What it does
Read-only evidence inventory + artifact-hash export for NIST SP 800-171 R2 (CMMC L2).
See it in action
Generate a CMMC L2 evidence inventory from Compliance CMMC
Going through your Compliance CMMC folder and grouping the evidence by NIST 800-171 control family…
| Family | Control area | Evidence |
|---|---|---|
| AC | Access Control | 3 |
| AU | Audit and Accountability | 2 |
| CM | Configuration Management | 2 |
| IA | Identification and Authentication | 1 |
| SC | System and Communications Protection | 2 |
Relevant regulations and standards
Frameworks and mandates this agent helps you address. Not a certification — your own controls and assessment still apply.
Tags
What's new
latest 0.1.0Published version history. The latest version is what new installs receive; your administrator chooses when to upgrade.
-
0.1.0stable latest 2026-06-14Added
- Initial release. Read-only evidence inventory and artifact-hash export for NIST SP 800-171 R2 (CMMC Level 2): walks designated evidence folders, groups artifacts by the 14 control families, computes deterministic SHA-256 artifact identifiers, and produces gap and coverage reports. Never modifies content.
Install in Claude Code
claude plugin marketplace add \
kiteworks/agent-marketplace
claude plugin install \
kiteworks-cmmc-reporter@kiteworks
Prerequisites
-
Kiteworks Compliance Runtime — install via
pip install kw-mcp-gateway(host>=1.0.0,<2.0.0). This agent calls into the runtime for deterministic, audited execution. -
Official Kiteworks MCP
>=9.3.0(used by the runtime) — install and sign in from github.com/kiteworks/mcp. - Python
>=3.11.
Connect from Claude
Add this marketplace as a remote MCP connector in Claude Desktop or Claude Code — point it at <your-host>/mcp. One process per deployment; no per-machine install. Requires the official Kiteworks MCP to be configured.