@trycompai/mcp-server 0.3.0 → 0.3.3

package/src/funcs/soaSOAControllerExportDocumentV1.ts

@@ -4,7 +4,9 @@
  */
 
 import { CompAiCore } from "../core.js";
+import { encodeJSON } from "../lib/encodings.js";
 import { compactMap } from "../lib/primitives.js";
+import { safeParse } from "../lib/schemas.js";
 import { RequestOptions } from "../lib/sdks.js";
 import { extractSecurity, resolveGlobalSecurity } from "../lib/security.js";
 import { pathToFunc } from "../lib/url.js";
@@ -17,7 +19,10 @@ import {
   UnexpectedClientError,
 } from "../models/errors/httpclienterrors.js";
 import { SDKValidationError } from "../models/errors/sdkvalidationerror.js";
-import { ExportSOADocumentDto } from "../models/exportsoadocumentdto.js";
+import {
+  ExportSOADocumentDto,
+  ExportSOADocumentDto$zodSchema,
+} from "../models/exportsoadocumentdto.js";
 import { APICall, APIPromise } from "../types/async.js";
 import { Result } from "../types/fp.js";
 
@@ -29,7 +34,7 @@ import { Result } from "../types/fp.js";
  */
 export function soaSOAControllerExportDocumentV1(
   client$: CompAiCore,
-  _request: ExportSOADocumentDto,
+  request: ExportSOADocumentDto,
   options?: RequestOptions,
 ): APIPromise<
   Result<
@@ -45,14 +50,14 @@ export function soaSOAControllerExportDocumentV1(
 > {
   return new APIPromise($do(
     client$,
-    _request,
+    request,
     options,
   ));
 }
 
 async function $do(
   client$: CompAiCore,
-  _request: ExportSOADocumentDto,
+  request: ExportSOADocumentDto,
   options?: RequestOptions,
 ): Promise<
   [
@@ -69,6 +74,16 @@ async function $do(
     APICall,
   ]
 > {
+  const parsed$ = safeParse(
+    request,
+    (value$) => ExportSOADocumentDto$zodSchema.parse(value$),
+    "Input validation failed",
+  );
+  if (!parsed$.ok) {
+    return [parsed$, { status: "invalid" }];
+  }
+  const payload$ = parsed$.value;
+  const body$ = encodeJSON("body", payload$, { explode: true });
   const path$ = pathToFunc("/v1/soa/export")();
 
   const headers$ = new Headers(compactMap({
@@ -103,6 +118,7 @@ async function $do(
     baseURL: options?.serverURL,
     path: path$,
     headers: headers$,
+    body: body$,
     userAgent: client$._options.userAgent,
     timeoutMs: options?.timeoutMs || client$._options.timeoutMs
       || 120000,

package/src/funcs/soaSOAControllerGetSetupV1.ts

@@ -4,11 +4,16 @@
  */
 
 import { CompAiCore } from "../core.js";
+import { encodeJSON } from "../lib/encodings.js";
 import { compactMap } from "../lib/primitives.js";
+import { safeParse } from "../lib/schemas.js";
 import { RequestOptions } from "../lib/sdks.js";
 import { extractSecurity, resolveGlobalSecurity } from "../lib/security.js";
 import { pathToFunc } from "../lib/url.js";
-import { EnsureSOASetupDto } from "../models/ensuresoasetupdto.js";
+import {
+  EnsureSOASetupDto,
+  EnsureSOASetupDto$zodSchema,
+} from "../models/ensuresoasetupdto.js";
 import { APIError } from "../models/errors/apierror.js";
 import {
   ConnectionError,
@@ -29,7 +34,7 @@ import { Result } from "../types/fp.js";
  */
 export function soaSOAControllerGetSetupV1(
   client$: CompAiCore,
-  _request: EnsureSOASetupDto,
+  request: EnsureSOASetupDto,
   options?: RequestOptions,
 ): APIPromise<
   Result<
@@ -45,14 +50,14 @@ export function soaSOAControllerGetSetupV1(
 > {
   return new APIPromise($do(
     client$,
-    _request,
+    request,
     options,
   ));
 }
 
 async function $do(
   client$: CompAiCore,
-  _request: EnsureSOASetupDto,
+  request: EnsureSOASetupDto,
   options?: RequestOptions,
 ): Promise<
   [
@@ -69,6 +74,16 @@ async function $do(
     APICall,
   ]
 > {
+  const parsed$ = safeParse(
+    request,
+    (value$) => EnsureSOASetupDto$zodSchema.parse(value$),
+    "Input validation failed",
+  );
+  if (!parsed$.ok) {
+    return [parsed$, { status: "invalid" }];
+  }
+  const payload$ = parsed$.value;
+  const body$ = encodeJSON("body", payload$, { explode: true });
   const path$ = pathToFunc("/v1/soa/get-setup")();
 
   const headers$ = new Headers(compactMap({
@@ -103,6 +118,7 @@ async function $do(
     baseURL: options?.serverURL,
     path: path$,
     headers: headers$,
+    body: body$,
     userAgent: client$._options.userAgent,
     timeoutMs: options?.timeoutMs || client$._options.timeoutMs
       || 120000,

package/src/funcs/soaSOAControllerSaveAnswerV1.ts

@@ -4,7 +4,9 @@
  */
 
 import { CompAiCore } from "../core.js";
+import { encodeJSON } from "../lib/encodings.js";
 import { compactMap } from "../lib/primitives.js";
+import { safeParse } from "../lib/schemas.js";
 import { RequestOptions } from "../lib/sdks.js";
 import { extractSecurity, resolveGlobalSecurity } from "../lib/security.js";
 import { pathToFunc } from "../lib/url.js";
@@ -17,7 +19,10 @@ import {
   UnexpectedClientError,
 } from "../models/errors/httpclienterrors.js";
 import { SDKValidationError } from "../models/errors/sdkvalidationerror.js";
-import { SaveSOAAnswerDto } from "../models/savesoaanswerdto.js";
+import {
+  SaveSOAAnswerDto,
+  SaveSOAAnswerDto$zodSchema,
+} from "../models/savesoaanswerdto.js";
 import { APICall, APIPromise } from "../types/async.js";
 import { Result } from "../types/fp.js";
 
@@ -29,7 +34,7 @@ import { Result } from "../types/fp.js";
  */
 export function soaSOAControllerSaveAnswerV1(
   client$: CompAiCore,
-  _request: SaveSOAAnswerDto,
+  request: SaveSOAAnswerDto,
   options?: RequestOptions,
 ): APIPromise<
   Result<
@@ -45,14 +50,14 @@ export function soaSOAControllerSaveAnswerV1(
 > {
   return new APIPromise($do(
     client$,
-    _request,
+    request,
     options,
   ));
 }
 
 async function $do(
   client$: CompAiCore,
-  _request: SaveSOAAnswerDto,
+  request: SaveSOAAnswerDto,
   options?: RequestOptions,
 ): Promise<
   [
@@ -69,6 +74,16 @@ async function $do(
     APICall,
   ]
 > {
+  const parsed$ = safeParse(
+    request,
+    (value$) => SaveSOAAnswerDto$zodSchema.parse(value$),
+    "Input validation failed",
+  );
+  if (!parsed$.ok) {
+    return [parsed$, { status: "invalid" }];
+  }
+  const payload$ = parsed$.value;
+  const body$ = encodeJSON("body", payload$, { explode: true });
   const path$ = pathToFunc("/v1/soa/save-answer")();
 
   const headers$ = new Headers(compactMap({
@@ -103,6 +118,7 @@ async function $do(
     baseURL: options?.serverURL,
     path: path$,
     headers: headers$,
+    body: body$,
     userAgent: client$._options.userAgent,
     timeoutMs: options?.timeoutMs || client$._options.timeoutMs
       || 120000,

package/src/funcs/soaSOAControllerSubmitForApprovalV1.ts

@@ -4,7 +4,9 @@
  */
 
 import { CompAiCore } from "../core.js";
+import { encodeJSON } from "../lib/encodings.js";
 import { compactMap } from "../lib/primitives.js";
+import { safeParse } from "../lib/schemas.js";
 import { RequestOptions } from "../lib/sdks.js";
 import { extractSecurity, resolveGlobalSecurity } from "../lib/security.js";
 import { pathToFunc } from "../lib/url.js";
@@ -17,7 +19,10 @@ import {
   UnexpectedClientError,
 } from "../models/errors/httpclienterrors.js";
 import { SDKValidationError } from "../models/errors/sdkvalidationerror.js";
-import { SubmitSOAForApprovalDto } from "../models/submitsoaforapprovaldto.js";
+import {
+  SubmitSOAForApprovalDto,
+  SubmitSOAForApprovalDto$zodSchema,
+} from "../models/submitsoaforapprovaldto.js";
 import { APICall, APIPromise } from "../types/async.js";
 import { Result } from "../types/fp.js";
 
@@ -29,7 +34,7 @@ import { Result } from "../types/fp.js";
  */
 export function soaSOAControllerSubmitForApprovalV1(
   client$: CompAiCore,
-  _request: SubmitSOAForApprovalDto,
+  request: SubmitSOAForApprovalDto,
   options?: RequestOptions,
 ): APIPromise<
   Result<
@@ -45,14 +50,14 @@ export function soaSOAControllerSubmitForApprovalV1(
 > {
   return new APIPromise($do(
     client$,
-    _request,
+    request,
     options,
   ));
 }
 
 async function $do(
   client$: CompAiCore,
-  _request: SubmitSOAForApprovalDto,
+  request: SubmitSOAForApprovalDto,
   options?: RequestOptions,
 ): Promise<
   [
@@ -69,6 +74,16 @@ async function $do(
     APICall,
   ]
 > {
+  const parsed$ = safeParse(
+    request,
+    (value$) => SubmitSOAForApprovalDto$zodSchema.parse(value$),
+    "Input validation failed",
+  );
+  if (!parsed$.ok) {
+    return [parsed$, { status: "invalid" }];
+  }
+  const payload$ = parsed$.value;
+  const body$ = encodeJSON("body", payload$, { explode: true });
   const path$ = pathToFunc("/v1/soa/submit-for-approval")();
 
   const headers$ = new Headers(compactMap({
@@ -103,6 +118,7 @@ async function $do(
     baseURL: options?.serverURL,
     path: path$,
     headers: headers$,
+    body: body$,
     userAgent: client$._options.userAgent,
     timeoutMs: options?.timeoutMs || client$._options.timeoutMs
       || 120000,

package/src/funcs/vendorsVendorsControllerSearchGlobalVendorsV1.ts

@@ -89,7 +89,9 @@ async function $do(
   const body$ = null;
   const path$ = pathToFunc("/v1/vendors/global/search")();
   const query$ = encodeFormQuery({
+    "lite": payload$?.lite,
     "name": payload$?.name,
+    "suggest": payload$?.suggest,
   });
 
   const headers$ = new Headers(compactMap({

package/src/landing-page.ts

@@ -931,7 +931,7 @@ http_headers = { "apikey" = "YOUR_APIKEY" }`;
         <h1>Instructions</h1>
         <p>One-click installation for Claude Desktop users</p>
         <div class="instruction-item">
-          <a href="https://github.com/trycompai/comp-v2/releases/download/v0.3.0/mcp-server.mcpb" download="mcp-server.mcpb" class="action-button header-action" style="display: inline-flex; margin-bottom: 16px;">
+          <a href="https://github.com/trycompai/comp-v2/releases/download/v0.3.3/mcp-server.mcpb" download="mcp-server.mcpb" class="action-button header-action" style="display: inline-flex; margin-bottom: 16px;">
             📥 Download MCP Bundle
           </a>
         </div>

package/src/lib/config.ts

@@ -66,8 +66,8 @@ export function serverURLFromOptions(options: SDKOptions): URL | null {
 export const SDK_METADATA = {
   language: "typescript",
   openapiDocVersion: "1.0",
-  sdkVersion: "0.3.0",
+  sdkVersion: "0.3.3",
   genVersion: "2.928.0",
   userAgent:
-    "speakeasy-sdk/mcp-typescript 0.3.0 2.928.0 1.0 @trycompai/mcp-server",
+    "speakeasy-sdk/mcp-typescript 0.3.3 2.928.0 1.0 @trycompai/mcp-server",
 } as const;

package/src/mcp-server/mcp-server.ts

@@ -22,7 +22,7 @@ const routes = buildRouteMap({
 export const app = buildApplication(routes, {
   name: "mcp",
   versionInfo: {
-    currentVersion: "0.3.0",
+    currentVersion: "0.3.3",
   },
 });
 

package/src/mcp-server/server.ts

@@ -170,11 +170,11 @@ import { tool$ismsISMSControllerGenerateV1 } from "./tools/ismsISMSControllerGen
 import { tool$ismsISMSControllerGetDocumentV1 } from "./tools/ismsISMSControllerGetDocumentV1.js";
 import { tool$ismsISMSControllerGetVersionsV1 } from "./tools/ismsISMSControllerGetVersionsV1.js";
 import { tool$ismsISMSControllerRemoveControlV1 } from "./tools/ismsISMSControllerRemoveControlV1.js";
+import { tool$ismsISMSControllerRemoveDocumentFileV1 } from "./tools/ismsISMSControllerRemoveDocumentFileV1.js";
 import { tool$ismsISMSControllerRiskTreatmentV1 } from "./tools/ismsISMSControllerRiskTreatmentV1.js";
+import { tool$ismsISMSControllerSetContentSourceV1 } from "./tools/ismsISMSControllerSetContentSourceV1.js";
 import { tool$ismsISMSControllerSubmitForApprovalV1 } from "./tools/ismsISMSControllerSubmitForApprovalV1.js";
-import { tool$ismsISMSProfileControllerGenerateAllV1 } from "./tools/ismsISMSProfileControllerGenerateAllV1.js";
-import { tool$ismsISMSProfileControllerGetProfileV1 } from "./tools/ismsISMSProfileControllerGetProfileV1.js";
-import { tool$ismsISMSProfileControllerSaveProfileV1 } from "./tools/ismsISMSProfileControllerSaveProfileV1.js";
+import { tool$ismsISMSControllerUploadDocumentFileV1 } from "./tools/ismsISMSControllerUploadDocumentFileV1.js";
 import { tool$ismsISMSRegistersControllerBulkCreateMeasurementsV1 } from "./tools/ismsISMSRegistersControllerBulkCreateMeasurementsV1.js";
 import { tool$ismsISMSRegistersControllerCreateRowV1 } from "./tools/ismsISMSRegistersControllerCreateRowV1.js";
 import { tool$ismsISMSRegistersControllerDeleteRowV1 } from "./tools/ismsISMSRegistersControllerDeleteRowV1.js";
@@ -307,6 +307,7 @@ import { tool$rolesRolesControllerGetRoleV1 } from "./tools/rolesRolesController
 import { tool$rolesRolesControllerListRolesV1 } from "./tools/rolesRolesControllerListRolesV1.js";
 import { tool$rolesRolesControllerUpdateBuiltInObligationsV1 } from "./tools/rolesRolesControllerUpdateBuiltInObligationsV1.js";
 import { tool$rolesRolesControllerUpdateRoleV1 } from "./tools/rolesRolesControllerUpdateRoleV1.js";
+import { tool$searchSearchControllerSearchV1 } from "./tools/searchSearchControllerSearchV1.js";
 import { tool$securityPenetrationTestsPentestFindingContextsControllerListV1 } from "./tools/securityPenetrationTestsPentestFindingContextsControllerListV1.js";
 import { tool$securityPenetrationTestsPentestFindingContextsControllerRemoveV1 } from "./tools/securityPenetrationTestsPentestFindingContextsControllerRemoveV1.js";
 import { tool$securityPenetrationTestsPentestFindingContextsControllerUpsertV1 } from "./tools/securityPenetrationTestsPentestFindingContextsControllerUpsertV1.js";
@@ -453,7 +454,7 @@ export function createMCPServer(deps: {
 }) {
   const server = new McpServer({
     name: "CompAi",
-    version: "0.3.0",
+    version: "0.3.3",
   });
 
   const getClient = deps.getSDK || (() =>
@@ -823,6 +824,9 @@ export function createMCPServer(deps: {
   tool(tool$ismsISMSControllerSubmitForApprovalV1);
   tool(tool$ismsISMSControllerApproveV1);
   tool(tool$ismsISMSControllerDeclineV1);
+  tool(tool$ismsISMSControllerUploadDocumentFileV1);
+  tool(tool$ismsISMSControllerRemoveDocumentFileV1);
+  tool(tool$ismsISMSControllerSetContentSourceV1);
   tool(tool$ismsISMSControllerDriftV1);
   tool(tool$ismsISMSControllerRiskTreatmentV1);
   tool(tool$ismsISMSControllerGetVersionsV1);
@@ -832,9 +836,6 @@ export function createMCPServer(deps: {
   tool(tool$ismsISMSRegistersControllerDeleteRowV1);
   tool(tool$ismsISMSRegistersControllerBulkCreateMeasurementsV1);
   tool(tool$ismsISMSRegistersControllerSaveNarrativeV1);
-  tool(tool$ismsISMSProfileControllerGetProfileV1);
-  tool(tool$ismsISMSProfileControllerSaveProfileV1);
-  tool(tool$ismsISMSProfileControllerGenerateAllV1);
   tool(tool$taskManagementTaskManagementControllerGetTaskItemsStatsV1);
   tool(tool$taskManagementTaskManagementControllerGetTaskItemsV1);
   tool(tool$taskManagementTaskManagementControllerCreateTaskItemV1);
@@ -885,6 +886,7 @@ export function createMCPServer(deps: {
   tool(tool$frameworksFrameworksControllerSyncFrameworkV1);
   tool(tool$frameworksFrameworksControllerRollbackFrameworkV1);
   tool(tool$frameworksFrameworksControllerGetSyncHistoryV1);
+  tool(tool$searchSearchControllerSearchV1);
   tool(tool$auditLogsAuditLogControllerGetAuditLogsV1);
   tool(tool$controlsControlsControllerFindAllV1);
   tool(tool$controlsControlsControllerCreateV1);

package/src/mcp-server/tools/attachmentsAttachmentsControllerGetAttachmentDownloadUrlV1.ts

@@ -20,9 +20,9 @@ Generate a signed download URL for a shared attachment linked to comments, evide
     annotations: {
       "title": "",
       "destructiveHint": false,
-      "idempotentHint": false,
+      "idempotentHint": true,
       "openWorldHint": false,
-      "readOnlyHint": false,
+      "readOnlyHint": true,
     },
     args,
     tool: async (client, args, ctx) => {

package/src/mcp-server/tools/auditLogsAuditLogControllerGetAuditLogsV1.ts

@@ -21,9 +21,9 @@ List organization audit logs for compliance activity, access changes, evidence u
   annotations: {
     "title": "",
     "destructiveHint": false,
-    "idempotentHint": false,
+    "idempotentHint": true,
     "openWorldHint": false,
-    "readOnlyHint": false,
+    "readOnlyHint": true,
   },
   args,
   tool: async (client, args, ctx) => {

package/src/mcp-server/tools/cloudSecurityCloudSecurityControllerGetActivityV1.ts

@@ -20,9 +20,9 @@ List recent cloud security activity in Comp AI. Run AWS, Azure, and GCP cloud se
     annotations: {
       "title": "",
       "destructiveHint": false,
-      "idempotentHint": false,
+      "idempotentHint": true,
       "openWorldHint": false,
-      "readOnlyHint": false,
+      "readOnlyHint": true,
     },
     args,
     tool: async (client, args, ctx) => {

package/src/mcp-server/tools/cloudSecurityCloudSecurityControllerGetCheckDefinitionV1.ts

@@ -21,9 +21,9 @@ Resolve the "About this check" description for a finding (AI-cached for AWS; pro
     annotations: {
       "title": "",
       "destructiveHint": false,
-      "idempotentHint": false,
+      "idempotentHint": true,
       "openWorldHint": false,
-      "readOnlyHint": false,
+      "readOnlyHint": true,
     },
     args,
     tool: async (client, args, ctx) => {

package/src/mcp-server/tools/cloudSecurityCloudSecurityControllerGetFindingsV1.ts

@@ -15,9 +15,9 @@ List cloud security findings discovered by scans so teams can prioritize remedia
     annotations: {
       "title": "",
       "destructiveHint": false,
-      "idempotentHint": false,
+      "idempotentHint": true,
       "openWorldHint": false,
-      "readOnlyHint": false,
+      "readOnlyHint": true,
     },
     tool: async (client, ctx) => {
       const [result] = await cloudSecurityCloudSecurityControllerGetFindingsV1(

package/src/mcp-server/tools/cloudSecurityCloudSecurityControllerGetHistoryV1.ts

@@ -21,9 +21,9 @@ List resolution, exception, and regression history for a connection in Comp AI.
     annotations: {
       "title": "",
       "destructiveHint": false,
-      "idempotentHint": false,
+      "idempotentHint": true,
       "openWorldHint": false,
-      "readOnlyHint": false,
+      "readOnlyHint": true,
     },
     args,
     tool: async (client, args, ctx) => {

package/src/mcp-server/tools/cloudSecurityCloudSecurityControllerGetProvidersV1.ts

@@ -15,9 +15,9 @@ List supported cloud providers in Comp AI. Run AWS, Azure, and GCP cloud securit
     annotations: {
       "title": "",
       "destructiveHint": false,
-      "idempotentHint": false,
+      "idempotentHint": true,
       "openWorldHint": false,
-      "readOnlyHint": false,
+      "readOnlyHint": true,
     },
     tool: async (client, ctx) => {
       const [result] = await cloudSecurityCloudSecurityControllerGetProvidersV1(

package/src/mcp-server/tools/cloudSecurityCloudSecurityControllerGetRunStatusV1.ts

@@ -20,9 +20,9 @@ Get a cloud security scan run by ID in Comp AI. Run AWS, Azure, and GCP cloud se
     annotations: {
       "title": "",
       "destructiveHint": false,
-      "idempotentHint": false,
+      "idempotentHint": true,
       "openWorldHint": false,
-      "readOnlyHint": false,
+      "readOnlyHint": true,
     },
     args,
     tool: async (client, args, ctx) => {

package/src/mcp-server/tools/cloudSecurityCloudSecurityControllerRevokeExceptionV1.ts

@@ -19,8 +19,8 @@ export const tool$cloudSecurityCloudSecurityControllerRevokeExceptionV1:
 Accepts session, API key, or service token auth. For API key / service token callers without an explicit user attribution, the action is attributed to the org's owner.`,
     annotations: {
       "title": "",
-      "destructiveHint": false,
-      "idempotentHint": false,
+      "destructiveHint": true,
+      "idempotentHint": true,
       "openWorldHint": false,
       "readOnlyHint": false,
     },

package/src/mcp-server/tools/commentsCommentsControllerDeleteCommentV1.ts

@@ -20,8 +20,8 @@ export const tool$commentsCommentsControllerDeleteCommentV1: ToolDefinition<
 Delete a comment in Comp AI. Create and manage collaboration comments on compliance entities such as tasks, policies, risks, vendors, and findings.`,
   annotations: {
     "title": "",
-    "destructiveHint": false,
-    "idempotentHint": false,
+    "destructiveHint": true,
+    "idempotentHint": true,
     "openWorldHint": false,
     "readOnlyHint": false,
   },

package/src/mcp-server/tools/commentsCommentsControllerGetCommentsV1.ts

@@ -21,9 +21,9 @@ Get comments for an entity in Comp AI. Create and manage collaboration comments
   annotations: {
     "title": "",
     "destructiveHint": false,
-    "idempotentHint": false,
+    "idempotentHint": true,
     "openWorldHint": false,
-    "readOnlyHint": false,
+    "readOnlyHint": true,
   },
   args,
   tool: async (client, args, ctx) => {

package/src/mcp-server/tools/commentsCommentsControllerUpdateCommentV1.ts

@@ -21,7 +21,7 @@ Update a comment in Comp AI. Create and manage collaboration comments on complia
   annotations: {
     "title": "",
     "destructiveHint": false,
-    "idempotentHint": false,
+    "idempotentHint": true,
     "openWorldHint": false,
     "readOnlyHint": false,
   },

package/src/mcp-server/tools/contextContextControllerDeleteContextV1.ts

@@ -20,8 +20,8 @@ export const tool$contextContextControllerDeleteContextV1: ToolDefinition<
 Permanently removes a context entry from the organization. This action cannot be undone.`,
   annotations: {
     "title": "",
-    "destructiveHint": false,
-    "idempotentHint": false,
+    "destructiveHint": true,
+    "idempotentHint": true,
     "openWorldHint": false,
     "readOnlyHint": false,
   },

package/src/mcp-server/tools/contextContextControllerGetAllContextV1.ts

@@ -21,9 +21,9 @@ List organization context entries used as approved source material for evidence,
   annotations: {
     "title": "",
     "destructiveHint": false,
-    "idempotentHint": false,
+    "idempotentHint": true,
     "openWorldHint": false,
-    "readOnlyHint": false,
+    "readOnlyHint": true,
   },
   args,
   tool: async (client, args, ctx) => {

package/src/mcp-server/tools/contextContextControllerGetContextByIdV1.ts

@@ -21,9 +21,9 @@ Retrieve one organization context entry with source details and approved content
   annotations: {
     "title": "",
     "destructiveHint": false,
-    "idempotentHint": false,
+    "idempotentHint": true,
     "openWorldHint": false,
-    "readOnlyHint": false,
+    "readOnlyHint": true,
   },
   args,
   tool: async (client, args, ctx) => {

package/src/mcp-server/tools/controlsControlsControllerDeleteV1.ts

@@ -20,8 +20,8 @@ export const tool$controlsControlsControllerDeleteV1: ToolDefinition<
 Delete a control in Comp AI. Manage controls, map them to policies, tasks, framework requirements, and evidence document types, and track implementation progress.`,
   annotations: {
     "title": "",
-    "destructiveHint": false,
-    "idempotentHint": false,
+    "destructiveHint": true,
+    "idempotentHint": true,
     "openWorldHint": false,
     "readOnlyHint": false,
   },

package/src/mcp-server/tools/controlsControlsControllerFindAllV1.ts

@@ -21,9 +21,9 @@ List controls with linked policies, tasks, requirements, and document types for
   annotations: {
     "title": "",
     "destructiveHint": false,
-    "idempotentHint": false,
+    "idempotentHint": true,
     "openWorldHint": false,
-    "readOnlyHint": false,
+    "readOnlyHint": true,
   },
   args,
   tool: async (client, args, ctx) => {

package/src/mcp-server/tools/controlsControlsControllerFindOneV1.ts

@@ -21,9 +21,9 @@ Get control detail with progress in Comp AI. Manage controls, map them to polici
   annotations: {
     "title": "",
     "destructiveHint": false,
-    "idempotentHint": false,
+    "idempotentHint": true,
     "openWorldHint": false,
-    "readOnlyHint": false,
+    "readOnlyHint": true,
   },
   args,
   tool: async (client, args, ctx) => {

package/src/mcp-server/tools/controlsControlsControllerGetOptionsV1.ts

@@ -14,9 +14,9 @@ Get dropdown options for creating controls in Comp AI. Manage controls, map them
   annotations: {
     "title": "",
     "destructiveHint": false,
-    "idempotentHint": false,
+    "idempotentHint": true,
     "openWorldHint": false,
-    "readOnlyHint": false,
+    "readOnlyHint": true,
   },
   tool: async (client, ctx) => {
     const [result] = await controlsControlsControllerGetOptionsV1(

package/src/mcp-server/tools/controlsControlsControllerUnlinkDocumentTypeV1.ts

@@ -19,8 +19,8 @@ export const tool$controlsControlsControllerUnlinkDocumentTypeV1:
 Remove a required document type from a control in Comp AI. Manage controls, map them to policies, tasks, framework requirements, and evidence document types, and track implementation progress.`,
     annotations: {
       "title": "",
-      "destructiveHint": false,
-      "idempotentHint": false,
+      "destructiveHint": true,
+      "idempotentHint": true,
       "openWorldHint": false,
       "readOnlyHint": false,
     },

package/src/mcp-server/tools/deviceAgentDeviceAgentControllerDownloadMacAgentV1.ts

@@ -15,9 +15,9 @@ Downloads the Comp AI Device Agent installer for macOS as a DMG file. The agent
     annotations: {
       "title": "",
       "destructiveHint": false,
-      "idempotentHint": false,
+      "idempotentHint": true,
       "openWorldHint": false,
-      "readOnlyHint": false,
+      "readOnlyHint": true,
     },
     tool: async (client, ctx) => {
       const [result] = await deviceAgentDeviceAgentControllerDownloadMacAgentV1(