit`` rather than reporting the list as complete. Each entry carries ``effectVerified``. False means the original write lost its response, …

  • verify_bundle

    [READ] Verify a sealed evidence bundle: chain integrity, seal head, signature. Args: bundle_path: Path to a bundle .json produced by generate_evidence_bundle.

  • verify_source_chain

    [READ] Chain head for a source's current events + row-id gap detection. Record the returned chainHead out-of-band; re-run later to detect changes. Row-id gaps may indicate deleted audit rows. Args: source: Source tool name (from list_audit_sources). since / until: ISO timestamps bounding the range.

Signals

Stars
0
Forks
0
Open issues
0
Weekly downloads
225
Last commit
Oct 15, 2026 (13 days ago)
Last release
Oct 15, 2026 (13 days ago)
Last package publish
Oct 15, 2026 (13 days ago)

From GitHub (fetched Oct 24, 2026) and the package registry.

Details

Registry name
io.github.AIops-tools/compliance-aiops
Version
0.14.0
Auth
No auth
Packages
pypi compliance-aiops
License
MIT
First seen
Oct 24, 2026
Last checked
Oct 25, 2026

More from AIops-tools

Cite this page

Compliance AIops MCP server. Agent Mart. https://agentmart.dev/connectors/aiops-tools-compliance-aiops (last updated 2026-10-25)