advisory_query
Ask a compliance question and get an AI-powered advisory response. Optionally scope the answer to specific frameworks.
LABSCO SUMMARY
Gap analysis and coverage report being separate tools is correct — 'what am I missing' and 'how much of this is already handled' are different questions with different audiences.
An organisation certified against one framework and pursuing a second spends most of its effort on the overlap, and the two useful views of that overlap point opposite ways: the auditor wants the gaps, the sponsor wants the coverage percentage. Serving both from the same mapping without conflating them is the right shape. search_controls across all frameworks is the other tool doing real work — a requirement like encryption at rest appears in a dozen frameworks under a dozen names, and finding all of them is otherwise a manual survey. The advisory tool is a generated answer rather than a citation, so treat it as a starting point rather than as the position you defend to an assessor.
What it is
A compliance-framework client built around the cross-framework problem: eight tools covering framework discovery, control listing, mapping between frameworks, gap and coverage analysis, and an advisory query.
What you get
- search_frameworks finds frameworks by subject rather than by exact name, and get_framework opens one with its detail.
- get_framework_controls lists a framework's controls, and search_controls searches across every framework's controls at once — which is how you find where a specific requirement appears.
- cross_framework_map shows which controls in the source framework correspond to which in the target, the join that certification work runs on.
- gap_analysis returns what the target framework requires that the source does not cover, and coverage_report says how well a framework's controls are mapped — two directions of the same question.
- advisory_query answers a compliance question directly rather than returning documents.
Requirements
A TheArtOfService API key (it starts with tas_) from a free account at compliance.theartofservice.com. The local package reads it from THEARTOFSERVICE_API_KEY; the hosted endpoint takes it as a bearer token and answers up to 10 calls a day without one.
Setup effort
One command plus a key — npx -y @theartofservice/compliance-mcp, then supply credentials
USE CASES
01
Working out what a second certification will actually cost
Map your current framework's controls onto the target, then read the gap analysis for what is genuinely new rather than assuming everything is.
02
Reporting progress to whoever is funding it
Pull the coverage report — the same mapping expressed as how much is already handled rather than as what is missing.
03
Finding every place a requirement appears
Search across all frameworks' controls for the subject, since the same requirement carries a different name in each.
04
Getting a straight answer to a compliance question
Ask it directly rather than reading the framework text, using the control lookups to check what comes back.
8 tools
Counted once with only startup setup. Other versions, modes or optional credentials may expose a different list.
coverage_report
Get a coverage report for a framework showing how well its controls are mapped to other frameworks.
cross_framework_map
Map controls between two frameworks. Shows which controls in the source framework correspond to controls in the target framework.
gap_analysis
Perform a gap analysis between two frameworks. Returns controls in the target framework that are NOT covered by the source framework.
get_framework
Get detailed information about a specific compliance framework by name.
get_framework_controls
List all controls for a specific compliance framework.
search_controls
Search across all framework controls by keyword. Useful for finding specific requirements across multiple frameworks.
search_frameworks
Search compliance frameworks by keyword (e.g. 'cloud security', 'privacy'). Returns matching frameworks from 692+ available.
BEFORE YOU INSTALL
What to know first
Tools you get
8 tools when we connected.
Requires
- npx on PATH
- THEARTOFSERVICE_API_KEY in your environment
CONTEXT COST
Light Standing cost
Rated by the size of the 8 tool definitions that ride along on every turn, not by how many there are
INSTALLATION
Connect your client
Add the block to your client, or run the command directly.
Server setup
Configuration file
JSON
{
"mcpServers": {
"compliance-mcp": {
"command": "npx",
"args": [
"-y",
"@theartofservice/compliance-mcp"
],
"env": {
"THEARTOFSERVICE_API_KEY": "<YOUR_THEARTOFSERVICE_API_KEY>"
}
}
}
}npx
TERMINAL
npx -y @theartofservice/compliance-mcpHosted endpoint
ENDPOINT URL
https://api.theartofservice.com/mcpAdd this hosted endpoint to your MCP client using the credentials listed under Requirements.
