@trycompai/mcp-server 0.3.2 → 0.3.5

package/src/models/saveanswerdto.ts

@@ -4,7 +4,59 @@
  */
 
 import * as z from "zod";
+import { ClosedEnum } from "../types/enums.js";
+import {
+  AnswerSourceDto,
+  AnswerSourceDto$zodSchema,
+} from "./answersourcedto.js";
 
-export type SaveAnswerDto = {};
+/**
+ * Whether the answer was AI-generated or written by a person.
+ */
+export const SaveAnswerDtoStatus = {
+  Generated: "generated",
+  Manual: "manual",
+} as const;
+/**
+ * Whether the answer was AI-generated or written by a person.
+ */
+export type SaveAnswerDtoStatus = ClosedEnum<typeof SaveAnswerDtoStatus>;
+
+export const SaveAnswerDtoStatus$zodSchema = z.enum([
+  "generated",
+  "manual",
+]).describe("Whether the answer was AI-generated or written by a person.");
+
+export type SaveAnswerDto = {
+  questionnaireId: string;
+  organizationId: string;
+  questionAnswerId?: string | undefined;
+  questionIndex?: number | undefined;
+  answer?: string | null | undefined;
+  sources?: Array<AnswerSourceDto> | undefined;
+  status: SaveAnswerDtoStatus;
+};
 
-export const SaveAnswerDto$zodSchema: z.ZodType<SaveAnswerDto> = z.object({});
+export const SaveAnswerDto$zodSchema: z.ZodType<SaveAnswerDto> = z.object({
+  answer: z.string().nullable().optional().describe(
+    "Answer text to store. Send null or empty to clear it.",
+  ),
+  organizationId: z.string().describe(
+    "Organization ID. The API overwrites this with the authenticated active organization.",
+  ),
+  questionAnswerId: z.string().optional().describe(
+    "Question/answer record to update. Provide this or questionIndex.",
+  ),
+  questionIndex: z.number().optional().describe(
+    "Zero-based position of the question in the questionnaire. Provide this or questionAnswerId.",
+  ),
+  questionnaireId: z.string().describe(
+    "Questionnaire that contains the answer being saved.",
+  ),
+  sources: z.array(AnswerSourceDto$zodSchema).optional().describe(
+    "Knowledge sources the answer was derived from.",
+  ),
+  status: SaveAnswerDtoStatus$zodSchema.describe(
+    "Whether the answer was AI-generated or written by a person.",
+  ),
+});

package/src/models/savemanualanswerdto.ts

@@ -5,7 +5,25 @@
 
 import * as z from "zod";
 
-export type SaveManualAnswerDto = {};
+export type SaveManualAnswerDto = {
+  question: string;
+  answer: string;
+  tags?: Array<string> | undefined;
+  sourceQuestionnaireId?: string | undefined;
+};
 
 export const SaveManualAnswerDto$zodSchema: z.ZodType<SaveManualAnswerDto> = z
-  .object({});
+  .object({
+    answer: z.string().describe(
+      "Answer text reused when generating questionnaire answers.",
+    ),
+    question: z.string().describe(
+      "Question this manual answer covers. Unique per organization, so re-sending it updates the answer.",
+    ),
+    sourceQuestionnaireId: z.string().optional().describe(
+      "Questionnaire this answer was originally saved from.",
+    ),
+    tags: z.array(z.string()).optional().describe(
+      "Tags used to categorize and search this manual answer.",
+    ),
+  });

package/src/models/savesoaanswerdto.ts

@@ -5,8 +5,34 @@
 
 import * as z from "zod";
 
-export type SaveSOAAnswerDto = {};
+export type SaveSOAAnswerDto = {
+  organizationId: string;
+  documentId: string;
+  questionId: string;
+  answer?: string | null | undefined;
+  isApplicable?: boolean | null | undefined;
+  justification?: string | null | undefined;
+};
 
 export const SaveSOAAnswerDto$zodSchema: z.ZodType<SaveSOAAnswerDto> = z.object(
-  {},
+  {
+    answer: z.string().nullable().optional().describe(
+      "Free-text answer for the question",
+    ),
+    documentId: z.string().describe(
+      "ID of the SOA document the answer belongs to",
+    ),
+    isApplicable: z.boolean().nullable().optional().describe(
+      "Whether the control is applicable to the organization; null when not yet decided",
+    ),
+    justification: z.string().nullable().optional().describe(
+      "Justification for including or excluding the control from the SOA",
+    ),
+    organizationId: z.string().describe(
+      "ID of the organization that owns the SOA document",
+    ),
+    questionId: z.string().describe(
+      "ID of the question being answered, from the document's SOA configuration",
+    ),
+  },
 );

package/src/models/searchcontrollersearchv1op.ts

@@ -0,0 +1,20 @@
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ * @generated-id: a591590c63de
+ */
+
+import * as z from "zod";
+
+export type SearchControllerSearchV1Request = {
+  q: string;
+  limit?: number | undefined;
+};
+
+export const SearchControllerSearchV1Request$zodSchema: z.ZodType<
+  SearchControllerSearchV1Request
+> = z.object({
+  limit: z.number().default(5).describe("Maximum results per entity type"),
+  q: z.string().describe(
+    "Search term, matched case-insensitively against names first, then descriptions. Terms shorter than 2 characters return no results.",
+  ),
+});

package/src/models/searchresponsedto.ts

@@ -0,0 +1,20 @@
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ * @generated-id: ab439ce9ac4b
+ */
+
+import * as z from "zod";
+import {
+  SearchResultDto,
+  SearchResultDto$zodSchema,
+} from "./searchresultdto.js";
+
+export type SearchResponseDto = { data: Array<SearchResultDto>; count: number };
+
+export const SearchResponseDto$zodSchema: z.ZodType<SearchResponseDto> = z
+  .object({
+    count: z.number().describe("Number of results returned"),
+    data: z.array(SearchResultDto$zodSchema).describe(
+      "Matches, grouped by entity kind in a stable order",
+    ),
+  });

package/src/models/searchresultdto.ts

@@ -0,0 +1,58 @@
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ * @generated-id: 9c0fcf3d675d
+ */
+
+import * as z from "zod";
+import { ClosedEnum } from "../types/enums.js";
+
+/**
+ * Entity kind this result points at
+ */
+export const SearchResultDtoType = {
+  Policy: "policy",
+  Task: "task",
+  Document: "document",
+  Person: "person",
+  Control: "control",
+  Vendor: "vendor",
+  Risk: "risk",
+} as const;
+/**
+ * Entity kind this result points at
+ */
+export type SearchResultDtoType = ClosedEnum<typeof SearchResultDtoType>;
+
+export const SearchResultDtoType$zodSchema = z.enum([
+  "policy",
+  "task",
+  "document",
+  "person",
+  "control",
+  "vendor",
+  "risk",
+]).describe("Entity kind this result points at");
+
+export type SearchResultDto = {
+  type: SearchResultDtoType;
+  id: string;
+  title: string;
+  subtitle: string | null;
+  status?: string | undefined;
+};
+
+export const SearchResultDto$zodSchema: z.ZodType<SearchResultDto> = z.object({
+  id: z.string().describe(
+    "Entity ID, usable against that entity’s own endpoints",
+  ),
+  status: z.string().optional().describe(
+    "Workflow status, when the entity kind has one",
+  ),
+  subtitle: z.string().nullable().describe(
+    "Truncated description, or null when the record has none",
+  ),
+  title: z.string().describe("Display name of the matched record"),
+  type: SearchResultDtoType$zodSchema.describe(
+    "Entity kind this result points at",
+  ),
+});

package/src/models/submitsoaforapprovaldto.ts

@@ -5,8 +5,22 @@
 
 import * as z from "zod";
 
-export type SubmitSOAForApprovalDto = {};
+export type SubmitSOAForApprovalDto = {
+  organizationId: string;
+  documentId: string;
+  approverId: string;
+};
 
 export const SubmitSOAForApprovalDto$zodSchema: z.ZodType<
   SubmitSOAForApprovalDto
-> = z.object({});
+> = z.object({
+  approverId: z.string().describe(
+    "Member ID of the approver the SOA document is submitted to",
+  ),
+  documentId: z.string().describe(
+    "ID of the SOA document to submit for approval",
+  ),
+  organizationId: z.string().describe(
+    "ID of the organization that owns the SOA document",
+  ),
+});

package/src/models/syncframeworkdto.ts

@@ -5,8 +5,12 @@
 
 import * as z from "zod";
 
-export type SyncFrameworkDto = {};
+export type SyncFrameworkDto = { targetVersionId: string };
 
 export const SyncFrameworkDto$zodSchema: z.ZodType<SyncFrameworkDto> = z.object(
-  {},
+  {
+    targetVersionId: z.string().describe(
+      "ID of the framework version to sync the instance up to",
+    ),
+  },
 );

package/src/models/vendorscontrollersearchglobalvendorsv1op.ts

@@ -7,10 +7,19 @@ import * as z from "zod";
 
 export type VendorsControllerSearchGlobalVendorsV1Request = {
   name?: string | undefined;
+  lite?: string | undefined;
+  suggest?: string | undefined;
 };
 
 export const VendorsControllerSearchGlobalVendorsV1Request$zodSchema: z.ZodType<
   VendorsControllerSearchGlobalVendorsV1Request
 > = z.object({
-  name: z.string().describe("Vendor name to search for").optional(),
+  lite: z.string().describe(
+    "Return only the fields a suggestion list renders, omitting the risk assessment payload",
+  ).optional(),
+  name: z.string().describe("Vendor name, or part of one, to search for")
+    .optional(),
+  suggest: z.string().describe(
+    "When nothing matches, resolve the name and return the vendor the caller probably meant. Off by default: it can reach a paid provider, so set it once a name has been committed rather than on every keystroke.",
+  ).optional(),
 });

package/src/tool-names.ts

@@ -576,6 +576,10 @@ export const toolNames: Array<{ name: string; description: string }>= [
     "name": "confirm-policy-pdf-uploaded",
     "description": "Confirm a policy PDF upload completed\n\nLinks an uploaded PDF to a compliance policy after the file has been PUT to a presigned S3 URL. Call this after request-policy-pdf-upload-url returned an s3Key and you successfully uploaded the file bytes to that URL. The endpoint verifies the file exists in S3 before linking it to the policy or version."
   },
+  {
+    "name": "extract-policy-document",
+    "description": "Re-read an attached policy document into the editor\n\nQueues a fresh read of the PDF already attached to a policy, storing its text as the version's editor content. Use when an uploaded policy still reads as empty because its first read never produced any text."
+  },
   {
     "name": "get-pdf-url",
     "description": "Get signed URL for policy PDF (alternate path)\n\nGet signed URL for policy PDF (alternate path) in Comp AI. Create, version, publish, export, map, and improve compliance policies with AI-assisted drafting and approval workflows."
@@ -1260,6 +1264,10 @@ export const toolNames: Array<{ name: string; description: string }>= [
     "name": "remove-control",
     "description": "Remove a control mapping from an ISMS document\n\nRemoves the mapping between an ISMS document and one organization control. Takes the control id, not the link row id. The control itself is not deleted, and unlinking a control that was never linked succeeds silently."
   },
+  {
+    "name": "set-coverage",
+    "description": "Set how much of an ISMS document Comp AI holds\n\nMarks a whole ISMS document as included, maintained outside Comp AI, or not applicable, which requires a written justification. External renders a pointer to where the content lives. Per-section coverage is not available yet."
+  },
   {
     "name": "generate",
     "description": "Derive Context-of-the-Organization issues\n\nRegenerates one ISMS document's derived content based on its type and refreshes the drift baseline. Manually added register rows and non-empty narratives are preserved; derived rows are replaced. Reverts an approved document to draft."
@@ -1306,7 +1314,7 @@ export const toolNames: Array<{ name: string; description: string }>= [
   },
   {
     "name": "create-row",
-    "description": "Create a row in an ISMS register\n\nAdds a row to an ISMS register. Valid values: context-issues, interested-parties, requirements, objectives, roles, role-assignments, metrics, measurements, audits, audit-controls, audit-findings, reviews, review-inputs, review-actions."
+    "description": "Create a row in an ISMS register\n\nCreate a row in an ISMS register in Comp AI. Build and maintain the ISO 27001 ISMS document set — scope, leadership commitment, context, interested parties, objectives, roles, monitoring, internal audit, and management review."
   },
   {
     "name": "update-row",
@@ -1320,6 +1328,10 @@ export const toolNames: Array<{ name: string; description: string }>= [
     "name": "bulk-create-measurements",
     "description": "Record measurements for several metrics/periods in one save (Metrics due / backfill)\n\nRecord measurements for several metrics/periods in one save (Metrics due / backfill) in Comp AI. Build and maintain the ISO 27001 ISMS document set — scope, leadership commitment, context, interested parties, objectives, roles."
   },
+  {
+    "name": "import-vendors-as-software",
+    "description": "Add vendors to the Approved Software Register in one action\n\nAdds the chosen vendors as approved software rows in one transaction. Vendors already listed are skipped, not duplicated. \"Where it is used\" is left unanswered: a supplier record does not say where its product runs."
+  },
   {
     "name": "save-narrative",
     "description": "Save a singleton document narrative\n\nReplaces the working draft narrative of a document type that stores one, such as ISMS scope, leadership commitment, internal audit or risk assessment methodology. The narrative object is fully replaced, not merged."
@@ -1524,6 +1536,10 @@ export const toolNames: Array<{ name: string; description: string }>= [
     "name": "get-sync-history",
     "description": "Get sync history for a framework instance\n\nGet sync history for a framework instance in Comp AI. Manage SOC 2, ISO 27001, HIPAA, GDPR, and custom framework instances, requirements, scores, and sync history."
   },
+  {
+    "name": "search",
+    "description": "Search compliance records\n\nSearch policies, tasks, documents, people, controls, vendors, and risks by keyword in one call to locate a compliance record before fetching it by ID."
+  },
   {
     "name": "get-audit-logs",
     "description": "List audit logs\n\nList organization audit logs for compliance activity, access changes, evidence updates, and customer-facing review events."