@trycompai/mcp-server 0.2.4 → 0.2.6

package/src/funcs/vendorsVendorAcceptancesControllerListVendorAcceptancesV1.ts

@@ -0,0 +1,157 @@
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ */
+
+import { CompAiCore } from "../core.js";
+import { encodeSimple } from "../lib/encodings.js";
+import { compactMap } from "../lib/primitives.js";
+import { safeParse } from "../lib/schemas.js";
+import { RequestOptions } from "../lib/sdks.js";
+import { extractSecurity, resolveGlobalSecurity } from "../lib/security.js";
+import { pathToFunc } from "../lib/url.js";
+import { APIError } from "../models/errors/apierror.js";
+import {
+  ConnectionError,
+  InvalidRequestError,
+  RequestAbortedError,
+  RequestTimeoutError,
+  UnexpectedClientError,
+} from "../models/errors/httpclienterrors.js";
+import { SDKValidationError } from "../models/errors/sdkvalidationerror.js";
+import {
+  VendorAcceptancesControllerListVendorAcceptancesV1Request,
+  VendorAcceptancesControllerListVendorAcceptancesV1Request$zodSchema,
+} from "../models/vendoracceptancescontrollerlistvendoracceptancesv1op.js";
+import { APICall, APIPromise } from "../types/async.js";
+import { Result } from "../types/fp.js";
+
+/**
+ * List vendor risk acceptance events
+ *
+ * @remarks
+ * Returns the residual-risk acceptance history for a vendor, newest first. Each event freezes the residual rating at acceptance and carries a stale flag set when the vendor's residual rating has changed since (ISO 27001 6.1.3(f)).
+ *
+ * If set, this operation will use {@link Security.apikey} from the global security.
+ */
+export function vendorsVendorAcceptancesControllerListVendorAcceptancesV1(
+  client$: CompAiCore,
+  request: VendorAcceptancesControllerListVendorAcceptancesV1Request,
+  options?: RequestOptions,
+): APIPromise<
+  Result<
+    Response,
+    | APIError
+    | SDKValidationError
+    | UnexpectedClientError
+    | InvalidRequestError
+    | RequestAbortedError
+    | RequestTimeoutError
+    | ConnectionError
+  >
+> {
+  return new APIPromise($do(
+    client$,
+    request,
+    options,
+  ));
+}
+
+async function $do(
+  client$: CompAiCore,
+  request: VendorAcceptancesControllerListVendorAcceptancesV1Request,
+  options?: RequestOptions,
+): Promise<
+  [
+    Result<
+      Response,
+      | APIError
+      | SDKValidationError
+      | UnexpectedClientError
+      | InvalidRequestError
+      | RequestAbortedError
+      | RequestTimeoutError
+      | ConnectionError
+    >,
+    APICall,
+  ]
+> {
+  const parsed$ = safeParse(
+    request,
+    (value$) =>
+      VendorAcceptancesControllerListVendorAcceptancesV1Request$zodSchema.parse(
+        value$,
+      ),
+    "Input validation failed",
+  );
+  if (!parsed$.ok) {
+    return [parsed$, { status: "invalid" }];
+  }
+  const payload$ = parsed$.value;
+  const body$ = null;
+
+  const pathParams$ = {
+    id: encodeSimple("id", payload$.id, {
+      explode: false,
+      charEncoding: "percent",
+    }),
+  };
+  const path$ = pathToFunc("/v1/vendors/{id}/acceptances")(
+    pathParams$,
+  );
+
+  const headers$ = new Headers(compactMap({
+    Accept: "application/json",
+  }));
+  const securityInput = await extractSecurity(client$._options.security);
+  const requestSecurity = resolveGlobalSecurity(securityInput, [0]);
+
+  const context = {
+    options: client$._options,
+    baseURL: options?.serverURL ?? client$._baseURL ?? "",
+    operationID: "VendorAcceptancesController_listVendorAcceptances_v1",
+    oAuth2Scopes: null,
+    resolvedSecurity: requestSecurity,
+    securitySource: client$._options.security,
+    retryConfig: options?.retries
+      || client$._options.retryConfig
+      || { strategy: "none" },
+    retryCodes: options?.retryCodes || [
+      "429",
+      "500",
+      "502",
+      "503",
+      "504",
+    ],
+  };
+
+  const requestRes = client$._createRequest(context, {
+    security: requestSecurity,
+    method: "GET",
+    baseURL: options?.serverURL,
+    path: path$,
+    headers: headers$,
+    body: body$,
+    userAgent: client$._options.userAgent,
+    timeoutMs: options?.timeoutMs || client$._options.timeoutMs
+      || 120000,
+  }, options);
+  if (!requestRes.ok) {
+    return [requestRes, { status: "invalid" }];
+  }
+  const req$ = requestRes.value;
+
+  const doResult = await client$._do(req$, {
+    context,
+    errorCodes: [],
+    retryConfig: context.retryConfig,
+    retryCodes: context.retryCodes,
+  });
+  if (!doResult.ok) {
+    return [doResult, { status: "request-error", request: req$ }];
+  }
+  return [doResult, {
+    status: "complete",
+    "request": req$,
+    response: doResult.value,
+  }];
+}

package/src/funcs/vendorsVendorAcceptancesControllerRecordVendorAcceptanceV1.ts

@@ -0,0 +1,157 @@
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ */
+
+import { CompAiCore } from "../core.js";
+import { encodeJSON, encodeSimple } from "../lib/encodings.js";
+import { compactMap } from "../lib/primitives.js";
+import { safeParse } from "../lib/schemas.js";
+import { RequestOptions } from "../lib/sdks.js";
+import { extractSecurity, resolveGlobalSecurity } from "../lib/security.js";
+import { pathToFunc } from "../lib/url.js";
+import { APIError } from "../models/errors/apierror.js";
+import {
+  ConnectionError,
+  InvalidRequestError,
+  RequestAbortedError,
+  RequestTimeoutError,
+  UnexpectedClientError,
+} from "../models/errors/httpclienterrors.js";
+import { SDKValidationError } from "../models/errors/sdkvalidationerror.js";
+import {
+  VendorAcceptancesControllerRecordVendorAcceptanceV1Request,
+  VendorAcceptancesControllerRecordVendorAcceptanceV1Request$zodSchema,
+} from "../models/vendoracceptancescontrollerrecordvendoracceptancev1op.js";
+import { APICall, APIPromise } from "../types/async.js";
+import { Result } from "../types/fp.js";
+
+/**
+ * Record vendor risk-owner acceptance
+ *
+ * @remarks
+ * Records an immutable, timestamped acceptance of a vendor's current residual risk by the vendor owner (or a chosen member). Re-record after the residual rating changes; prior events remain in the history.
+ *
+ * If set, this operation will use {@link Security.apikey} from the global security.
+ */
+export function vendorsVendorAcceptancesControllerRecordVendorAcceptanceV1(
+  client$: CompAiCore,
+  request: VendorAcceptancesControllerRecordVendorAcceptanceV1Request,
+  options?: RequestOptions,
+): APIPromise<
+  Result<
+    Response,
+    | APIError
+    | SDKValidationError
+    | UnexpectedClientError
+    | InvalidRequestError
+    | RequestAbortedError
+    | RequestTimeoutError
+    | ConnectionError
+  >
+> {
+  return new APIPromise($do(
+    client$,
+    request,
+    options,
+  ));
+}
+
+async function $do(
+  client$: CompAiCore,
+  request: VendorAcceptancesControllerRecordVendorAcceptanceV1Request,
+  options?: RequestOptions,
+): Promise<
+  [
+    Result<
+      Response,
+      | APIError
+      | SDKValidationError
+      | UnexpectedClientError
+      | InvalidRequestError
+      | RequestAbortedError
+      | RequestTimeoutError
+      | ConnectionError
+    >,
+    APICall,
+  ]
+> {
+  const parsed$ = safeParse(
+    request,
+    (value$) =>
+      VendorAcceptancesControllerRecordVendorAcceptanceV1Request$zodSchema
+        .parse(value$),
+    "Input validation failed",
+  );
+  if (!parsed$.ok) {
+    return [parsed$, { status: "invalid" }];
+  }
+  const payload$ = parsed$.value;
+  const body$ = encodeJSON("body", payload$.body, { explode: true });
+
+  const pathParams$ = {
+    id: encodeSimple("id", payload$.id, {
+      explode: false,
+      charEncoding: "percent",
+    }),
+  };
+  const path$ = pathToFunc("/v1/vendors/{id}/acceptances")(
+    pathParams$,
+  );
+
+  const headers$ = new Headers(compactMap({
+    "Content-Type": "application/json",
+    Accept: "application/json",
+  }));
+  const securityInput = await extractSecurity(client$._options.security);
+  const requestSecurity = resolveGlobalSecurity(securityInput, [0]);
+
+  const context = {
+    options: client$._options,
+    baseURL: options?.serverURL ?? client$._baseURL ?? "",
+    operationID: "VendorAcceptancesController_recordVendorAcceptance_v1",
+    oAuth2Scopes: null,
+    resolvedSecurity: requestSecurity,
+    securitySource: client$._options.security,
+    retryConfig: options?.retries
+      || client$._options.retryConfig
+      || { strategy: "none" },
+    retryCodes: options?.retryCodes || [
+      "429",
+      "500",
+      "502",
+      "503",
+      "504",
+    ],
+  };
+
+  const requestRes = client$._createRequest(context, {
+    security: requestSecurity,
+    method: "POST",
+    baseURL: options?.serverURL,
+    path: path$,
+    headers: headers$,
+    body: body$,
+    userAgent: client$._options.userAgent,
+    timeoutMs: options?.timeoutMs || client$._options.timeoutMs
+      || 120000,
+  }, options);
+  if (!requestRes.ok) {
+    return [requestRes, { status: "invalid" }];
+  }
+  const req$ = requestRes.value;
+
+  const doResult = await client$._do(req$, {
+    context,
+    errorCodes: [],
+    retryConfig: context.retryConfig,
+    retryCodes: context.retryCodes,
+  });
+  if (!doResult.ok) {
+    return [doResult, { status: "request-error", request: req$ }];
+  }
+  return [doResult, {
+    status: "complete",
+    "request": req$,
+    response: doResult.value,
+  }];
+}

package/src/landing-page.ts

@@ -930,7 +930,7 @@ http_headers = { "apikey" = "YOUR_APIKEY" }`;
         <h1>Instructions</h1>
         <p>One-click installation for Claude Desktop users</p>
         <div class="instruction-item">
-          <a href="https://github.com/trycompai/comp/releases/download/v0.2.4/mcp-server.mcpb" download="mcp-server.mcpb" class="action-button header-action" style="display: inline-flex; margin-bottom: 16px;">
+          <a href="https://github.com/trycompai/comp-v2/releases/download/v0.2.6/mcp-server.mcpb" download="mcp-server.mcpb" class="action-button header-action" style="display: inline-flex; margin-bottom: 16px;">
             📥 Download MCP Bundle
           </a>
         </div>

package/src/lib/config.ts

@@ -65,8 +65,8 @@ export function serverURLFromOptions(options: SDKOptions): URL | null {
 export const SDK_METADATA = {
   language: "typescript",
   openapiDocVersion: "1.0",
-  sdkVersion: "0.2.4",
-  genVersion: "2.918.4",
+  sdkVersion: "0.2.6",
+  genVersion: "2.924.0",
   userAgent:
-    "speakeasy-sdk/mcp-typescript 0.2.4 2.918.4 1.0 @trycompai/mcp-server",
+    "speakeasy-sdk/mcp-typescript 0.2.6 2.924.0 1.0 @trycompai/mcp-server",
 } as const;

package/src/mcp-server/mcp-server.ts

@@ -21,7 +21,7 @@ const routes = buildRouteMap({
 export const app = buildApplication(routes, {
   name: "mcp",
   versionInfo: {
-    currentVersion: "0.2.4",
+    currentVersion: "0.2.6",
   },
 });
 

package/src/mcp-server/server.ts

@@ -141,6 +141,7 @@ import { tool$ismsISMSControllerGenerateV1 } from "./tools/ismsISMSControllerGen
 import { tool$ismsISMSControllerGetDocumentV1 } from "./tools/ismsISMSControllerGetDocumentV1.js";
 import { tool$ismsISMSControllerGetVersionsV1 } from "./tools/ismsISMSControllerGetVersionsV1.js";
 import { tool$ismsISMSControllerRemoveControlV1 } from "./tools/ismsISMSControllerRemoveControlV1.js";
+import { tool$ismsISMSControllerRiskTreatmentV1 } from "./tools/ismsISMSControllerRiskTreatmentV1.js";
 import { tool$ismsISMSControllerSubmitForApprovalV1 } from "./tools/ismsISMSControllerSubmitForApprovalV1.js";
 import { tool$ismsISMSProfileControllerGenerateAllV1 } from "./tools/ismsISMSProfileControllerGenerateAllV1.js";
 import { tool$ismsISMSProfileControllerGetProfileV1 } from "./tools/ismsISMSProfileControllerGetProfileV1.js";
@@ -255,6 +256,8 @@ import { tool$questionnaireQuestionnaireControllerParseQuestionnaireV1 } from ".
 import { tool$questionnaireQuestionnaireControllerSaveAnswerV1 } from "./tools/questionnaireQuestionnaireControllerSaveAnswerV1.js";
 import { tool$questionnaireQuestionnaireControllerTriggerAutoAnswerV1 } from "./tools/questionnaireQuestionnaireControllerTriggerAutoAnswerV1.js";
 import { tool$questionnaireQuestionnaireControllerUploadAndParseV1 } from "./tools/questionnaireQuestionnaireControllerUploadAndParseV1.js";
+import { tool$risksRiskAcceptancesControllerListRiskAcceptancesV1 } from "./tools/risksRiskAcceptancesControllerListRiskAcceptancesV1.js";
+import { tool$risksRiskAcceptancesControllerRecordRiskAcceptanceV1 } from "./tools/risksRiskAcceptancesControllerRecordRiskAcceptanceV1.js";
 import { tool$risksRisksControllerCreateRiskV1 } from "./tools/risksRisksControllerCreateRiskV1.js";
 import { tool$risksRisksControllerDeleteRiskV1 } from "./tools/risksRisksControllerDeleteRiskV1.js";
 import { tool$risksRisksControllerGetAllRisksV1 } from "./tools/risksRisksControllerGetAllRisksV1.js";
@@ -281,6 +284,9 @@ import { tool$securityPenetrationTestsSecurityPenetrationTestsControllerGetPdfV1
 import { tool$securityPenetrationTestsSecurityPenetrationTestsControllerGetProgressV1 } from "./tools/securityPenetrationTestsSecurityPenetrationTestsControllerGetProgressV1.js";
 import { tool$securityPenetrationTestsSecurityPenetrationTestsControllerGetReportV1 } from "./tools/securityPenetrationTestsSecurityPenetrationTestsControllerGetReportV1.js";
 import { tool$securityPenetrationTestsSecurityPenetrationTestsControllerListV1 } from "./tools/securityPenetrationTestsSecurityPenetrationTestsControllerListV1.js";
+import {
+  tool$securityPenetrationTestsSecurityPenetrationTestsControllerUpdateFindingStatusV1,
+} from "./tools/securityPenetrationTestsSecurityPenetrationTestsControllerUpdateFindingStatusV1.js";
 import { tool$soaSOAControllerApproveDocumentV1 } from "./tools/soaSOAControllerApproveDocumentV1.js";
 import { tool$soaSOAControllerAutoFillV1 } from "./tools/soaSOAControllerAutoFillV1.js";
 import { tool$soaSOAControllerCreateDocumentV1 } from "./tools/soaSOAControllerCreateDocumentV1.js";
@@ -331,6 +337,7 @@ import { tool$trainingTrainingControllerGenerateCertificateV1 } from "./tools/tr
 import { tool$trainingTrainingControllerGenerateHipaaCertificateV1 } from "./tools/trainingTrainingControllerGenerateHipaaCertificateV1.js";
 import { tool$trainingTrainingControllerGetCompletionsV1 } from "./tools/trainingTrainingControllerGetCompletionsV1.js";
 import { tool$trainingTrainingControllerMarkVideoCompleteV1 } from "./tools/trainingTrainingControllerMarkVideoCompleteV1.js";
+import { tool$trainingTrainingControllerSendHipaaTrainingCompletionEmailV1 } from "./tools/trainingTrainingControllerSendHipaaTrainingCompletionEmailV1.js";
 import { tool$trainingTrainingControllerSendTrainingCompletionEmailV1 } from "./tools/trainingTrainingControllerSendTrainingCompletionEmailV1.js";
 import { tool$trustAccessTrustAccessControllerApproveRequestV1 } from "./tools/trustAccessTrustAccessControllerApproveRequestV1.js";
 import { tool$trustAccessTrustAccessControllerCreateAccessRequestV1 } from "./tools/trustAccessTrustAccessControllerCreateAccessRequestV1.js";
@@ -383,6 +390,8 @@ import { tool$trustPortalTrustPortalControllerUploadCustomFrameworkBadgeV1 } fro
 import { tool$trustPortalTrustPortalControllerUploadFaviconV1 } from "./tools/trustPortalTrustPortalControllerUploadFaviconV1.js";
 import { tool$trustPortalTrustPortalControllerUploadTrustDocumentV1 } from "./tools/trustPortalTrustPortalControllerUploadTrustDocumentV1.js";
 import { tool$uploadsUploadsControllerCreateUploadUrlV1 } from "./tools/uploadsUploadsControllerCreateUploadUrlV1.js";
+import { tool$vendorsVendorAcceptancesControllerListVendorAcceptancesV1 } from "./tools/vendorsVendorAcceptancesControllerListVendorAcceptancesV1.js";
+import { tool$vendorsVendorAcceptancesControllerRecordVendorAcceptanceV1 } from "./tools/vendorsVendorAcceptancesControllerRecordVendorAcceptanceV1.js";
 import { tool$vendorsVendorsControllerCreateVendorV1 } from "./tools/vendorsVendorsControllerCreateVendorV1.js";
 import { tool$vendorsVendorsControllerDeleteVendorV1 } from "./tools/vendorsVendorsControllerDeleteVendorV1.js";
 import { tool$vendorsVendorsControllerGetAllVendorsV1 } from "./tools/vendorsVendorsControllerGetAllVendorsV1.js";
@@ -404,7 +413,7 @@ export function createMCPServer(deps: {
 }) {
   const server = new McpServer({
     name: "CompAi",
-    version: "0.2.4",
+    version: "0.2.6",
   });
 
   const getClient = deps.getSDK || (() =>
@@ -561,6 +570,8 @@ export function createMCPServer(deps: {
   tool(tool$risksRisksControllerGetRiskByIdV1);
   tool(tool$risksRisksControllerUpdateRiskV1);
   tool(tool$risksRisksControllerDeleteRiskV1);
+  tool(tool$risksRiskAcceptancesControllerListRiskAcceptancesV1);
+  tool(tool$risksRiskAcceptancesControllerRecordRiskAcceptanceV1);
   tool(tool$vendorsVendorsControllerSearchGlobalVendorsV1);
   tool(tool$vendorsVendorsControllerGetAllVendorsV1);
   tool(tool$vendorsVendorsControllerCreateVendorV1);
@@ -568,6 +579,8 @@ export function createMCPServer(deps: {
   tool(tool$vendorsVendorsControllerUpdateVendorV1);
   tool(tool$vendorsVendorsControllerDeleteVendorV1);
   tool(tool$vendorsVendorsControllerTriggerAssessmentV1);
+  tool(tool$vendorsVendorAcceptancesControllerListVendorAcceptancesV1);
+  tool(tool$vendorsVendorAcceptancesControllerRecordVendorAcceptanceV1);
   tool(tool$contextContextControllerGetAllContextV1);
   tool(tool$contextContextControllerCreateContextV1);
   tool(tool$contextContextControllerGetContextByIdV1);
@@ -758,6 +771,7 @@ export function createMCPServer(deps: {
   tool(tool$ismsISMSControllerApproveV1);
   tool(tool$ismsISMSControllerDeclineV1);
   tool(tool$ismsISMSControllerDriftV1);
+  tool(tool$ismsISMSControllerRiskTreatmentV1);
   tool(tool$ismsISMSControllerGetVersionsV1);
   tool(tool$ismsISMSControllerExportDocumentV1);
   tool(tool$ismsISMSRegistersControllerCreateRowV1);
@@ -779,6 +793,7 @@ export function createMCPServer(deps: {
   tool(tool$trainingTrainingControllerGetCompletionsV1);
   tool(tool$trainingTrainingControllerMarkVideoCompleteV1);
   tool(tool$trainingTrainingControllerSendTrainingCompletionEmailV1);
+  tool(tool$trainingTrainingControllerSendHipaaTrainingCompletionEmailV1);
   tool(tool$trainingTrainingControllerGenerateCertificateV1);
   tool(tool$trainingTrainingControllerGenerateHipaaCertificateV1);
   tool(tool$orgChartOrgChartControllerGetOrgChartV1);
@@ -811,6 +826,9 @@ export function createMCPServer(deps: {
   tool(
     tool$securityPenetrationTestsSecurityPenetrationTestsControllerGetIssuesV1,
   );
+  tool(
+    tool$securityPenetrationTestsSecurityPenetrationTestsControllerUpdateFindingStatusV1,
+  );
   tool(
     tool$securityPenetrationTestsSecurityPenetrationTestsControllerGetEventsV1,
   );

package/src/mcp-server/tools/ismsISMSControllerRiskTreatmentV1.ts

@@ -0,0 +1,44 @@
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ */
+
+import { ismsISMSControllerRiskTreatmentV1 } from "../../funcs/ismsISMSControllerRiskTreatmentV1.js";
+import { IsmsControllerRiskTreatmentV1Request$zodSchema } from "../../models/ismscontrollerrisktreatmentv1op.js";
+import { formatResult, ToolDefinition } from "../tools.js";
+
+const args = {
+  request: IsmsControllerRiskTreatmentV1Request$zodSchema,
+};
+
+export const tool$ismsISMSControllerRiskTreatmentV1: ToolDefinition<
+  typeof args
+> = {
+  name: "risk-treatment",
+  description: `The Risk Treatment Plan's rows (Clause 6.1.3)
+
+Returns the organisational and supplier risk rows the Risk Treatment Plan renders (from the Risk Register and Vendors, with acceptance state per row) plus its submit-readiness messages.`,
+  annotations: {
+    "title": "",
+    "destructiveHint": false,
+    "idempotentHint": false,
+    "openWorldHint": false,
+    "readOnlyHint": false,
+  },
+  args,
+  tool: async (client, args, ctx) => {
+    const [result] = await ismsISMSControllerRiskTreatmentV1(
+      client,
+      args.request,
+      { fetchOptions: { signal: ctx.signal } },
+    ).$inspect();
+
+    if (!result.ok) {
+      return {
+        content: [{ type: "text", text: result.error.message }],
+        isError: true,
+      };
+    }
+
+    return formatResult(result.value);
+  },
+};

package/src/mcp-server/tools/risksRiskAcceptancesControllerListRiskAcceptancesV1.ts

@@ -0,0 +1,44 @@
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ */
+
+import { risksRiskAcceptancesControllerListRiskAcceptancesV1 } from "../../funcs/risksRiskAcceptancesControllerListRiskAcceptancesV1.js";
+import { RiskAcceptancesControllerListRiskAcceptancesV1Request$zodSchema } from "../../models/riskacceptancescontrollerlistriskacceptancesv1op.js";
+import { formatResult, ToolDefinition } from "../tools.js";
+
+const args = {
+  request: RiskAcceptancesControllerListRiskAcceptancesV1Request$zodSchema,
+};
+
+export const tool$risksRiskAcceptancesControllerListRiskAcceptancesV1:
+  ToolDefinition<typeof args> = {
+    name: "list-risk-acceptances",
+    description: `List risk-owner acceptance events
+
+Returns the residual-risk acceptance history for a risk, newest first. Each event freezes the residual rating at acceptance and carries a stale flag set when the risk's residual rating has changed since (ISO 27001 6.1.3(f)).`,
+    annotations: {
+      "title": "",
+      "destructiveHint": false,
+      "idempotentHint": false,
+      "openWorldHint": false,
+      "readOnlyHint": false,
+    },
+    args,
+    tool: async (client, args, ctx) => {
+      const [result] =
+        await risksRiskAcceptancesControllerListRiskAcceptancesV1(
+          client,
+          args.request,
+          { fetchOptions: { signal: ctx.signal } },
+        ).$inspect();
+
+      if (!result.ok) {
+        return {
+          content: [{ type: "text", text: result.error.message }],
+          isError: true,
+        };
+      }
+
+      return formatResult(result.value);
+    },
+  };

package/src/mcp-server/tools/risksRiskAcceptancesControllerRecordRiskAcceptanceV1.ts

@@ -0,0 +1,44 @@
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ */
+
+import { risksRiskAcceptancesControllerRecordRiskAcceptanceV1 } from "../../funcs/risksRiskAcceptancesControllerRecordRiskAcceptanceV1.js";
+import { RiskAcceptancesControllerRecordRiskAcceptanceV1Request$zodSchema } from "../../models/riskacceptancescontrollerrecordriskacceptancev1op.js";
+import { formatResult, ToolDefinition } from "../tools.js";
+
+const args = {
+  request: RiskAcceptancesControllerRecordRiskAcceptanceV1Request$zodSchema,
+};
+
+export const tool$risksRiskAcceptancesControllerRecordRiskAcceptanceV1:
+  ToolDefinition<typeof args> = {
+    name: "record-risk-acceptance",
+    description: `Record risk-owner acceptance
+
+Records an immutable, timestamped acceptance of a risk's current residual risk by the risk owner (or a chosen member). Re-record after the residual rating changes; prior events remain in the history.`,
+    annotations: {
+      "title": "",
+      "destructiveHint": false,
+      "idempotentHint": false,
+      "openWorldHint": false,
+      "readOnlyHint": false,
+    },
+    args,
+    tool: async (client, args, ctx) => {
+      const [result] =
+        await risksRiskAcceptancesControllerRecordRiskAcceptanceV1(
+          client,
+          args.request,
+          { fetchOptions: { signal: ctx.signal } },
+        ).$inspect();
+
+      if (!result.ok) {
+        return {
+          content: [{ type: "text", text: result.error.message }],
+          isError: true,
+        };
+      }
+
+      return formatResult(result.value);
+    },
+  };

package/src/mcp-server/tools/securityPenetrationTestsSecurityPenetrationTestsControllerUpdateFindingStatusV1.ts

@@ -0,0 +1,45 @@
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ */
+
+import { securityPenetrationTestsSecurityPenetrationTestsControllerUpdateFindingStatusV1 } from "../../funcs/securityPenetrationTestsSecurityPenetrationTestsControllerUpdateFindingStatusV1.js";
+import { SecurityPenetrationTestsControllerUpdateFindingStatusV1Request$zodSchema } from "../../models/securitypenetrationtestscontrollerupdatefindingstatusv1op.js";
+import { formatResult, ToolDefinition } from "../tools.js";
+
+const args = {
+  request:
+    SecurityPenetrationTestsControllerUpdateFindingStatusV1Request$zodSchema,
+};
+
+export const tool$securityPenetrationTestsSecurityPenetrationTestsControllerUpdateFindingStatusV1:
+  ToolDefinition<typeof args> = {
+    name: "update-pentest-finding-status",
+    description: `Update a penetration test finding status
+
+Triage or dispute a single penetration test finding. Marking one \`false_positive\` or \`wont_fix\` requires a justification note, recorded in the finding's status history and the audit log. Requires \`pentest:update\`.`,
+    annotations: {
+      "title": "",
+      "destructiveHint": false,
+      "idempotentHint": false,
+      "openWorldHint": false,
+      "readOnlyHint": false,
+    },
+    args,
+    tool: async (client, args, ctx) => {
+      const [result] =
+        await securityPenetrationTestsSecurityPenetrationTestsControllerUpdateFindingStatusV1(
+          client,
+          args.request,
+          { fetchOptions: { signal: ctx.signal } },
+        ).$inspect();
+
+      if (!result.ok) {
+        return {
+          content: [{ type: "text", text: result.error.message }],
+          isError: true,
+        };
+      }
+
+      return formatResult(result.value);
+    },
+  };

package/src/mcp-server/tools/trainingTrainingControllerSendHipaaTrainingCompletionEmailV1.ts

@@ -0,0 +1,44 @@
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ */
+
+import { trainingTrainingControllerSendHipaaTrainingCompletionEmailV1 } from "../../funcs/trainingTrainingControllerSendHipaaTrainingCompletionEmailV1.js";
+import { SendTrainingCompletionDto$zodSchema } from "../../models/sendtrainingcompletiondto.js";
+import { formatResult, ToolDefinition } from "../tools.js";
+
+const args = {
+  request: SendTrainingCompletionDto$zodSchema,
+};
+
+export const tool$trainingTrainingControllerSendHipaaTrainingCompletionEmailV1:
+  ToolDefinition<typeof args> = {
+    name: "send-hipaa-training-completion-email",
+    description: `Send HIPAA training completion email with certificate
+
+Checks if the member has completed the HIPAA Security Awareness Training. If so, sends an email with the HIPAA training certificate attached.`,
+    annotations: {
+      "title": "",
+      "destructiveHint": false,
+      "idempotentHint": false,
+      "openWorldHint": false,
+      "readOnlyHint": false,
+    },
+    args,
+    tool: async (client, args, ctx) => {
+      const [result] =
+        await trainingTrainingControllerSendHipaaTrainingCompletionEmailV1(
+          client,
+          args.request,
+          { fetchOptions: { signal: ctx.signal } },
+        ).$inspect();
+
+      if (!result.ok) {
+        return {
+          content: [{ type: "text", text: result.error.message }],
+          isError: true,
+        };
+      }
+
+      return formatResult(result.value);
+    },
+  };