coso-mcp

Reviewed 2h ago.

• tools: 39 tools scanned
• metadata: scanned
• packages: 1 checked

No findings.

Tools (39)

• get_server_info

  Return the server identity, the COSO framework it covers, and the mandatory disclaimer.

• list_components

  List the five components of the COSO Internal Control—Integrated Framework (ICIF-2013).

• list_principles

  List the 17 principles of the COSO ICIF-2013, optionally filtered to a single component.

• get_principle

  Return a single COSO principle by framework number or slug, including its paraphrased points of focus.

• get_component

  Return a single COSO component by id, with its principles.

• list_objective_categories

  List the three COSO objective categories (operations, reporting, compliance).

• list_assertions

  List the assertions used to frame control objectives: completeness, existence/occurrence, accuracy, valuation, obligations/rights, presentation/disclosure.

• create_engagement

  Create a new internal-control review engagement. Returns the engagement id used by all later tools.

• get_engagement

  Return an engagement by id.

• list_engagements

  List all engagement ids and titles.

• add_scope_item

  Add a significant account/process to the review scope, with its objective category and assertions.

• list_scope_items

  List the scope items for an engagement.

• register_risk

  Register a risk to objectives, with likelihood, assertions, related COSO principles and a fraud flag.

• list_risks

  List the risks registered for an engagement.

• register_control

  Register a key control with its type, frequency, linked risks, assertions and COSO principles.

• list_controls

  List the controls registered for an engagement.

• get_audit_log

  Return the append-only audit events recorded for an engagement.

• compute_sample_size

  Recommend a sample size for a control from its frequency, risk and population size, with a documented rationale.

• create_population

  Register the population for a control — either an explicit item list or a declared size. Bounded to 10000 items.

• list_populations

  List the populations registered for an engagement.

• select_sample

  Select a reproducible sample from a population. Seeded (deterministic) for random/systematic/haphazard; targeted takes explicit references. Records the method, seed and references.

• record_test_result

  Record attribute-level outcomes (pass/fail/na) for a tested sample, with an optional conclusion.

• list_test_results

  List the test results recorded for an engagement.

• note_exception

  Record an exception identified during testing, with root cause, impact and any compensating control.

• list_exceptions

  List the exceptions recorded for an engagement.

• assemble_workpaper

  Assemble a Markdown control-testing workpaper from the control, its risks, population, sample, test results and exceptions.

• list_workpapers

  List the workpapers assembled for an engagement.

• get_workpaper

  Return a workpaper including its rendered Markdown.

• add_review_note

  Add a reviewer note to a workpaper.

• resolve_review_note

  Mark a review note resolved on a workpaper.

• sign_off

  Record a preparer or reviewer sign-off. Warns (does not block) if the same person prepared and reviewed.

• get_activity_log

  Return the append-only activity log for an engagement, plus a Markdown rendering.

• classify_deficiency

  Classify a control deficiency as deficiency / significant deficiency / material weakness from likelihood × magnitude (escalates for a pervasive control).

• list_deficiencies

  List the deficiencies recorded for an engagement.

• aggregate_deficiencies

  Group related deficiencies by control, flag combinations that may aggregate, and report the overall severity.

• assess_principle

  Report data-driven coverage indicators for one COSO principle (controls, risks and deficiencies mapped to it).

• assess_component

  Report coverage indicators for one COSO component, aggregating its principles.

• framework_integration_check

  Check that all five COSO components have some recorded coverage and that principles are addressed.

• generate_report

  Generate a Markdown internal-control review report: scope, risks, controls, testing, workpapers, deficiencies and COSO coverage.