Deploy AI inMinutes, Not Months
The first FedRAMP-ready extension of Anthropic's Model Context Protocol.
Built-in audit logging, PII redaction, and cryptographic signatures for secure government AI deployments.
Trusted by government agencies and contractors
20x
Faster FedRAMP Authorization
100%
Open Source Core
17
Pre-built Connectors
Enterprise‑Grade Security & Compliance
FedMCP extends the Model Context Protocol with the security controls and audit capabilities required for government AI deployments.
PII & PHI Scanning
Inline Presidio‑powered entity detection lets agents redact sensitive data before it leaves the boundary.
Detached JWS Signatures
Every tool response can be signed with AWS KMS (ES256) to guarantee integrity and non‑repudiation.
Impact‑Level Tags
IL2‑IL6 labels travel with the payload so cross‑domain guards can enforce DoD data handling rules.
JSON‑Schema Validation
Open, versioned schemas keep contracts stable and enable offline governance reviews.
CloudWatch Audit Sink
Structured JSONL logs stream to an immutable, Object‑Lock protected log group.
Plug‑in Connectors
Typer‑based SDK scaffolds new connectors in seconds and publishes them to FedMCP Exchange.
Plus Multi-Language SDKs
Native support for Go, Python, and TypeScript with consistent APIs across all languages.
Built for FedRAMP & DoD IL 5
Every envelope field maps directly to NIST 800‑53 Rev 5 controls, simplifying your SSP and ATO process.
| Field / Feature | Purpose | 800‑53 Controls |
|---|---|---|
audit_log | Immutable log of agent/tool calls, timestamp, request & response hashes | AU‑2AU‑3AU‑12SI‑11 |
signed_response (JWS) | Cryptographic integrity & non‑repudiation of tool output (detached JWS) | AU‑10SC‑12PE‑20 |
pii_tag | Flags payloads containing PII/PHI/FISMA; drives redaction | AC‑19SI‑12SC‑28 |
impact_level | Marks IL2–IL6 sensitivity for cross‑domain enforcement & hosting | AC‑4SC‑8SC‑51 |
tool_perms | Least‑privilege scope list for each tool action | AC‑2AC‑6IA‑3 |
controls | Explicit list of NIST controls asserted by the response | PL‑2RA‑3 |
spec_version | Explicit schema version driving validation & drift detection | CM‑3CM‑9 |
issuer | URI identifying the sending tenant / system | IA‑2IA‑5 |
request_id | Globally‑unique UUID for full traceability across services | AU‑6SI‑11 |
timestamp | RFC 3339 timestamp of the request or event | AU‑8 |
data_tags | Fine‑grained content markings (PII, PHI, PCI, etc.) | AC‑16SC‑28SI‑12 |
is_signed | Boolean hint indicating presence of a JWS signature | AU‑10SC‑12 |
jws | Detached JSON Web Signature over the response payload | AU‑10SC‑12SC‑17 |
impact_justification | Human rationale supporting the selected impact_level decision | RA‑3PL‑2 |
Real-World Applications
FedMCP Use Cases
From compliance documentation to AI governance, see how government agencies and contractors are transforming their operations with FedMCP
The Challenge
No audit trail for which tools AI agents are using
FedMCP Solution
- Every function call creates an audit event
- Complete provenance of AI decision-making
- Hash verification ensures tools haven't been tampered with
- CloudTrail integration for enterprise logging
Meet federal AI accountability requirements
Ready to implement this use case?
Start with our open source tools or explore premium connectors in the FedMCP Exchange.
Get Started in Minutes
Choose your preferred language or deployment method. FedMCP works with your existing stack.
# Install FedMCP SDK
pip install fedmcp
# Create a new connector
from fedmcp import FedMCPClient
client = FedMCPClient(
connector="aws-govcloud",
audit_log="fedmcp-audit"
)Note: Premium connectors require a license key. Start your 30-day free trial at exchange.fedmcp.org
FedMCP Exchange
Premium Connectors for Enterprise & Government
Pre-built, maintained, and compliance-certified connectors save months of development time. Build on the open source FedMCP protocol or leverage our premium connectors.
Build Your Own (Open Source)
- Free and open source
- Full control and customization
- 3-6 months development per connector
- Self-maintain compliance updates
- Community support only
Premium Connectors (Exchange)
- Deploy in minutes, not months
- Pre-certified for compliance
- Maintained and updated by experts
- 24/7 enterprise support
- License protection & graceful degradation
AWS GovCloud
Secure cloud infrastructure for government workloads with FedRAMP High authorization
Oracle Health (Cerner)
Electronic health records and clinical systems integration with PowerChart and HealtheIntent
Salesforce Government Cloud
CRM and case management for government agencies with FedRAMP authorization
Splunk Public Sector
Security information and event management (SIEM) for government
Databricks Government
Unified analytics platform for AI and big data in government cloud
Palantir Foundry
Data integration and analytics platform with DoD IL4/IL5 support
No credit card required • Cancel anytime • Full access to all premium connectors
Contribute to FedMCP
FedMCP is 100% open‑source and needs your expertise—from security hardening to new connector templates. Open an issue, file a pull request, or join the discussion on Slack.