{"serverId":"mcp-registry/com.ascent-partners/coso-mcp","tools":[{"name":"add_review_note","fixed":{"name":"add_review_note","description":"Add a reviewer note to a workpaper.","inputSchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["engagementId","workpaperId","text"],"properties":{"text":{"type":"string","minLength":1},"author":{"type":"string","minLength":1},"workpaperId":{"type":"string","pattern":"^[A-Za-z0-9][A-Za-z0-9_-]{0,63}$"},"engagementId":{"type":"string","pattern":"^[A-Za-z0-9][A-Za-z0-9_-]{0,63}$"}}},"annotations":{"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false},"title":"Add a review note"},"changes":[{"kind":"annotations","detail":"Added readOnlyHint: false, destructiveHint: false, idempotentHint: false (inferred from the name).","verify":true}],"tokensBefore":130,"tokensAfter":130},{"name":"add_scope_item","fixed":{"name":"add_scope_item","description":"Add a significant account/process to the review scope, with its objective category and assertions.","inputSchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["engagementId","area","objectiveCategory"],"properties":{"area":{"type":"string","minLength":1,"description":"Significant account or process."},"inScope":{"type":"boolean","default":true},"rationale":{"type":"string"},"assertions":{"type":"array","items":{"enum":["completeness","existence-occurrence","accuracy","valuation","obligations-rights","presentation-disclosure"],"type":"string"},"default":[]},"engagementId":{"type":"string","pattern":"^[A-Za-z0-9][A-Za-z0-9_-]{0,63}$"},"objectiveCategory":{"enum":["operations","reporting","compliance"],"type":"string"}}},"annotations":{"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false},"title":"Add a scope item"},"changes":[{"kind":"annotations","detail":"Added readOnlyHint: false, destructiveHint: false, idempotentHint: false (inferred from the name).","verify":true}],"tokensBefore":225,"tokensAfter":225},{"name":"create_engagement","fixed":{"name":"create_engagement","description":"Create a new internal-control review engagement. Returns the engagement id used by all later tools.","inputSchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["title","entity"],"properties":{"id":{"type":"string","pattern":"^[A-Za-z0-9][A-Za-z0-9_-]{0,63}$","description":"Optional explicit engagement id."},"title":{"type":"string","minLength":1,"description":"Engagement title."},"entity":{"type":"string","minLength":1,"description":"Entity or business unit under review."},"period":{"type":"string","minLength":1,"description":"Review period, e.g. 2025 or 2025-H2."},"materiality":{"type":"object","properties":{"basis":{"type":"string"},"amount":{"type":"number"},"currency":{"type":"string"}}}}},"annotations":{"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false},"title":"Create an engagement"},"changes":[{"kind":"annotations","detail":"Added readOnlyHint: false, destructiveHint: false, idempotentHint: false (inferred from the name).","verify":true}],"tokensBefore":219,"tokensAfter":219},{"name":"create_population","fixed":{"name":"create_population","description":"Register the population for a control — either an explicit item list or a declared size. Bounded to 10000 items.","inputSchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["engagementId","description"],"properties":{"items":{"type":"array","items":{"type":"object","required":["reference"],"properties":{"date":{"type":"string"},"amount":{"type":"number"},"reference":{"type":"string","minLength":1}}},"maxItems":10000},"period":{"type":"string"},"currency":{"type":"string"},"controlId":{"type":"string","pattern":"^[A-Za-z0-9][A-Za-z0-9_-]{0,63}$"},"description":{"type":"string","minLength":1},"declaredSize":{"type":"integer","maximum":9007199254740991,"minimum":0},"engagementId":{"type":"string","pattern":"^[A-Za-z0-9][A-Za-z0-9_-]{0,63}$"}}},"annotations":{"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false},"title":"Create a population"},"changes":[{"kind":"annotations","detail":"Added readOnlyHint: false, destructiveHint: false, idempotentHint: false (inferred from the name).","verify":true}],"tokensBefore":232,"tokensAfter":232},{"name":"framework_integration_check","fixed":{"name":"framework_integration_check","description":"Check that all five COSO components have some recorded coverage and that principles are addressed.","inputSchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["engagementId"],"properties":{"engagementId":{"type":"string","pattern":"^[A-Za-z0-9][A-Za-z0-9_-]{0,63}$"}}},"annotations":{"readOnlyHint":true},"title":"Framework integration check"},"changes":[{"kind":"annotations","detail":"Added readOnlyHint: true (inferred from the name).","verify":true}],"tokensBefore":101,"tokensAfter":101},{"name":"get_activity_log","fixed":{"name":"get_activity_log","description":"Return the append-only activity log for an engagement, plus a Markdown rendering.","inputSchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["engagementId"],"properties":{"engagementId":{"type":"string","pattern":"^[A-Za-z0-9][A-Za-z0-9_-]{0,63}$"}}},"annotations":{"readOnlyHint":true},"title":"Get the activity log"},"changes":[{"kind":"annotations","detail":"Added readOnlyHint: true (inferred from the name).","verify":true}],"tokensBefore":94,"tokensAfter":94},{"name":"get_audit_log","fixed":{"name":"get_audit_log","description":"Return the append-only audit events recorded for an engagement.","inputSchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["engagementId"],"properties":{"engagementId":{"type":"string","pattern":"^[A-Za-z0-9][A-Za-z0-9_-]{0,63}$"}}},"annotations":{"readOnlyHint":true},"title":"Get the audit log"},"changes":[{"kind":"annotations","detail":"Added readOnlyHint: true (inferred from the name).","verify":true}],"tokensBefore":88,"tokensAfter":88},{"name":"get_component","fixed":{"name":"get_component","description":"Return a single COSO component by id, with its principles.","inputSchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["id"],"properties":{"id":{"enum":["control-environment","risk-assessment","control-activities","information-communication","monitoring-activities"],"type":"string"}}},"annotations":{"readOnlyHint":true},"title":"Get a COSO component"},"changes":[{"kind":"annotations","detail":"Added readOnlyHint: true (inferred from the name).","verify":true}],"tokensBefore":102,"tokensAfter":102},{"name":"get_engagement","fixed":{"name":"get_engagement","description":"Return an engagement by id.","inputSchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["id"],"properties":{"id":{"type":"string","pattern":"^[A-Za-z0-9][A-Za-z0-9_-]{0,63}$"}}},"annotations":{"readOnlyHint":true},"title":"Get an engagement"},"changes":[{"kind":"annotations","detail":"Added readOnlyHint: true (inferred from the name).","verify":true}],"tokensBefore":72,"tokensAfter":72},{"name":"get_principle","fixed":{"name":"get_principle","description":"Return a single COSO principle by framework number or slug, including its paraphrased points of focus.","inputSchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","properties":{"id":{"type":"string"},"number":{"type":"integer","maximum":17,"minimum":1}}},"annotations":{"readOnlyHint":true},"title":"Get a COSO principle"},"changes":[{"kind":"annotations","detail":"Added readOnlyHint: true (inferred from the name).","verify":true}],"tokensBefore":90,"tokensAfter":90},{"name":"get_server_info","fixed":{"name":"get_server_info","description":"Return the server identity, the COSO framework it covers, and the mandatory disclaimer.","inputSchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","properties":{}},"annotations":{"readOnlyHint":true}},"changes":[{"kind":"annotations","detail":"Added readOnlyHint: true (inferred from the name).","verify":true}],"tokensBefore":66,"tokensAfter":66},{"name":"get_workpaper","fixed":{"name":"get_workpaper","description":"Return a workpaper including its rendered Markdown.","inputSchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["engagementId","workpaperId"],"properties":{"workpaperId":{"type":"string","pattern":"^[A-Za-z0-9][A-Za-z0-9_-]{0,63}$"},"engagementId":{"type":"string","pattern":"^[A-Za-z0-9][A-Za-z0-9_-]{0,63}$"}}},"annotations":{"readOnlyHint":true},"title":"Get a workpaper"},"changes":[{"kind":"annotations","detail":"Added readOnlyHint: true (inferred from the name).","verify":true}],"tokensBefore":110,"tokensAfter":110},{"name":"list_assertions","fixed":{"name":"list_assertions","description":"List the assertions used to frame control objectives: completeness, existence/occurrence, accuracy, valuation, obligations/rights, presentation/disclosure.","inputSchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","properties":{}},"annotations":{"readOnlyHint":true},"title":"List audit assertions (CEAVOP)"},"changes":[{"kind":"annotations","detail":"Added readOnlyHint: true (inferred from the name).","verify":true}],"tokensBefore":85,"tokensAfter":85},{"name":"list_components","fixed":{"name":"list_components","description":"List the five components of the COSO Internal Control—Integrated Framework (ICIF-2013).","inputSchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","properties":{}},"annotations":{"readOnlyHint":true},"title":"List COSO components"},"changes":[{"kind":"annotations","detail":"Added readOnlyHint: true (inferred from the name).","verify":true}],"tokensBefore":66,"tokensAfter":66},{"name":"list_controls","fixed":{"name":"list_controls","description":"List the controls registered for an engagement.","inputSchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["engagementId"],"properties":{"engagementId":{"type":"string","pattern":"^[A-Za-z0-9][A-Za-z0-9_-]{0,63}$"}}},"annotations":{"readOnlyHint":true},"title":"List controls"},"changes":[{"kind":"annotations","detail":"Added readOnlyHint: true (inferred from the name).","verify":true}],"tokensBefore":83,"tokensAfter":83},{"name":"list_deficiencies","fixed":{"name":"list_deficiencies","description":"List the deficiencies recorded for an engagement.","inputSchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["engagementId"],"properties":{"engagementId":{"type":"string","pattern":"^[A-Za-z0-9][A-Za-z0-9_-]{0,63}$"}}},"annotations":{"readOnlyHint":true},"title":"List deficiencies"},"changes":[{"kind":"annotations","detail":"Added readOnlyHint: true (inferred from the name).","verify":true}],"tokensBefore":85,"tokensAfter":85},{"name":"list_engagements","fixed":{"name":"list_engagements","description":"List all engagement ids and titles.","inputSchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","properties":{}},"annotations":{"readOnlyHint":true},"title":"List engagements"},"changes":[{"kind":"annotations","detail":"Added readOnlyHint: true (inferred from the name).","verify":true}],"tokensBefore":52,"tokensAfter":52},{"name":"list_exceptions","fixed":{"name":"list_exceptions","description":"List the exceptions recorded for an engagement.","inputSchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["engagementId"],"properties":{"engagementId":{"type":"string","pattern":"^[A-Za-z0-9][A-Za-z0-9_-]{0,63}$"}}},"annotations":{"readOnlyHint":true},"title":"List exceptions"},"changes":[{"kind":"annotations","detail":"Added readOnlyHint: true (inferred from the name).","verify":true}],"tokensBefore":84,"tokensAfter":84},{"name":"list_objective_categories","fixed":{"name":"list_objective_categories","description":"List the three COSO objective categories (operations, reporting, compliance).","inputSchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","properties":{}},"annotations":{"readOnlyHint":true},"title":"List COSO objective categories"},"changes":[{"kind":"annotations","detail":"Added readOnlyHint: true (inferred from the name).","verify":true}],"tokensBefore":66,"tokensAfter":66},{"name":"list_populations","fixed":{"name":"list_populations","description":"List the populations registered for an engagement.","inputSchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["engagementId"],"properties":{"engagementId":{"type":"string","pattern":"^[A-Za-z0-9][A-Za-z0-9_-]{0,63}$"}}},"annotations":{"readOnlyHint":true},"title":"List populations"},"changes":[{"kind":"annotations","detail":"Added readOnlyHint: true (inferred from the name).","verify":true}],"tokensBefore":85,"tokensAfter":85},{"name":"list_principles","fixed":{"name":"list_principles","description":"List the 17 principles of the COSO ICIF-2013, optionally filtered to a single component.","inputSchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","properties":{"component":{"enum":["control-environment","risk-assessment","control-activities","information-communication","monitoring-activities"],"type":"string","description":"Restrict to a single component id."}}},"annotations":{"readOnlyHint":true},"title":"List COSO principles"},"changes":[{"kind":"annotations","detail":"Added readOnlyHint: true (inferred from the name).","verify":true}],"tokensBefore":122,"tokensAfter":122},{"name":"list_risks","fixed":{"name":"list_risks","description":"List the risks registered for an engagement.","inputSchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["engagementId"],"properties":{"engagementId":{"type":"string","pattern":"^[A-Za-z0-9][A-Za-z0-9_-]{0,63}$"}}},"annotations":{"readOnlyHint":true},"title":"List risks"},"changes":[{"kind":"annotations","detail":"Added readOnlyHint: true (inferred from the name).","verify":true}],"tokensBefore":82,"tokensAfter":82},{"name":"list_scope_items","fixed":{"name":"list_scope_items","description":"List the scope items for an engagement.","inputSchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["engagementId"],"properties":{"engagementId":{"type":"string","pattern":"^[A-Za-z0-9][A-Za-z0-9_-]{0,63}$"}}},"annotations":{"readOnlyHint":true},"title":"List scope items"},"changes":[{"kind":"annotations","detail":"Added readOnlyHint: true (inferred from the name).","verify":true}],"tokensBefore":82,"tokensAfter":82},{"name":"list_test_results","fixed":{"name":"list_test_results","description":"List the test results recorded for an engagement.","inputSchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["engagementId"],"properties":{"engagementId":{"type":"string","pattern":"^[A-Za-z0-9][A-Za-z0-9_-]{0,63}$"}}},"annotations":{"readOnlyHint":true},"title":"List test results"},"changes":[{"kind":"annotations","detail":"Added readOnlyHint: true (inferred from the name).","verify":true}],"tokensBefore":85,"tokensAfter":85},{"name":"list_workpapers","fixed":{"name":"list_workpapers","description":"List the workpapers assembled for an engagement.","inputSchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["engagementId"],"properties":{"engagementId":{"type":"string","pattern":"^[A-Za-z0-9][A-Za-z0-9_-]{0,63}$"}}},"annotations":{"readOnlyHint":true},"title":"List workpapers"},"changes":[{"kind":"annotations","detail":"Added readOnlyHint: true (inferred from the name).","verify":true}],"tokensBefore":84,"tokensAfter":84},{"name":"resolve_review_note","fixed":{"name":"resolve_review_note","description":"Mark a review note resolved on a workpaper.","inputSchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["engagementId","workpaperId","noteId"],"properties":{"noteId":{"type":"string","minLength":1},"resolvedBy":{"type":"string","minLength":1},"workpaperId":{"type":"string","pattern":"^[A-Za-z0-9][A-Za-z0-9_-]{0,63}$"},"engagementId":{"type":"string","pattern":"^[A-Za-z0-9][A-Za-z0-9_-]{0,63}$"}}},"annotations":{"readOnlyHint":true},"title":"Resolve a review note"},"changes":[{"kind":"annotations","detail":"Added readOnlyHint: true (inferred from the name).","verify":true}],"tokensBefore":135,"tokensAfter":135}],"toolsChanged":26,"tokensSaved":0,"todo":[{"tool":"add_review_note","params":["text","author","workpaperId","engagementId"]},{"tool":"add_scope_item","params":["inScope","rationale","assertions","engagementId","objectiveCategory"]},{"tool":"aggregate_deficiencies","params":["engagementId","deficiencyIds"]},{"tool":"assemble_workpaper","params":["title","controlId","engagementId"]},{"tool":"assess_component","params":["id","engagementId"]},{"tool":"assess_principle","params":["number","engagementId"]},{"tool":"classify_deficiency","params":["title","controlId","magnitude","pervasive","likelihood","description","remediation","engagementId","exceptionIds","testResultId","compensatingControl"]},{"tool":"compute_sample_size","params":["risk","frequency","populationSize","priorDeficiency","externalReliance"]},{"tool":"create_engagement","params":["materiality"]},{"tool":"create_population","params":["items","period","currency","controlId","description","declaredSize","engagementId"]},{"tool":"framework_integration_check","params":["engagementId"]},{"tool":"generate_report","params":["engagementId"]},{"tool":"get_activity_log","params":["engagementId"]},{"tool":"get_audit_log","params":["engagementId"]},{"tool":"get_component","params":["id"]},{"tool":"get_engagement","params":["id"]},{"tool":"get_principle","params":["id","number"]},{"tool":"get_workpaper","params":["workpaperId","engagementId"]},{"tool":"list_controls","params":["engagementId"]},{"tool":"list_deficiencies","params":["engagementId"]},{"tool":"list_exceptions","params":["engagementId"]},{"tool":"list_populations","params":["engagementId"]},{"tool":"list_risks","params":["engagementId"]},{"tool":"list_scope_items","params":["engagementId"]},{"tool":"list_test_results","params":["engagementId"]},{"tool":"list_workpapers","params":["engagementId"]},{"tool":"note_exception","params":["impact","rootCause","description","engagementId","testResultId","compensatingControl"]},{"tool":"record_test_result","params":["results","sampleId","controlId","procedure","conclusion","preparedBy","engagementId","populationId"]},{"tool":"register_control","params":["key","type","owner","riskIds","frequency","assertions","principles","description","scopeItemId","engagementId"]},{"tool":"register_risk","params":["cause","fraud","impact","assertions","likelihood","principles","description","scopeItemId","engagementId"]},{"tool":"resolve_review_note","params":["noteId","resolvedBy","workpaperId","engagementId"]},{"tool":"select_sample","params":["seed","method","controlId","rationale","sampleSize","engagementId","populationId","targetedReferences"]},{"tool":"sign_off","params":["role","actor","comment","workpaperId","engagementId"]}],"note":"Deterministic fixes. Changes marked verify need a human look before shipping (renames, inferred annotations, inferred types, removed text). Parameter descriptions in `todo` need to be written by someone who knows the API."}