coso mcp MCP Tools

• get_server_info Read-only

  get server info

• list_components Read-only

  list components

• list_principles Read-only

  list principles

• get_principle Read-only

  get principle

• get_component Read-only

  get component

• list_objective_categories Read-only

  list objective categories

• list_assertions Read-only

  list assertions

• create_engagement Mutating

  create engagement

• get_engagement Read-only

  get engagement

• list_engagements Read-only

  list engagements

• add_scope_item Mutating

  add scope item

• list_scope_items Read-only

  list scope items

• register_risk

  register risk

• list_risks Read-only

  list risks

• register_control

  register control

• list_controls Read-only

  list controls

• get_audit_log Read-only

  get audit log

• compute_sample_size

  compute sample size

• create_population Mutating

  create population

• list_populations Read-only

  list populations

• select_sample

  select sample

• record_test_result

  record test result

• list_test_results Read-only

  list test results

• note_exception

  note exception

• list_exceptions Read-only

  list exceptions

• assemble_workpaper

  assemble workpaper

• list_workpapers Read-only

  list workpapers

• get_workpaper Read-only

  get workpaper

• add_review_note Mutating

  add review note

• resolve_review_note Read-only

  resolve review note

• sign_off

  sign off

• get_activity_log Read-only

  get activity log

• classify_deficiency

  classify deficiency

• list_deficiencies Read-only

  list deficiencies

• aggregate_deficiencies

  aggregate deficiencies

• assess_principle

  assess principle

• assess_component

  assess component

• framework_integration_check

  framework integration check

• generate_report

  generate report

This list was read from the server itself, by connecting to it and calling tools/list on 14 November 2026. It is what the server actually exposes, not what its listing claims.

Mutating and Read-only are read off each tool's name, not its schema — a hint, not a guarantee. The registry stores tool names only; connect the server for its live schemas.