framework-mcp 1.3.2 → 1.3.4

package/COPILOT_INTEGRATION.md

@@ -52,7 +52,7 @@ Expected response:
   "uptime": 1234,
   "totalRequests": 0,
   "errorCount": 0,
-  "version": "1.3.1",
+  "version": "1.3.4",
   "timestamp": "2025-08-21T01:00:00.000Z"
 }
 ```
@@ -159,7 +159,7 @@ Configure this action for capability determination:
 - **Parameters**: safeguard_id, include_examples (optional)
 
 **List Available Safeguards:**
-- **Operation**: `listSafeguards`
+- **Operation**: `listAvailableSafeguards`  
 - **Parameters**: None
 
 ## Example User Interactions

package/DEPLOYMENT_GUIDE.md

@@ -2,7 +2,7 @@
 
 ## Dual Architecture: MCP + HTTP API
 
-Framework MCP v1.1.3 features a **dual architecture** that solves the DigitalOcean App Services stdio vs HTTP mismatch:
+Framework MCP v1.3.4 features a **dual architecture** that solves the DigitalOcean App Services stdio vs HTTP mismatch:
 
 - **MCP Interface**: stdio-based for Claude Code integration
 - **HTTP Interface**: REST API for cloud deployment
@@ -56,7 +56,7 @@ curl http://localhost:8080/health
 2. In DigitalOcean Dashboard:
    - Create New App
    - Connect GitHub repository
-   - Select branch: `feature/dual-architecture-http-api` 
+   - Select branch: `main` 
    - Use provided `.do/app.yaml` configuration
 
 #### 2. Deploy via doctl CLI
@@ -332,4 +332,4 @@ npm install express-rate-limit
 
 ---
 
-**🎉 Framework MCP v1.1.3 solves the DigitalOcean stdio vs HTTP architecture mismatch while preserving full MCP functionality!**
+**🎉 Framework MCP v1.3.4 solves the DigitalOcean stdio vs HTTP architecture mismatch while preserving full MCP functionality!**

package/MCP_INTEGRATION_GUIDE.md

@@ -0,0 +1,318 @@
+# Framework MCP Integration Guide
+
+## Claude Code MCP Integration
+
+This guide shows how to integrate Framework MCP with Claude Code for CIS Controls capability assessment.
+
+## Prerequisites
+
+- **Claude Code CLI** installed and configured
+- **Node.js 18+** for running the MCP server
+- **Framework MCP** installed locally or from npm
+
+## Installation Options
+
+### Option 1: Install from npm (Recommended)
+```bash
+npm install -g framework-mcp
+```
+
+### Option 2: Build from Source
+```bash
+git clone https://github.com/therealcybermattlee/FrameworkMCP.git
+cd FrameworkMCP
+npm install
+npm run build
+```
+
+## MCP Configuration
+
+### Configure Claude Code MCP Settings
+
+Add Framework MCP to your MCP configuration file:
+
+**Location**: `~/.config/claude-code/mcp.json`
+
+```json
+{
+  "mcpServers": {
+    "framework-analyzer": {
+      "command": "node",
+      "args": ["/path/to/FrameworkMCP/dist/index.js"],
+      "env": {}
+    }
+  }
+}
+```
+
+### For npm Global Installation
+```json
+{
+  "mcpServers": {
+    "framework-analyzer": {
+      "command": "framework-mcp",
+      "args": [],
+      "env": {}
+    }
+  }
+}
+```
+
+## Verify Installation
+
+Test your MCP integration:
+
+```bash
+claude-code "List all available CIS Control safeguards"
+```
+
+Expected response: List of 153 safeguards across 18 CIS Controls
+
+## 🔧 MCP Tool Usage
+
+### 1. validate_vendor_mapping (PRIMARY)
+
+**Most Important Tool**: Evidence-based validation with domain validation
+
+```bash
+# Validate FULL capability claim (should pass)
+claude-code "Use validate_vendor_mapping with vendor_name 'ServiceNow CMDB', safeguard_id '1.1', claimed_capability 'full', and supporting_text 'Our CMDB provides comprehensive asset lifecycle management with automated discovery, detailed hardware and software inventory tracking, enterprise asset ownership records, departmental assignments, and documented bi-annual review processes.'"
+
+# Validate FULL capability claim (should auto-downgrade)  
+claude-code "Use validate_vendor_mapping with vendor_name 'Splunk SIEM', safeguard_id '1.1', claimed_capability 'full', and supporting_text 'Our SIEM platform provides comprehensive network visibility through log analysis and maintains detailed asset information through security event correlation.'"
+
+# Validate FACILITATES capability claim
+claude-code "Use validate_vendor_mapping with vendor_name 'Nessus Scanner', safeguard_id '1.1', claimed_capability 'facilitates', and supporting_text 'Our vulnerability scanner enhances existing asset management by providing additional device discovery and detailed software inventory during security assessments.'"
+```
+
+### 2. analyze_vendor_response
+
+**Purpose**: Determine appropriate capability role when unknown
+
+```bash
+# Analyze identity management vendor
+claude-code "Use analyze_vendor_response with vendor_name 'Okta', safeguard_id '5.1', and response_text 'We provide comprehensive identity lifecycle management with automated account provisioning, detailed user directories, quarterly access reviews, and full compliance reporting with audit trails.'"
+
+# Analyze cross-domain vendor
+claude-code "Use analyze_vendor_response with vendor_name 'CrowdStrike Falcon', safeguard_id '1.1', and response_text 'Our endpoint protection platform provides real-time asset visibility with comprehensive device inventory, software tracking, and continuous asset monitoring across all enterprise endpoints.'"
+```
+
+### 3. get_safeguard_details
+
+**Purpose**: Research safeguard requirements before assessment
+
+```bash
+# Basic safeguard details
+claude-code "Use get_safeguard_details with safeguard_id '1.1'"
+
+# Detailed safeguard with examples
+claude-code "Use get_safeguard_details with safeguard_id '5.1' and include_examples true"
+
+# Research multiple safeguards
+claude-code "Use get_safeguard_details for safeguard 6.3 then explain what makes this safeguard different from 5.1"
+```
+
+### 4. list_available_safeguards  
+
+**Purpose**: Discover available safeguards for planning
+
+```bash
+# Complete safeguard list
+claude-code "Use list_available_safeguards"
+
+# Targeted safeguard discovery
+claude-code "Use list_available_safeguards then identify which safeguards are most relevant for identity management vendor assessment"
+```
+
+## 📋 Common MCP Workflows
+
+### Workflow 1: New Vendor Assessment
+```bash
+# Step 1: Research the safeguard
+claude-code "Use get_safeguard_details for safeguard 1.1 to understand all requirements"
+
+# Step 2: Analyze vendor response (capability unknown)
+claude-code "Use analyze_vendor_response for vendor 'Device42' with safeguard '1.1' and response 'Our IT asset management platform provides comprehensive device discovery, detailed inventory tracking, and complete asset lifecycle management.'"
+
+# Step 3: Validate specific claim (if vendor claims specific capability)
+claude-code "Use validate_vendor_mapping to validate Device42's claim of 'full' capability for safeguard 1.1"
+```
+
+### Workflow 2: Claims Validation Audit
+```bash
+# Validate high-confidence claim
+claude-code "Use validate_vendor_mapping for vendor 'Microsoft Entra ID', safeguard '5.1', claimed capability 'full', with supporting text 'Complete identity management with automated provisioning, detailed account inventories, quarterly reviews, and comprehensive compliance reporting.'"
+
+# Validate questionable claim  
+claude-code "Use validate_vendor_mapping for vendor 'Network Scanner Pro', safeguard '1.1', claimed capability 'full', with supporting text 'We scan networks and find devices.'"
+```
+
+### Workflow 3: Multi-Safeguard Vendor Analysis
+```bash
+# Analyze vendor across multiple safeguards
+claude-code "Use analyze_vendor_response for Microsoft Defender for Endpoint across these scenarios:
+1. Safeguard 1.1: 'Comprehensive endpoint asset discovery and inventory'
+2. Safeguard 7.1: 'Continuous vulnerability assessment and patch management'  
+3. Safeguard 1.2: 'Unauthorized device detection and blocking'"
+```
+
+## 🎯 Domain Validation Examples
+
+### Asset Management Domain (Safeguards 1.1, 1.2)
+```bash
+# Appropriate tool type (should pass)
+claude-code "Use validate_vendor_mapping for 'Lansweeper', safeguard '1.1', claimed 'full', with 'Complete IT asset management with automated discovery, comprehensive inventory, and detailed asset tracking.'"
+
+# Inappropriate tool type (should auto-downgrade)
+claude-code "Use validate_vendor_mapping for 'Qualys VMDR', safeguard '1.1', claimed 'full', with 'Vulnerability scanning with network discovery and asset databases.'"
+```
+
+### Identity Management Domain (Safeguards 5.1, 6.3)
+```bash
+# Appropriate tool type (should pass)
+claude-code "Use validate_vendor_mapping for 'SailPoint', safeguard '5.1', claimed 'full', with 'Identity governance with comprehensive account management, lifecycle automation, and quarterly certifications.'"
+
+# Inappropriate tool type (should auto-downgrade)
+claude-code "Use validate_vendor_mapping for 'Splunk', safeguard '5.1', claimed 'full', with 'Account activity monitoring and user behavior analytics through log analysis.'"
+```
+
+## 🚀 Advanced MCP Usage
+
+### Custom Analysis Prompts
+```bash
+# Comparative assessment
+claude-code "Use validate_vendor_mapping to compare these FULL capability claims for safeguard 1.1: ServiceNow CMDB vs Device42 vs Lansweeper. Analyze domain validation, evidence quality, and confidence scores."
+
+# Gap analysis
+claude-code "Use get_safeguard_details for safeguard 5.1, then use analyze_vendor_response for Vendor 'BasicIAM' with response 'We provide user directories and password management.' Identify capability gaps."
+
+# Compliance planning
+claude-code "Use list_available_safeguards to identify all safeguards in Controls 1-3, then recommend which vendor types would be needed for comprehensive coverage."
+```
+
+### Error Handling Examples
+```bash
+# Invalid safeguard ID
+claude-code "Use get_safeguard_details with safeguard_id '99.99'"
+# Expected: Error with available safeguards suggestion
+
+# Invalid capability role
+claude-code "Use validate_vendor_mapping with claimed_capability 'super-full'"
+# Expected: Error listing valid capability roles
+
+# Insufficient supporting text
+claude-code "Use validate_vendor_mapping with supporting_text 'Good tool'"  
+# Expected: Error requiring minimum 10 characters
+```
+
+## 📊 Understanding MCP Responses
+
+### Successful Validation Response
+```json
+{
+  "vendor_name": "ServiceNow CMDB",
+  "safeguard_id": "1.1", 
+  "claimed_capability": "full",
+  "validated_capability": "full",
+  "validation_status": "SUPPORTED",
+  "confidence_score": 88,
+  "domain_validation": {
+    "tool_type": "cmdb",
+    "domain_appropriate": true,
+    "auto_downgrade_applied": false
+  },
+  "evidence_analysis": {
+    "core_requirements_score": 95,
+    "governance_elements_score": 80,
+    "sub_elements_score": 85,
+    "language_consistency_score": 92
+  },
+  "reasoning": "Strong evidence for FULL capability with appropriate tool type",
+  "recommendations": []
+}
+```
+
+### Auto-Downgrade Response
+```json
+{
+  "vendor_name": "Nessus Scanner",
+  "safeguard_id": "1.1",
+  "claimed_capability": "full", 
+  "validated_capability": "facilitates",
+  "validation_status": "QUESTIONABLE",
+  "confidence_score": 60,
+  "domain_validation": {
+    "tool_type": "vulnerability_management",
+    "domain_appropriate": false,
+    "auto_downgrade_applied": true
+  },
+  "reasoning": "Auto-downgraded from FULL to FACILITATES due to domain mismatch",
+  "recommendations": [
+    "Consider repositioning as FACILITATES capability to align with tool type"
+  ]
+}
+```
+
+## 🔍 Troubleshooting
+
+### Common MCP Issues
+
+**MCP Server Not Found:**
+```bash
+# Check Claude Code MCP configuration
+cat ~/.config/claude-code/mcp.json
+
+# Verify file paths are absolute
+which node
+ls -la /path/to/FrameworkMCP/dist/index.js
+```
+
+**Permission Denied:**
+```bash
+chmod +x /path/to/FrameworkMCP/dist/index.js
+```
+
+**Module Not Found:**
+```bash
+cd /path/to/FrameworkMCP
+npm install
+npm run build
+```
+
+**Tool Not Available:**
+```bash
+# Restart Claude Code after MCP configuration changes
+# Verify MCP server is running in Claude Code logs
+```
+
+### Verification Commands
+
+```bash
+# Test MCP connection
+claude-code "Use list_available_safeguards to verify Framework MCP is working"
+
+# Test all 4 tools
+claude-code "Test Framework MCP by using each tool: list_available_safeguards, get_safeguard_details for 1.1, analyze_vendor_response for a test vendor, and validate_vendor_mapping for a test claim"
+
+# Performance test
+claude-code "Use validate_vendor_mapping 5 times with different vendors to test caching performance"
+```
+
+## 🎉 Success Criteria
+
+Your MCP integration is successful when:
+
+- ✅ `list_available_safeguards` returns 153 safeguards
+- ✅ `get_safeguard_details` returns detailed safeguard breakdowns
+- ✅ `analyze_vendor_response` determines appropriate capability roles
+- ✅ `validate_vendor_mapping` performs evidence-based validation with domain validation
+- ✅ Auto-downgrade protection works for domain mismatches
+- ✅ All responses include confidence scores and detailed reasoning
+
+---
+
+**🔗 Related Documentation**
+- [Main README](README.md) - Project overview and installation
+- [Deployment Guide](DEPLOYMENT_GUIDE.md) - Cloud deployment options  
+- [Copilot Integration](COPILOT_INTEGRATION.md) - Microsoft Copilot setup
+- [Example Usage](examples/example-usage.md) - Detailed tool examples

package/README.md

@@ -219,14 +219,10 @@ claude-code "Show me the detailed breakdown of safeguard 5.1 including all sub-e
 
 ### Validate Vendor Capability Claims
 
-**NEW**: Validate whether a vendor's stated capability mapping is actually supported by their explanatory text.
+**PRIMARY TOOL**: Validate whether a vendor's stated capability mapping is actually supported by their explanatory text.
 
 ```bash
-claude-code "Validate this vendor capability claim:
-Vendor: SecureAssets Corp
-Safeguard: 1.1  
-Claimed Capability: FULL
-Supporting Text: 'Our comprehensive asset management platform performs automated discovery of all enterprise devices, maintains detailed hardware and software inventories, tracks ownership and location data, provides real-time asset status monitoring, and includes documented inventory procedures with bi-annual review capabilities.'"
+claude-code "Use validate_vendor_mapping with vendor_name 'SecureAssets Corp', safeguard_id '1.1', claimed_capability 'full', and supporting_text 'Our comprehensive asset management platform performs automated discovery of all enterprise devices, maintains detailed hardware and software inventories, tracks ownership and location data, provides real-time asset status monitoring, and includes documented inventory procedures with bi-annual review capabilities.'"
 ```
 
 ## 📊 Sample Output
@@ -330,9 +326,8 @@ Supporting Text: 'Our comprehensive asset management platform performs automated
 
 | Tool | Description |
 |------|-------------|
-| `analyze_vendor_response` | Determine vendor tool capability role for specific safeguard |
 | `validate_vendor_mapping` | **PRIMARY** Validate vendor's claimed capability role against supporting evidence with domain validation |
-| `validate_coverage_claim` | Validate FULL/PARTIAL implementation capability claims |
+| `analyze_vendor_response` | Determine vendor tool capability role for specific safeguard |
 | `get_safeguard_details` | Get detailed safeguard breakdown |
 | `list_available_safeguards` | List all available CIS safeguards |
 
@@ -442,7 +437,7 @@ npm run build
 ```
 
 ### Add New Safeguards
-Edit `src/index.ts` and add to the `CIS_SAFEGUARDS` object:
+Edit `src/core/safeguard-manager.ts` and add to the `initializeSafeguards()` method:
 
 ```typescript
 "X.Y": {

package/dist/index.d.ts

@@ -10,7 +10,6 @@ export declare class GRCAnalysisServer {
     private getSafeguardDetails;
     private listAvailableSafeguards;
     private analyzeVendorResponse;
-    private validateCoverageClaim;
     private performCapabilityAnalysis;
     private determineClaimedCapability;
     private getImplementationIndicators;

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAWA,OAAO,EAAE,kBAAkB,EAAE,MAAM,gCAAgC,CAAC;AACpE,OAAO,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAC;AACvE,OAAO,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAC;AACnE,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAw8K/D,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,MAAM,CAAS;;IAavB,OAAO,CAAC,iBAAiB;YAsLX,mBAAmB;YAyDnB,uBAAuB;YAyDvB,qBAAqB;YAyBrB,qBAAqB;IA8BnC,OAAO,CAAC,yBAAyB;IAajC,OAAO,CAAC,0BAA0B;IAmDlC,OAAO,CAAC,2BAA2B;IAanC,OAAO,CAAC,uBAAuB;IA4C/B,OAAO,CAAC,2BAA2B;IAgCnC,OAAO,CAAC,uBAAuB;IAkB/B,OAAO,CAAC,yBAAyB;IAajC,OAAO,CAAC,uBAAuB;IAa/B,OAAO,CAAC,0BAA0B;IAyBlC,OAAO,CAAC,2BAA2B;IAenC,OAAO,CAAC,iCAAiC;IAYzC,OAAO,CAAC,sBAAsB;IAY9B,OAAO,CAAC,qBAAqB;IAmB7B,OAAO,CAAC,sBAAsB;IA0C9B,OAAO,CAAC,4BAA4B;IAwCpC,OAAO,CAAC,uBAAuB;IA6B/B,OAAO,CAAC,yBAAyB;IA6BjC,OAAO,CAAC,aAAa;YAsFP,qBAAqB;IA2BnC,OAAO,CAAC,uBAAuB;IAkE/B,OAAO,CAAC,8BAA8B;IAqFtC,OAAO,CAAC,uBAAuB;IAS/B,OAAO,CAAC,kBAAkB;IAQ1B,OAAO,CAAC,+BAA+B;IAQvC,OAAO,CAAC,4BAA4B;IAQpC,OAAO,CAAC,0BAA0B;IAQlC,OAAO,CAAC,wBAAwB;IAQhC,OAAO,CAAC,wBAAwB;IAShC,OAAO,CAAC,cAAc;IAqJtB,OAAO,CAAC,mBAAmB;IA6C3B,OAAO,CAAC,oCAAoC;IAgC5C,OAAO,CAAC,0BAA0B;IAkClC,OAAO,CAAC,kBAAkB;IAgB1B,OAAO,CAAC,kBAAkB,CAKxB;IAGF,OAAO,CAAC,KAAK,CAIX;IAEF,OAAO,CAAC,yBAAyB;IAWjC,OAAO,CAAC,yBAAyB;IAajC,OAAO,CAAC,YAAY;IAcpB,OAAO,CAAC,mBAAmB;IAgB3B,OAAO,CAAC,mBAAmB;IAY3B,OAAO,CAAC,mBAAmB;IAc3B,OAAO,CAAC,iBAAiB;IAczB,OAAO,CAAC,kBAAkB;IAOpB,GAAG;CAYV"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAWA,OAAO,EAAE,kBAAkB,EAAE,MAAM,gCAAgC,CAAC;AACpE,OAAO,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAC;AACvE,OAAO,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAC;AACnE,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAw8K/D,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,MAAM,CAAS;;IAavB,OAAO,CAAC,iBAAiB;YAkJX,mBAAmB;YAyDnB,uBAAuB;YAyDvB,qBAAqB;IA0BnC,OAAO,CAAC,yBAAyB;IAajC,OAAO,CAAC,0BAA0B;IAmDlC,OAAO,CAAC,2BAA2B;IAanC,OAAO,CAAC,uBAAuB;IA4C/B,OAAO,CAAC,2BAA2B;IAgCnC,OAAO,CAAC,uBAAuB;IAkB/B,OAAO,CAAC,yBAAyB;IAajC,OAAO,CAAC,uBAAuB;IAa/B,OAAO,CAAC,0BAA0B;IAyBlC,OAAO,CAAC,2BAA2B;IAenC,OAAO,CAAC,iCAAiC;IAYzC,OAAO,CAAC,sBAAsB;IAY9B,OAAO,CAAC,qBAAqB;IAmB7B,OAAO,CAAC,sBAAsB;IA0C9B,OAAO,CAAC,4BAA4B;IAwCpC,OAAO,CAAC,uBAAuB;IA6B/B,OAAO,CAAC,yBAAyB;IA6BjC,OAAO,CAAC,aAAa;YAsFP,qBAAqB;IA2BnC,OAAO,CAAC,uBAAuB;IAkE/B,OAAO,CAAC,8BAA8B;IAqFtC,OAAO,CAAC,uBAAuB;IAS/B,OAAO,CAAC,kBAAkB;IAQ1B,OAAO,CAAC,+BAA+B;IAQvC,OAAO,CAAC,4BAA4B;IAQpC,OAAO,CAAC,0BAA0B;IAQlC,OAAO,CAAC,wBAAwB;IAQhC,OAAO,CAAC,wBAAwB;IAShC,OAAO,CAAC,cAAc;IAqJtB,OAAO,CAAC,mBAAmB;IA6C3B,OAAO,CAAC,oCAAoC;IAgC5C,OAAO,CAAC,0BAA0B;IAkClC,OAAO,CAAC,kBAAkB;IAgB1B,OAAO,CAAC,kBAAkB,CAKxB;IAGF,OAAO,CAAC,KAAK,CAIX;IAEF,OAAO,CAAC,yBAAyB;IAWjC,OAAO,CAAC,yBAAyB;IAajC,OAAO,CAAC,YAAY;IAcpB,OAAO,CAAC,mBAAmB;IAgB3B,OAAO,CAAC,mBAAmB;IAY3B,OAAO,CAAC,mBAAmB;IAc3B,OAAO,CAAC,iBAAiB;IAczB,OAAO,CAAC,kBAAkB;IAOpB,GAAG;CAYV"}

package/dist/index.js

@@ -5540,39 +5540,6 @@ export class GRCAnalysisServer {
                         required: ['safeguard_id']
                     }
                 },
-                {
-                    name: 'validate_coverage_claim',
-                    description: 'Validate a vendor\'s implementation capability claim (FULL/PARTIAL) against specific safeguard requirements and evidence quality',
-                    inputSchema: {
-                        type: 'object',
-                        properties: {
-                            vendor_name: {
-                                type: 'string',
-                                description: 'Name of the vendor'
-                            },
-                            safeguard_id: {
-                                type: 'string',
-                                description: 'CIS Control safeguard ID',
-                                pattern: '^[0-9]+\\.[0-9]+$'
-                            },
-                            coverage_claim: {
-                                type: 'string',
-                                enum: ['FULL', 'PARTIAL'],
-                                description: 'Vendor\'s implementation capability claim (FULL = complete implementation, PARTIAL = limited scope implementation)'
-                            },
-                            response_text: {
-                                type: 'string',
-                                description: 'Vendor response explaining their implementation capabilities'
-                            },
-                            capabilities: {
-                                type: 'array',
-                                items: { type: 'string' },
-                                description: 'List of additional vendor capability types (Governance, Facilitates, Validates)'
-                            }
-                        },
-                        required: ['vendor_name', 'safeguard_id', 'coverage_claim', 'response_text', 'capabilities']
-                    }
-                },
                 {
                     name: 'list_available_safeguards',
                     description: 'List all available CIS Control safeguards with their categorization',
@@ -5635,9 +5602,6 @@ export class GRCAnalysisServer {
                     case 'get_safeguard_details':
                         result = await this.getSafeguardDetails(args);
                         break;
-                    case 'validate_coverage_claim':
-                        result = await this.validateCoverageClaim(args);
-                        break;
                     case 'list_available_safeguards':
                         result = await this.listAvailableSafeguards(args);
                         break;
@@ -5786,31 +5750,6 @@ export class GRCAnalysisServer {
             ],
         };
     }
-    async validateCoverageClaim(args) {
-        const { vendor_name, safeguard_id, coverage_claim, response_text, capabilities } = args;
-        const safeguard = CIS_SAFEGUARDS[safeguard_id];
-        if (!safeguard) {
-            throw new Error(`Safeguard ${safeguard_id} not found`);
-        }
-        const analysis = this.performCapabilityAnalysis(vendor_name, safeguard, response_text);
-        // Validate the coverage claim
-        const validation = this.validateClaim(coverage_claim, analysis, capabilities, safeguard);
-        return {
-            content: [
-                {
-                    type: 'text',
-                    text: JSON.stringify({
-                        vendor: vendor_name,
-                        safeguardId: safeguard_id,
-                        claimedCoverage: coverage_claim,
-                        claimedCapabilities: capabilities,
-                        analysis,
-                        validation
-                    }, null, 2),
-                },
-            ],
-        };
-    }
     performCapabilityAnalysis(vendorName, safeguard, responseText) {
         const text = responseText.toLowerCase();
         // Step 1: Determine what type of capability this tool is claiming
@@ -6634,7 +6573,7 @@ export class GRCAnalysisServer {
                 case /^Safeguard .+ not found/.test(error.message) ? error.message : '':
                     return `❌ Invalid safeguard ID. Use 'list_available_safeguards' to see available CIS Control safeguards.`;
                 case /^Unknown tool/.test(error.message) ? error.message : '':
-                    return `❌ Tool '${toolName}' is not available. Available tools: analyze_vendor_response, validate_vendor_mapping, validate_coverage_claim, get_safeguard_details, list_available_safeguards.`;
+                    return `❌ Tool '${toolName}' is not available. Available tools: analyze_vendor_response, validate_vendor_mapping, get_safeguard_details, list_available_safeguards.`;
                 default:
                     return `❌ Error in ${toolName}: ${error.message}`;
             }