Coso MCP
Open COSO internal-control review MCP: scope, risk, controls, sampling, testing, workpapers.
Connect it
Settings → Connectors → Add custom connector
URL: https://internal-control.ascent-partners.com/mcpSettings → Apps & Connectors → Advanced → Developer mode
Create connector with URL: https://internal-control.ascent-partners.com/mcp{
"mcpServers": {
"coso-mcp": {
"url": "https://internal-control.ascent-partners.com/mcp"
}
}
}claude mcp add --transport http coso-mcp https://internal-control.ascent-partners.com/mcp{
"servers": {
"coso-mcp": {
"type": "http",
"url": "https://internal-control.ascent-partners.com/mcp"
}
}
}{
"mcpServers": {
"coso-mcp": {
"command": "npx",
"args": [
"-y",
"@simonmak-ascent/coso-mcp@0.1.2"
]
}
}
}claude mcp add coso-mcp -- npx -y @simonmak-ascent/coso-mcp@0.1.239 tools, verified live
get_server_infoReturn the server identity, the COSO framework it covers, and the mandatory disclaimer.
list_componentsList the five components of the COSO Internal ControlâIntegrated Framework (ICIF-2013).
list_principlesList the 17 principles of the COSO ICIF-2013, optionally filtered to a single component.
get_principleReturn a single COSO principle by framework number or slug, including its paraphrased points of focus.
get_componentReturn a single COSO component by id, with its principles.
list_objective_categoriesList the three COSO objective categories (operations, reporting, compliance).
list_assertionsList the assertions used to frame control objectives: completeness, existence/occurrence, accuracy, valuation, obligations/rights, presentation/disclosure.
create_engagementCreate a new internal-control review engagement. Returns the engagement id used by all later tools.
get_engagementReturn an engagement by id.
list_engagementsList all engagement ids and titles.
add_scope_itemAdd a significant account/process to the review scope, with its objective category and assertions.
list_scope_itemsList the scope items for an engagement.
register_riskRegister a risk to objectives, with likelihood, assertions, related COSO principles and a fraud flag.
list_risksList the risks registered for an engagement.
register_controlRegister a key control with its type, frequency, linked risks, assertions and COSO principles.
list_controlsList the controls registered for an engagement.
get_audit_logReturn the append-only audit events recorded for an engagement.
compute_sample_sizeRecommend a sample size for a control from its frequency, risk and population size, with a documented rationale.
create_populationRegister the population for a control â either an explicit item list or a declared size. Bounded to 10000 items.
list_populationsList the populations registered for an engagement.
select_sampleSelect a reproducible sample from a population. Seeded (deterministic) for random/systematic/haphazard; targeted takes explicit references. Records the method, seed and references.
record_test_resultRecord attribute-level outcomes (pass/fail/na) for a tested sample, with an optional conclusion.
list_test_resultsList the test results recorded for an engagement.
note_exceptionRecord an exception identified during testing, with root cause, impact and any compensating control.
list_exceptionsList the exceptions recorded for an engagement.
assemble_workpaperAssemble a Markdown control-testing workpaper from the control, its risks, population, sample, test results and exceptions.
list_workpapersList the workpapers assembled for an engagement.
get_workpaperReturn a workpaper including its rendered Markdown.
add_review_noteAdd a reviewer note to a workpaper.
resolve_review_noteMark a review note resolved on a workpaper.
sign_offRecord a preparer or reviewer sign-off. Warns (does not block) if the same person prepared and reviewed.
get_activity_logReturn the append-only activity log for an engagement, plus a Markdown rendering.
classify_deficiencyClassify a control deficiency as deficiency / significant deficiency / material weakness from likelihood à magnitude (escalates for a pervasive control).
list_deficienciesList the deficiencies recorded for an engagement.
aggregate_deficienciesGroup related deficiencies by control, flag combinations that may aggregate, and report the overall severity.
assess_principleReport data-driven coverage indicators for one COSO principle (controls, risks and deficiencies mapped to it).
assess_componentReport coverage indicators for one COSO component, aggregating its principles.
framework_integration_checkCheck that all five COSO components have some recorded coverage and that principles are addressed.
generate_reportGenerate a Markdown internal-control review report: scope, risks, controls, testing, workpapers, deficiencies and COSO coverage.
Alternatives in Developer Tools
Compare →ZTZoom TasksOfficialA
Zoom Tasks server for creating, updating, assigning, and synchronizing task workflows.
ZDZoom DocsOfficialA
Zoom Docs server for creating and retrieving Zoom documents and notes in Markdown.
ZWZoom WhiteboardOfficialA
Zoom Whiteboard server for creating boards and diagrams and locating existing boards.
ZWZoom WorkspaceOfficialA
Zoom workspace server for meetings, chat, docs, recordings, and AI-generated collaboration content.
KeployA
End-to-end API testing — generate and run tests from OpenAPI, curl, Postman, or real user traffic.
ShipStaticA
Deploy static websites, landing pages, and prototypes instantly from AI agents.