BOD 25 01 CISA Microsoft Policies

🚀 CISA 25-01 Cybersecurity Audit Act MCP Server Configuration Documentation

This project provides an MCP server implementation to support the "CISA 25-01 Cybersecurity Audit Act". This act requires federal civilian executive departments and agencies to implement specific cybersecurity measures in their IT infrastructure. This document details how to configure and use this MCP server.

🚀 Quick Start

📦 Installation

Clone the repository

git clone https://github.com/DynamicEndpoints/BOD-25-01-CSA-MCP.git
cd cisa-m365

Install dependencies

npm install

Build the server

npm run build

⚙️ Configuration

Create an Azure AD application

1. Log in to Azure Portal.
2. Navigate to Azure Active Directory.
3. Register a new application.
4. Add the required API permissions (e.g., "Directory.ReadWrite.All", "User.ReadWrite", etc.).
5. Create an application secret.

Configure environment variables

Copy the example file and edit it:

cp .env.example .env

Modify the contents of the .env file:

TENANT_ID=your-tenant-id
CLIENT_ID=your-client-id
CLIENT_SECRET=your-client-secret

Configure MCP settings

Create or update the MCP configuration file:

{
  "mcpServers": {
    "cisa-m365": {
      "command": "node",
      "args": ["path/to/cisa-m365/build/index.js"],
      "env": {
        "TENANT_ID": "your-tenant-id",
        "CLIENT_ID": "your-client-id",
        "CLIENT_SECRET": "your-client-secret"
      }
    }
  }
}

💻 Usage Examples

Available tools list

block_legacy_auth

Block legacy authentication methods.

{}

block_high_risk_users

Block high-risk users from logging in.

{}

enforce_phishing_resistant_mfa

Enforce anti-phishing MFA functionality.

{}

configure_global_admins

Configure Global Administrator role assignments.

{
  "userIds": ["user1-id", "user2-id"]
}

get_policy_status

Get the current status of all security policies.

{}

Example usage

In Node.js:

// Block legacy authentication methods
const result = await client.callTool('block_legacy_auth', {});

// Get policy status
const status = await client.callTool('get_policy_status', {});

📚 Documentation

API Interface Reference

Policy Settings Interface

interface PolicySettings {
  legacyAuth: {
    blocked: boolean;
    compliant: boolean;
  };
  highRiskUsers: {
    blocked: boolean;
    compliant: boolean;
  };
  mfa: {
    antiPhishingMFA: boolean;
    alternativeEnabled: boolean;
    compliant: boolean;
  };
  applications: {
    registrationRestricted: boolean;
    consentRestricted: boolean;
    compliant: boolean;
  };
  passwordPolicy: {
    weakPasswordsBlocked: boolean;
    compliant: boolean;
  };
}

Error Handling

Error code example

{
  "error": {
    "code": "INVALID_SYNTAX",
    "message": "Syntax error in the configuration file"
  }
}

Frequently Asked Questions

• Q: How to troubleshoot issues when the MCP server fails to start?
  • A: Check the log files and ensure that the environment variables are set correctly.

Testing Methods

Unit tests

npm test

Integration tests

1. Start the MCP service.
2. Use testing tools to send requests and verify the responses.

🔒 Security Precautions

• Ensure that all sensitive information (e.g., application secrets) is not stored or transmitted in plain text.
• Regularly update dependency libraries to prevent known security vulnerabilities.
• Configure appropriate security policies and access control measures.

🤝 Contribution Guidelines

1. Fork the project repository.
2. Create a feature branch and submit your code.
3. Submit a Pull Request and participate in the code review.

📄 License

This project is licensed under the MIT License. Please refer to the LICENSE file for details.