Read-only AI Adoption Controls Framework: controls, Level 3 criteria, standards cross-references
Maintain this server? Claim it
Call this server's tools from your browser. Nothing to install.
Requests go through mcptry because browsers can't call most MCP servers directly. Header values are sent to the server for that request only and are never stored or logged.
Tool list from our last check. Connect live to refresh it.
Questions, evidence and the applicable Level 3 criteria for one domain (or a published profile), for a self-assessment the user's own assistant runs. Pass the overlays that apply to the organisation. Answers are never sent to this server. Call with no domain to list the domains.
Domain code or name
A published profile, when available
Overlay codes that apply, for example ['PUB', 'GEN']
Pick your client. Values in capitals, like YOUR_TOKEN, are yours to fill in.
Run in a terminal
claude mcp add --transport http aacf https://aacf.adriansaxton.com/mcp
Questions, evidence and the applicable Level 3 criteria for one domain (or a published profile), for a self-assessment the user's own assistant runs. Pass the overlays that apply to the organisation. Answers are never sent to this server. Call with no domain to list the domains.
| Argument | Type | Description |
|---|---|---|
| domain | string | Domain code or name |
| profile | string | A published profile, when available |
| overlays | array | Overlay codes that apply, for example ['PUB', 'GEN'] |
{
"type": "object",
"$schema": "https://json-schema.org/draft/2020-12/schema",
"properties": {
"domain": {
"type": "string",
"description": "Domain code or name"
},
"profile": {
"type": "string",
"description": "A published profile, when available"
},
"overlays": {
"type": "array",
"items": {
"type": "string"
},
"description": "Overlay codes that apply, for example ['PUB', 'GEN']"
}
}
}One control in full: objective, rationale, level descriptors 1 to 5, Level 3 criteria (with the overlays they apply to), questions, evidence, guidance, owners, dependencies and cross-references.
| Argument | Type | Description |
|---|---|---|
| id* | string | Control ID, for example GOV-01 or SEC-03 |
{
"type": "object",
"$schema": "https://json-schema.org/draft/2020-12/schema",
"required": [
"id"
],
"properties": {
"id": {
"type": "string",
"description": "Control ID, for example GOV-01 or SEC-03"
}
}
}Version, scale, overlays, owner roles, lifecycle stages, the cross-referenced standards and how to cite AACF. Call this first.
No arguments.
{
"type": "object",
"$schema": "https://json-schema.org/draft/2020-12/schema",
"properties": {}
}Reverse lookup: the controls that address an item of a standard, with strength (direct or partial) and confidence. A ref that is a prefix (for example 6.1) returns every item under it.
| Argument | Type | Description |
|---|---|---|
| ref* | string | Item in that standard, for example 6.1.2, A.6.2.3, Art. 14 or LLM01:2026 |
| standard* | string | Standard key or name, for example ISO42001, 'ISO/IEC 42001', EUAIA, OWASPLLM |
{
"type": "object",
"$schema": "https://json-schema.org/draft/2020-12/schema",
"required": [
"standard",
"ref"
],
"properties": {
"ref": {
"type": "string",
"description": "Item in that standard, for example 6.1.2, A.6.2.3, Art. 14 or LLM01:2026"
},
"standard": {
"type": "string",
"description": "Standard key or name, for example ISO42001, 'ISO/IEC 42001', EUAIA, OWASPLLM"
}
}
}The assessor rulebook: scope, statuses, how to place a level (Level 3 needs every applicable criterion met; never round up), evidence, targets and how to report.
No arguments.
{
"type": "object",
"$schema": "https://json-schema.org/draft/2020-12/schema",
"properties": {}
}Every cross-referenced item of one standard, the controls covering each, and summary counts.
| Argument | Type | Description |
|---|---|---|
| standard* | string | Standard key or name, for example NISTRMF |
{
"type": "object",
"$schema": "https://json-schema.org/draft/2020-12/schema",
"required": [
"standard"
],
"properties": {
"standard": {
"type": "string",
"description": "Standard key or name, for example NISTRMF"
}
}
}Every domain with its summary and the ID and title of each control in it.
No arguments.
{
"type": "object",
"$schema": "https://json-schema.org/draft/2020-12/schema",
"properties": {}
}Find controls by words in their title, objective, rationale, criteria or questions, optionally filtered by domain, overlay, owner role or lifecycle stage. Returns summaries; use get_control for detail.
| Argument | Type | Description |
|---|---|---|
| text | string | Words that must all appear, for example 'human oversight' |
| limit | integer | Maximum results (default 20) |
| domain | string | Domain code or name, for example GOV or Governance |
| overlay | string | Overlay code: PUB, PRV, HIR, GEN, AGT or BLD |
| owner_role | string | Owner role key, for example ai_governance_lead |
| lifecycle_stage | string | Lifecycle stage key, for example deploy |
{
"type": "object",
"$schema": "https://json-schema.org/draft/2020-12/schema",
"properties": {
"text": {
"type": "string",
"description": "Words that must all appear, for example 'human oversight'"
},
"limit": {
"type": "integer",
"maximum": 100,
"minimum": 1,
"description": "Maximum results (default 20)"
},
"domain": {
"type": "string",
"description": "Domain code or name, for example GOV or Governance"
},
"overlay": {
"type": "string",
"description": "Overlay code: PUB, PRV, HIR, GEN, AGT or BLD"
},
"owner_role": {
"type": "string",
"description": "Owner role key, for example ai_governance_lead"
},
"lifecycle_stage": {
"type": "string",
"description": "Lifecycle stage key, for example deploy"
}
}
}We read every tool's name, description and inputs the way the model will, looking for instructions hidden from you. A clean result means no warning signs, not a guarantee. Scanned Nov 15, 2026.