The US Munitions List (USML) is the regulatory list, codified at 22 CFR Part 121, that identifies the specific defense articles, defense services, and related technical data controlled under the International Traffic in Arms Regulations (ITAR). Administered by the US Department of State’s Directorate of Defense Trade Controls (DDTC) under authority of the Arms Export Control Act, the USML is organized into 21 categories, each enumerating controlled end-items, components, software, and technical data by military function. For a research institution, the USML is the practical starting point for an ITAR determination: if an item, piece of equipment, or dataset is not described somewhere on the USML, it is not ITAR-controlled (though it may still be controlled under the parallel Export Administration Regulations).
CASRAI’s dictionary already covers the operational building blocks of export control — 22 CFR Part 120’s ITAR definitions, the deemed export concept, and the fundamental research exemption — and CASRAI’s guide on export control and international research collaboration covers how institutions manage that exemption and deemed-export exposure day to day. This page fills the specific gap those pieces don’t cover in depth: what the USML itself actually lists, how its 21 categories are structured, and how a university research office identifies whether a given piece of equipment, software, or technical data falls on it.
What the US Munitions List actually is
22 CFR Part 121.1 sets out the USML as an enumerated list of “defense articles” and “defense services.” A defense article is broadly defined (in 22 CFR Part 120) as any item or technical data specifically designated on the USML — the designation itself is what makes something ITAR-controlled, not any independent judgment about how dangerous or sensitive the item is. Each USML category is broken into lettered paragraphs describing controlled end-items, parts, components, accessories, attachments, and associated software, and every category also controls the technical data (and defense services) “directly related to” the items it lists — a design specification, test report, or source code for a Category IV rocket motor is itself ITAR-controlled technical data even though it is not a physical article.
A recurring qualifier across most categories is “specially designed.” An item is not automatically pulled onto the USML just because a military organization could conceivably use it; it has to have been specially designed, developed, configured, adapted, or modified for a military application in the way the specific USML paragraph describes. This is the single most consequential judgment call in a university ITAR determination, because it is what separates a piece of dual-use lab equipment or commercial-off-the-shelf hardware (potentially EAR-controlled, or not controlled at all) from the same-looking item built or modified to military specification (ITAR-controlled).
The 21 USML categories
The categories run from Category I through Category XXI. Categories XVII and XXI function as catch-alls for classified articles and for articles, technical data, and defense services not otherwise enumerated elsewhere on the list.
| Category | Covers |
|---|---|
| I | Firearms and related articles |
| II | Guns and armament |
| III | Ammunition and ordnance |
| IV | Launch vehicles, guided missiles, ballistic missiles, rockets, torpedoes, bombs, and mines |
| V | Explosives and energetic materials, propellants, incendiary agents, and their constituents |
| VI | Surface vessels of war and special naval equipment |
| VII | Ground vehicles |
| VIII | Aircraft and related articles |
| IX | Military training equipment and training |
| X | Personal protective equipment and shelters |
| XI | Military electronics |
| XII | Fire control, range finder, optical, and guidance and control equipment |
| XIII | Materials and miscellaneous articles |
| XIV | Toxicological agents, including chemical and biological agents, and associated equipment |
| XV | Spacecraft systems and associated equipment |
| XVI | Nuclear weapons design and testing-related items |
| XVII | Classified articles, technical data, and defense services not otherwise enumerated |
| XVIII | Directed energy weapons |
| XIX | Gas turbine engines and associated equipment |
| XX | Submersible vessels and related articles |
| XXI | Articles, technical data, and defense services not otherwise enumerated |
The list is not static. DDTC periodically revises individual categories through Federal Register rulemaking, and since 2013 the State Department’s ongoing Export Control Reform initiative has moved a substantial share of less militarily sensitive items — particularly in the aircraft, ground vehicles, spacecraft, gas turbine engine, and “not otherwise enumerated” categories — onto the Commerce Control List (CCL) as “600 series” entries under the EAR instead, where they are typically subject to a lighter licensing burden. A research office cannot assume a category description is unchanged from a document written even a few years ago; the current text of 22 CFR Part 121 is the only authoritative source for a live determination.
How the USML applies to university research
Most university research never touches the USML at all, because of the fundamental research exclusion built into ITAR’s own text (22 CFR Part 120, incorporating National Security Decision Directive 189): basic and applied research intended for open, unrestricted publication is excluded from ITAR control on the same logic that excludes it from the EAR. But that exclusion is conditional, and several recurring situations in a research setting can pull a project’s outputs onto USML-controlled ground:
- The research itself is about, or produces, a USML-listed item. Propulsion research (Category IV/XIX), spacecraft or satellite subsystem work (Category XV), directed-energy or laser weapons research (Category XVIII), and certain optics, night-vision, or fire-control work (Category XII) are the categories university labs run into most often, particularly on Department of Defense- or DARPA-funded projects.
- A sponsor imposes access or publication restrictions. The fundamental research exclusion depends on the results actually being publishable without restriction. A contract clause that requires sponsor pre-publication review for reasons beyond a brief patent-filing delay, or that restricts participation to US persons, is itself a signal the sponsor may consider the underlying work (or the specific technical data involved) to already be outside the exclusion — the restriction doesn’t create the ITAR obligation so much as it evidences that the sponsor already believes one exists.
- Foreign national researchers need access to controlled technical data or hardware. Sharing ITAR-controlled technical data, source code, or hands-on access to controlled hardware with a foreign national in a US lab is a “deemed export” requiring the same DDTC authorization as a physical export to that person’s country of origin — even though nothing physically leaves the country. See CASRAI’s deemed export entry for how that determination works.
- Equipment purchased for a project is itself USML-listed or export-controlled. Defense-oriented equipment programs common at research universities — for example DURIP-funded instrumentation on DoD-sponsored projects — can involve hardware, software, or accompanying technical manuals that are themselves controlled, independent of what the university’s own research produces.
When a project or a piece of equipment is determined to involve USML-controlled technical data, institutions typically manage the ongoing exposure with a Technology Control Plan (TCP) — a documented set of physical and procedural access restrictions (badge access, segregated storage, restricted personnel lists) designed to keep controlled technical data or hardware away from anyone not specifically authorized to access it, most often used precisely to manage deemed-export risk around foreign national lab members.
Registration, licensing, and enforcement
Any US institution that manufactures, exports, or brokers a defense article or defense service listed on the USML is generally required to register with DDTC under 22 CFR Part 122, whether or not a specific export license is also needed for a given transaction — registration and licensing are separate requirements. A university that regularly performs work involving USML-listed items (rather than research that stays inside the fundamental research exclusion) may need to register even before the question of an individual export license arises. Export control determinations under ITAR are fact-specific, and the consequences of getting one wrong are real: ITAR violations carry civil penalties, debarment from future defense-related contracting, and in willful cases criminal penalties, under the Arms Export Control Act. Because of that, USML classification calls at a research institution are generally made by a designated Empowered Official or export control officer, not by individual investigators — this page describes the shape of the list and where it bites, not a substitute for that institutional determination process.
Frequently asked questions
What is the difference between the USML and the Commerce Control List?
The USML (22 CFR Part 121) lists defense articles and services controlled under ITAR and administered by the State Department’s DDTC. The Commerce Control List (CCL, 15 CFR Part 774) lists “dual-use” items controlled under the EAR and administered by Commerce’s Bureau of Industry and Security, classified by Export Control Classification Number (ECCN) rather than USML category. An item is generally controlled under one regime or the other, not both, though the two lists interact directly — the “600 series” ECCNs on the CCL specifically hold items moved off the USML through Export Control Reform. See CASRAI’s ITAR and EAR entry for the full comparison.
Does research intended for publication ever appear on the USML?
The USML itself doesn’t distinguish by publication intent — if an item or piece of technical data matches a USML category description, it is controlled regardless of whether a researcher intends to publish about it. What changes the analysis is the fundamental research exclusion, which operates as a separate, conditional carve-out from ITAR’s scope for basic and applied research results intended for open publication. Research that stays inside that exclusion doesn’t reach a USML determination at all; research that falls outside it (for example, because of sponsor publication restrictions) does.
Who decides whether something is on the USML at a university?
USML classification is a fact-specific legal determination institutions generally assign to a designated Empowered Official or export control/research security officer, not to individual faculty or lab members. DDTC also offers a formal commodity jurisdiction (CJ) request process for cases where classification is genuinely unclear.
How often does the USML change?
DDTC revises individual USML categories through Federal Register rulemaking on an ongoing basis, sometimes affecting specific categories multiple times within a year. There is no fixed review cycle a research office can rely on as a substitute for checking the current regulatory text.
This page describes the general structure of the US Munitions List for orientation purposes and is not legal advice. Export control determinations are fact-specific; institutions should route classification questions to their designated Empowered Official or export control office rather than relying on this page as a substitute.
