@trycompai/mcp-server 0.3.0 → 0.3.3

package/src/mcp-server/tools/trustPortalTrustPortalControllerGetSettingsV1.ts

@@ -15,9 +15,9 @@ Retrieve Trust Center settings used to configure public status, custom domains,
     annotations: {
       "title": "",
       "destructiveHint": false,
-      "idempotentHint": false,
+      "idempotentHint": true,
       "openWorldHint": false,
-      "readOnlyHint": false,
+      "readOnlyHint": true,
     },
     tool: async (client, ctx) => {
       const [result] = await trustPortalTrustPortalControllerGetSettingsV1(

package/src/mcp-server/tools/trustPortalTrustPortalControllerListCustomFrameworksV1.ts

@@ -16,9 +16,9 @@ List org-authored custom frameworks with their trust portal selection in Comp AI
     annotations: {
       "title": "",
       "destructiveHint": false,
-      "idempotentHint": false,
+      "idempotentHint": true,
       "openWorldHint": false,
-      "readOnlyHint": false,
+      "readOnlyHint": true,
     },
     tool: async (client, ctx) => {
       const [result] =

package/src/mcp-server/tools/trustPortalTrustPortalControllerListCustomLinksV1.ts

@@ -20,9 +20,9 @@ List custom links for trust portal in Comp AI. Configure the live Trust Center,
     annotations: {
       "title": "",
       "destructiveHint": false,
-      "idempotentHint": false,
+      "idempotentHint": true,
       "openWorldHint": false,
-      "readOnlyHint": false,
+      "readOnlyHint": true,
     },
     args,
     tool: async (client, args, ctx) => {

package/src/mcp-server/tools/trustPortalTrustPortalControllerListVendorsV1.ts

@@ -21,9 +21,9 @@ List vendors configured for trust portal in Comp AI. Configure the live Trust Ce
   annotations: {
     "title": "",
     "destructiveHint": false,
-    "idempotentHint": false,
+    "idempotentHint": true,
     "openWorldHint": false,
-    "readOnlyHint": false,
+    "readOnlyHint": true,
   },
   args,
   tool: async (client, args, ctx) => {

package/src/mcp-server/tools/trustPortalTrustPortalControllerRemoveCustomFrameworkBadgeV1.ts

@@ -19,8 +19,8 @@ export const tool$trustPortalTrustPortalControllerRemoveCustomFrameworkBadgeV1:
 Remove a custom framework's Trust Portal badge image in Comp AI. Configure the live Trust Center, custom domain, public overview, FAQs, compliance resources, documents, links, and vendor disclosures.`,
     annotations: {
       "title": "",
-      "destructiveHint": false,
-      "idempotentHint": false,
+      "destructiveHint": true,
+      "idempotentHint": true,
       "openWorldHint": false,
       "readOnlyHint": false,
     },

package/src/mcp-server/tools/trustPortalTrustPortalControllerRemoveFaviconV1.ts

@@ -14,8 +14,8 @@ export const tool$trustPortalTrustPortalControllerRemoveFaviconV1:
 Remove the trust portal favicon in Comp AI. Configure the live Trust Center, custom domain, public overview, FAQs, compliance resources, documents, links, and vendor disclosures.`,
     annotations: {
       "title": "",
-      "destructiveHint": false,
-      "idempotentHint": false,
+      "destructiveHint": true,
+      "idempotentHint": true,
       "openWorldHint": false,
       "readOnlyHint": false,
     },

package/src/mcp-server/tools/trustPortalTrustPortalControllerTogglePortalV1.ts

@@ -15,7 +15,7 @@ Enable or disable the trust portal in Comp AI. Configure the live Trust Center,
     annotations: {
       "title": "",
       "destructiveHint": false,
-      "idempotentHint": false,
+      "idempotentHint": true,
       "openWorldHint": false,
       "readOnlyHint": false,
     },

package/src/mcp-server/tools/trustPortalTrustPortalControllerUpdateAllowedDomainsV1.ts

@@ -15,7 +15,7 @@ Update allowed domains for the trust portal in Comp AI. Configure the live Trust
     annotations: {
       "title": "",
       "destructiveHint": false,
-      "idempotentHint": false,
+      "idempotentHint": true,
       "openWorldHint": false,
       "readOnlyHint": false,
     },

package/src/mcp-server/tools/trustPortalTrustPortalControllerUpdateAllowedEmailsV1.ts

@@ -20,7 +20,7 @@ Update allowed emails for the trust portal in Comp AI. Configure the live Trust
     annotations: {
       "title": "",
       "destructiveHint": false,
-      "idempotentHint": false,
+      "idempotentHint": true,
       "openWorldHint": false,
       "readOnlyHint": false,
     },

package/src/mcp-server/tools/trustPortalTrustPortalControllerUpdateCustomFrameworkV1.ts

@@ -22,7 +22,7 @@ Enable/disable a custom framework on the trust portal and set its status in Comp
     annotations: {
       "title": "",
       "destructiveHint": false,
-      "idempotentHint": false,
+      "idempotentHint": true,
       "openWorldHint": false,
       "readOnlyHint": false,
     },

package/src/mcp-server/tools/trustPortalTrustPortalControllerUpdateFaqsV1.ts

@@ -21,7 +21,7 @@ Update trust portal FAQs in Comp AI. Configure the live Trust Center, custom dom
   annotations: {
     "title": "",
     "destructiveHint": false,
-    "idempotentHint": false,
+    "idempotentHint": true,
     "openWorldHint": false,
     "readOnlyHint": false,
   },

package/src/mcp-server/tools/trustPortalTrustPortalControllerUpdateFrameworksV1.ts

@@ -15,7 +15,7 @@ Update trust portal framework settings in Comp AI. Configure the live Trust Cent
     annotations: {
       "title": "",
       "destructiveHint": false,
-      "idempotentHint": false,
+      "idempotentHint": true,
       "openWorldHint": false,
       "readOnlyHint": false,
     },

package/src/mcp-server/tools/trustPortalTrustPortalControllerUpdateSecurityQuestionnaireV1.ts

@@ -21,7 +21,7 @@ Show or hide the Security Questionnaire on the public trust portal in Comp AI. C
     annotations: {
       "title": "",
       "destructiveHint": false,
-      "idempotentHint": false,
+      "idempotentHint": true,
       "openWorldHint": false,
       "readOnlyHint": false,
     },

package/src/mcp-server/tools/trustPortalTrustPortalControlsControllerListControlsV1.ts

@@ -15,9 +15,9 @@ Returns the organization's non-archived controls with their trust portal visibil
     annotations: {
       "title": "",
       "destructiveHint": false,
-      "idempotentHint": false,
+      "idempotentHint": true,
       "openWorldHint": false,
-      "readOnlyHint": false,
+      "readOnlyHint": true,
     },
     tool: async (client, ctx) => {
       const [result] =

package/src/mcp-server/tools/vendorsVendorAcceptancesControllerListVendorAcceptancesV1.ts

@@ -20,9 +20,9 @@ Returns the residual-risk acceptance history for a vendor, newest first. Each ev
     annotations: {
       "title": "",
       "destructiveHint": false,
-      "idempotentHint": false,
+      "idempotentHint": true,
       "openWorldHint": false,
-      "readOnlyHint": false,
+      "readOnlyHint": true,
     },
     args,
     tool: async (client, args, ctx) => {

package/src/mcp-server/tools/vendorsVendorsControllerDeleteVendorV1.ts

@@ -20,8 +20,8 @@ export const tool$vendorsVendorsControllerDeleteVendorV1: ToolDefinition<
 Permanently removes a vendor from the organization. This action cannot be undone.`,
   annotations: {
     "title": "",
-    "destructiveHint": false,
-    "idempotentHint": false,
+    "destructiveHint": true,
+    "idempotentHint": true,
     "openWorldHint": false,
     "readOnlyHint": false,
   },

package/src/mcp-server/tools/vendorsVendorsControllerGetAllVendorsV1.ts

@@ -14,9 +14,9 @@ List third-party vendors with risk level, owner, assessment status, and Trust Ce
   annotations: {
     "title": "",
     "destructiveHint": false,
-    "idempotentHint": false,
+    "idempotentHint": true,
     "openWorldHint": false,
-    "readOnlyHint": false,
+    "readOnlyHint": true,
   },
   tool: async (client, ctx) => {
     const [result] = await vendorsVendorsControllerGetAllVendorsV1(

package/src/mcp-server/tools/vendorsVendorsControllerGetVendorByIdV1.ts

@@ -21,9 +21,9 @@ Retrieve one vendor record with ownership, review status, risk context, and thir
   annotations: {
     "title": "",
     "destructiveHint": false,
-    "idempotentHint": false,
+    "idempotentHint": true,
     "openWorldHint": false,
-    "readOnlyHint": false,
+    "readOnlyHint": true,
   },
   args,
   tool: async (client, args, ctx) => {

package/src/mcp-server/tools/vendorsVendorsControllerSearchGlobalVendorsV1.ts

@@ -21,9 +21,9 @@ Search global vendor records to prefill vendor profiles and speed up third-party
   annotations: {
     "title": "",
     "destructiveHint": false,
-    "idempotentHint": false,
+    "idempotentHint": true,
     "openWorldHint": false,
-    "readOnlyHint": false,
+    "readOnlyHint": true,
   },
   args,
   tool: async (client, args, ctx) => {

package/src/models/answersourcedto.ts

@@ -0,0 +1,36 @@
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ * @generated-id: 144225764ec2
+ */
+
+import * as z from "zod";
+
+export type AnswerSourceDto = {
+  sourceType: string;
+  sourceName?: string | undefined;
+  sourceId?: string | undefined;
+  policyName?: string | undefined;
+  documentName?: string | undefined;
+  score?: number | undefined;
+};
+
+export const AnswerSourceDto$zodSchema: z.ZodType<AnswerSourceDto> = z.object({
+  documentName: z.string().optional().describe(
+    "Name of the knowledge base document, when the source is a document.",
+  ),
+  policyName: z.string().optional().describe(
+    "Name of the policy, when the source is a policy.",
+  ),
+  score: z.int().optional().describe(
+    "Relevance score of this source. Validated as an integer.",
+  ),
+  sourceId: z.string().optional().describe(
+    "ID of the underlying record. The prefix depends on sourceType (policy, document, manual answer).",
+  ),
+  sourceName: z.string().optional().describe(
+    "Human-readable label for the source shown in the UI.",
+  ),
+  sourceType: z.string().describe(
+    "Kind of knowledge the answer came from, e.g. policy, context, manual_answer.",
+  ),
+});

package/src/models/approvesoadocumentdto.ts

@@ -5,7 +5,15 @@
 
 import * as z from "zod";
 
-export type ApproveSOADocumentDto = {};
+export type ApproveSOADocumentDto = {
+  organizationId: string;
+  documentId: string;
+};
 
 export const ApproveSOADocumentDto$zodSchema: z.ZodType<ApproveSOADocumentDto> =
-  z.object({});
+  z.object({
+    documentId: z.string().describe("ID of the SOA document to approve"),
+    organizationId: z.string().describe(
+      "ID of the organization that owns the SOA document",
+    ),
+  });

package/src/models/authcodedto.ts

@@ -5,6 +5,13 @@
 
 import * as z from "zod";
 
-export type AuthCodeDto = {};
+export type AuthCodeDto = { callback_port: number; state: string };
 
-export const AuthCodeDto$zodSchema: z.ZodType<AuthCodeDto> = z.object({});
+export const AuthCodeDto$zodSchema: z.ZodType<AuthCodeDto> = z.object({
+  callback_port: z.number().describe(
+    "Localhost port the device agent is listening on to receive the auth callback",
+  ),
+  state: z.string().describe(
+    "Opaque anti-forgery value generated by the device agent and echoed back on callback",
+  ),
+});

package/src/models/autoanswerdto.ts

@@ -4,7 +4,25 @@
  */
 
 import * as z from "zod";
+import {
+  AutoAnswerQuestionDto,
+  AutoAnswerQuestionDto$zodSchema,
+} from "./autoanswerquestiondto.js";
 
-export type AutoAnswerDto = {};
+export type AutoAnswerDto = {
+  organizationId: string;
+  questionnaireId?: string | undefined;
+  questionsAndAnswers: Array<AutoAnswerQuestionDto>;
+};
 
-export const AutoAnswerDto$zodSchema: z.ZodType<AutoAnswerDto> = z.object({});
+export const AutoAnswerDto$zodSchema: z.ZodType<AutoAnswerDto> = z.object({
+  organizationId: z.string().describe(
+    "Organization ID. The API overwrites this with the authenticated active organization.",
+  ),
+  questionnaireId: z.string().optional().describe(
+    "Questionnaire to save generated answers into. Omit to stream answers without persisting them.",
+  ),
+  questionsAndAnswers: z.array(AutoAnswerQuestionDto$zodSchema).describe(
+    "Questions to auto-answer, together with any answers already filled in.",
+  ),
+});

package/src/models/autoanswerquestiondto.ts

@@ -0,0 +1,23 @@
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ * @generated-id: da4a54407c3a
+ */
+
+import * as z from "zod";
+
+export type AutoAnswerQuestionDto = {
+  question: string;
+  answer?: string | null | undefined;
+  _originalIndex?: number | undefined;
+};
+
+export const AutoAnswerQuestionDto$zodSchema: z.ZodType<AutoAnswerQuestionDto> =
+  z.object({
+    _originalIndex: z.number().optional().describe(
+      "Zero-based position of this question in the original questionnaire, used to map answers back.",
+    ),
+    answer: z.string().nullable().optional().describe(
+      "Existing answer. Questions that already have a non-empty answer are skipped.",
+    ),
+    question: z.string().describe("Questionnaire question text to answer."),
+  });

package/src/models/autofillsoadto.ts

@@ -5,6 +5,13 @@
 
 import * as z from "zod";
 
-export type AutoFillSOADto = {};
+export type AutoFillSOADto = { organizationId: string; documentId: string };
 
-export const AutoFillSOADto$zodSchema: z.ZodType<AutoFillSOADto> = z.object({});
+export const AutoFillSOADto$zodSchema: z.ZodType<AutoFillSOADto> = z.object({
+  documentId: z.string().describe(
+    "ID of the SOA document to auto-fill with generated answers",
+  ),
+  organizationId: z.string().describe(
+    "ID of the organization that owns the SOA document",
+  ),
+});

package/src/models/checkindto.ts

@@ -5,6 +5,16 @@
 
 import * as z from "zod";
 
-export type CheckInDto = {};
+export type CheckInDto = {
+  deviceId: string;
+  agentVersion?: string | undefined;
+};
 
-export const CheckInDto$zodSchema: z.ZodType<CheckInDto> = z.object({});
+export const CheckInDto$zodSchema: z.ZodType<CheckInDto> = z.object({
+  agentVersion: z.string().optional().describe(
+    "Version of the device agent submitting the check-in",
+  ),
+  deviceId: z.string().describe(
+    "ID of the device the agent is checking in for",
+  ),
+});

package/src/models/createsoadocumentdto.ts

@@ -5,7 +5,17 @@
 
 import * as z from "zod";
 
-export type CreateSOADocumentDto = {};
+export type CreateSOADocumentDto = {
+  organizationId: string;
+  frameworkId: string;
+};
 
 export const CreateSOADocumentDto$zodSchema: z.ZodType<CreateSOADocumentDto> = z
-  .object({});
+  .object({
+    frameworkId: z.string().describe(
+      "ID of the framework the SOA document is created for",
+    ),
+    organizationId: z.string().describe(
+      "ID of the organization to create the SOA document for",
+    ),
+  });

package/src/models/declinesoadocumentdto.ts

@@ -5,7 +5,15 @@
 
 import * as z from "zod";
 
-export type DeclineSOADocumentDto = {};
+export type DeclineSOADocumentDto = {
+  organizationId: string;
+  documentId: string;
+};
 
 export const DeclineSOADocumentDto$zodSchema: z.ZodType<DeclineSOADocumentDto> =
-  z.object({});
+  z.object({
+    documentId: z.string().describe("ID of the SOA document to decline"),
+    organizationId: z.string().describe(
+      "ID of the organization that owns the SOA document",
+    ),
+  });

package/src/models/deleteallmanualanswersdto.ts

@@ -5,8 +5,12 @@
 
 import * as z from "zod";
 
-export type DeleteAllManualAnswersDto = {};
+export type DeleteAllManualAnswersDto = { organizationId: string };
 
 export const DeleteAllManualAnswersDto$zodSchema: z.ZodType<
   DeleteAllManualAnswersDto
-> = z.object({});
+> = z.object({
+  organizationId: z.string().describe(
+    "Organization whose manual answers are all deleted. Overwritten with the authenticated organization.",
+  ),
+});

package/src/models/deleteanswerdto.ts

@@ -5,8 +5,20 @@
 
 import * as z from "zod";
 
-export type DeleteAnswerDto = {};
+export type DeleteAnswerDto = {
+  questionnaireId: string;
+  organizationId: string;
+  questionAnswerId: string;
+};
 
-export const DeleteAnswerDto$zodSchema: z.ZodType<DeleteAnswerDto> = z.object(
-  {},
-);
+export const DeleteAnswerDto$zodSchema: z.ZodType<DeleteAnswerDto> = z.object({
+  organizationId: z.string().describe(
+    "Organization ID. The API overwrites this with the authenticated active organization.",
+  ),
+  questionAnswerId: z.string().describe(
+    "Question/answer record whose answer is cleared and reset to untouched.",
+  ),
+  questionnaireId: z.string().describe(
+    "Questionnaire that contains the answer to clear.",
+  ),
+});

package/src/models/deletemanualanswerdto.ts

@@ -5,7 +5,11 @@
 
 import * as z from "zod";
 
-export type DeleteManualAnswerDto = {};
+export type DeleteManualAnswerDto = { organizationId: string };
 
 export const DeleteManualAnswerDto$zodSchema: z.ZodType<DeleteManualAnswerDto> =
-  z.object({});
+  z.object({
+    organizationId: z.string().describe(
+      "Organization that owns the manual answer. Overwritten with the authenticated organization.",
+    ),
+  });

package/src/models/ensuresoasetupdto.ts

@@ -5,7 +5,14 @@
 
 import * as z from "zod";
 
-export type EnsureSOASetupDto = {};
+export type EnsureSOASetupDto = { organizationId: string; frameworkId: string };
 
 export const EnsureSOASetupDto$zodSchema: z.ZodType<EnsureSOASetupDto> = z
-  .object({});
+  .object({
+    frameworkId: z.string().describe(
+      "ID of the framework to scope the SOA configuration and document to",
+    ),
+    organizationId: z.string().describe(
+      "ID of the organization to ensure the SOA setup for",
+    ),
+  });

package/src/models/exchangecodedto.ts

@@ -5,8 +5,10 @@
 
 import * as z from "zod";
 
-export type ExchangeCodeDto = {};
+export type ExchangeCodeDto = { code: string };
 
-export const ExchangeCodeDto$zodSchema: z.ZodType<ExchangeCodeDto> = z.object(
-  {},
-);
+export const ExchangeCodeDto$zodSchema: z.ZodType<ExchangeCodeDto> = z.object({
+  code: z.string().describe(
+    "Single-use authorization code issued to the device agent, exchanged for a session token",
+  ),
+});

package/src/models/exportbyiddto.ts

@@ -4,7 +4,41 @@
  */
 
 import * as z from "zod";
+import { ClosedEnum } from "../types/enums.js";
 
-export type ExportByIdDto = {};
+/**
+ * File format to export the questionnaire in.
+ */
+export const ExportByIdDtoFormat = {
+  Xlsx: "xlsx",
+  Csv: "csv",
+  Pdf: "pdf",
+} as const;
+/**
+ * File format to export the questionnaire in.
+ */
+export type ExportByIdDtoFormat = ClosedEnum<typeof ExportByIdDtoFormat>;
+
+export const ExportByIdDtoFormat$zodSchema = z.enum([
+  "xlsx",
+  "csv",
+  "pdf",
+]).describe("File format to export the questionnaire in.");
+
+export type ExportByIdDto = {
+  questionnaireId: string;
+  organizationId: string;
+  format: ExportByIdDtoFormat;
+};
 
-export const ExportByIdDto$zodSchema: z.ZodType<ExportByIdDto> = z.object({});
+export const ExportByIdDto$zodSchema: z.ZodType<ExportByIdDto> = z.object({
+  format: ExportByIdDtoFormat$zodSchema.describe(
+    "File format to export the questionnaire in.",
+  ),
+  organizationId: z.string().describe(
+    "Organization ID. The API overwrites this with the authenticated active organization.",
+  ),
+  questionnaireId: z.string().describe(
+    "Questionnaire to export, including all of its answers.",
+  ),
+});

package/src/models/exportismsdocumentdto.ts

@@ -9,28 +9,34 @@ import { ClosedEnum } from "../types/enums.js";
 /**
  * File format to export the ISMS document as
  */
-export const Format = {
+export const ExportIsmsDocumentDtoFormat = {
   Pdf: "pdf",
   Docx: "docx",
 } as const;
 /**
  * File format to export the ISMS document as
  */
-export type Format = ClosedEnum<typeof Format>;
+export type ExportIsmsDocumentDtoFormat = ClosedEnum<
+  typeof ExportIsmsDocumentDtoFormat
+>;
 
-export const Format$zodSchema = z.enum([
+export const ExportIsmsDocumentDtoFormat$zodSchema = z.enum([
   "pdf",
   "docx",
 ]).describe("File format to export the ISMS document as");
 
 export type ExportIsmsDocumentDto = {
-  format: Format;
+  format: ExportIsmsDocumentDtoFormat;
   versionId?: string | undefined;
+  draft?: boolean | undefined;
 };
 
 export const ExportIsmsDocumentDto$zodSchema: z.ZodType<ExportIsmsDocumentDto> =
   z.object({
-    format: Format$zodSchema.describe(
+    draft: z.boolean().optional().describe(
+      "Export the WORKING DRAFT rather than the published version — the customer's attached file when the document is in upload mode, or a live render of the form when it is not. Cannot be combined with versionId: the two name different artifacts, so asking for both is rejected.",
+    ),
+    format: ExportIsmsDocumentDtoFormat$zodSchema.describe(
       "File format to export the ISMS document as",
     ),
     versionId: z.string().optional().describe(