framework-mcp 2.4.4 → 2.4.6

package/dist/interfaces/http/http-server.js

@@ -83,7 +83,7 @@ export class FrameworkHttpServer {
             res.json({
                 status: 'healthy',
                 uptime: Math.round(process.uptime()),
-                version: '2.4.4',
+                version: '2.4.6',
                 timestamp: new Date().toISOString()
             });
         });
@@ -183,7 +183,7 @@ export class FrameworkHttpServer {
         this.app.get('/api', (req, res) => {
             res.json({
                 name: 'Framework MCP HTTP API',
-                version: '2.4.4',
+                version: '2.4.6',
                 description: 'Pure Data Provider serving authentic CIS Controls Framework data',
                 endpoints: {
                     'GET /api/safeguards': 'List all available CIS safeguards',
@@ -222,7 +222,7 @@ export class FrameworkHttpServer {
     }
     start() {
         this.app.listen(this.port, '0.0.0.0', () => {
-            console.log(`🚀 Framework MCP HTTP Server v2.4.4 running on port ${this.port}`);
+            console.log(`🚀 Framework MCP HTTP Server v2.4.6 running on port ${this.port}`);
             console.log(`📊 Health check: http://localhost:${this.port}/health`);
             console.log(`📖 API docs: http://localhost:${this.port}/api`);
             console.log(`🔧 Environment: ${process.env.NODE_ENV || 'development'}`);

package/dist/interfaces/mcp/mcp-server.js

@@ -7,7 +7,7 @@ export class FrameworkMcpServer {
     constructor() {
         this.server = new Server({
             name: 'framework-analyzer',
-            version: '2.4.4',
+            version: '2.4.6',
         });
         this.safeguardManager = new SafeguardManager();
         this.setupHandlers();
@@ -103,7 +103,7 @@ export class FrameworkMcpServer {
                         safeguards,
                         total: safeguards.length,
                         framework: 'CIS Controls v8.1',
-                        version: '2.4.4'
+                        version: '2.4.6'
                     }, null, 2),
                 },
             ],
@@ -122,7 +122,7 @@ export class FrameworkMcpServer {
     async run() {
         const transport = new StdioServerTransport();
         await this.server.connect(transport);
-        console.error('🤖 Framework MCP Server v2.4.4 running via stdio');
+        console.error('🤖 Framework MCP Server v2.4.6 running via stdio');
         console.error('📊 Pure Data Provider for CIS Controls v8.1');
     }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "framework-mcp",
-  "version": "2.4.4",
+  "version": "2.4.6",
   "description": "Pure Data Provider architecture serving authentic CIS Controls Framework data via MCP and HTTP API. Empowers LLMs with authoritative safeguards data for analysis. Supports Microsoft Copilot custom connectors and cloud deployments.",
   "main": "dist/interfaces/http/http-server.js",
   "type": "module",

package/src/core/safeguard-manager.ts

@@ -4149,33 +4149,23 @@ export class SafeguardManager {
     assetType: ["Users"],
     securityFunction: ["Identify"],
     governanceElements: [ // Orange - MUST be met
-      "Establish and maintain an inventory of all accounts managed in the enterprise",
-      "The inventory must include both user and administrator accounts",
-      "At a minimum, should contain the person's name, username, start/stop dates, and department",
+      "Establish and maintain",
+      "Must include",
       "Validate that all active accounts are authorized, on a recurring schedule at a minimum quarterly, or more frequently"
     ],
     coreRequirements: [ // Green - The "what"
       "Inventory of Accounts"
     ],
     subTaxonomicalElements: [ // Yellow - Sub-taxonomical elements
-      "Establish",
-      "Maintain",
-      "Validate that all active accounts are authorized",
-      "Recurring schedule",
-      "Must Include",
-      "At a minimum",
-      "Minimum Quarterly",
-      "More Frequently",
       "User Accounts",
       "Administrator Accounts",
+      "Service Accounts",
       "Name",
       "Username",
       "Start Stop Dates",
       "Department"
     ],
     implementationSuggestions: [ // Gray - Implementation suggestions
-      "Account and Access Control Management",
-      "Identity and Access Management Tool"
     ],
     relatedSafeguards: ["1.1", "2.1", "5.2", "5.3", "5.4", "5.5", "5.6", "6.1", "6.2", "6.7", "12.8"],
     systemPromptFull: {
@@ -4266,22 +4256,16 @@ export class SafeguardManager {
     assetType: ["Users"],
     securityFunction: ["Protect"],
     governanceElements: [ // Orange - MUST be met
-      "Use unique passwords for all enterprise assets",
-      "Best practice implementation includes, at a minimum, an 8-character password for accounts using Multi-Factor Authentication (MFA) and a 14-character password for accounts not using MFA"
+      "Use",
+      "At a minimum, an 8-character password for accounts using Multi-Factor Authentication (MFA) and a 14-character password for accounts not using MFA"
     ],
     coreRequirements: [ // Green - The "what"
       "Unique Passwords"
     ],
     subTaxonomicalElements: [ // Yellow - Sub-taxonomical elements
-      "Use",
-      "At a minimum",
-      "All Enterprise Assets",
-      "8-character password for accounts using MFA",
-      "14-character password for accounts not using MFA"
+      "All Enterprise Assets"
     ],
     implementationSuggestions: [ // Gray - Implementation suggestions
-      "Account and Access Control Management",
-      "Password Management Tool"
     ],
     relatedSafeguards: ["5.1"],
     systemPromptFull: {
@@ -4372,20 +4356,16 @@ export class SafeguardManager {
     assetType: ["Users"],
     securityFunction: ["Protect"],
     governanceElements: [ // Orange - MUST be met
-      "Delete or disable any dormant accounts after a period of 45 days of inactivity, where supported"
+      "after a period of 45 days of inactivity", 
+      "where supported"
     ],
     coreRequirements: [ // Green - The "what"
       "Dormant Accounts"
     ],
     subTaxonomicalElements: [ // Yellow - Sub-taxonomical elements
-      "Disable",
-      "Delete",
-      "Period of 45 days of inactivity",
-      "Where Supported"
+      "Dormant Accounts"
     ],
     implementationSuggestions: [ // Gray - Implementation suggestions
-      "Account and Access Control Management",
-      "Identity and Access Management Tool"
     ],
     relatedSafeguards: ["5.1"],
     systemPromptFull: {
@@ -4476,22 +4456,18 @@ export class SafeguardManager {
     assetType: ["Users"],
     securityFunction: ["Protect"],
     governanceElements: [ // Orange - MUST be met
-      "Restrict administrator privileges to dedicated administrator accounts on enterprise assets",
-      "Conduct general computing activities, such as internet browsing, email, and productivity suite use, from the user's primary, non-privileged account"
+      "Restrict"
     ],
     coreRequirements: [ // Green - The "what"
       "Administrator Privileges",
       "Dedicated Admin Accounts"
     ],
     subTaxonomicalElements: [ // Yellow - Sub-taxonomical elements
-      "Restrict",
       "Enterprise assets",
       "User's primary, non-privileged account",
       "General Computing Activities"
     ],
     implementationSuggestions: [ // Gray - Implementation suggestions
-      "Account and Access Control Management",
-      "Identity and Access Management Tool",
       "Such as",
       "Internet browsing",
       "Email",
@@ -4586,29 +4562,20 @@ export class SafeguardManager {
     assetType: ["Users"],
     securityFunction: ["Identify"],
     governanceElements: [ // Orange - MUST be met
-      "Establish and maintain an inventory of service accounts",
-      "The inventory, at a minimum, must contain department owner, review date, and purpose",
-      "Perform service account reviews to validate that all active accounts are authorized, on a recurring schedule at a minimum quarterly, or more frequently"
+      "Establish and maintain",
+      "at a minimum, must contain",
+      "Perform service account reviews to validate that all active accounts are authorized",
+      "recurring schedule at a minimum quarterly, or more frequently"
     ],
     coreRequirements: [ // Green - The "what"
       "Inventory of Service Accounts"
     ],
     subTaxonomicalElements: [ // Yellow - Sub-taxonomical elements
-      "Establish",
-      "Maintain",
-      "At a Minimum Must Contain",
-      "Perform service account reviews to validate that all active accounts are authorized",
-      "On a recurring schedule",
       "Department Owner",
       "Review date",
-      "Purpose",
-      "At a minimum quarterly",
-      "More frequently",
-      "Or"
+      "Purpose"
     ],
     implementationSuggestions: [ // Gray - Implementation suggestions
-      "Account and Access Control Management",
-      "Identity and Access Management Tool"
     ],
     relatedSafeguards: ["5.1"],
     systemPromptFull: {
@@ -4699,20 +4666,16 @@ export class SafeguardManager {
     assetType: ["Users"],
     securityFunction: ["Govern"],
     governanceElements: [ // Orange - MUST be met
-      "Centralize account management through a directory or identity service"
+      "Centralize"
     ],
     coreRequirements: [ // Green - The "what"
       "Account Management"
     ],
     subTaxonomicalElements: [ // Yellow - Sub-taxonomical elements
-      "Centralize",
       "Directory Service",
-      "Identity Service",
-      "Or"
+      "Identity Service"
     ],
     implementationSuggestions: [ // Gray - Implementation suggestions
-      "Account and Access Control Management",
-      "Identity and Access Management Tool"
     ],
     relatedSafeguards: ["5.1", "6.6", "6.7", "12.5"],
     systemPromptFull: {
@@ -4800,30 +4763,22 @@ export class SafeguardManager {
     title: "Establish an Access Granting Process",
     description: "Establish and follow a documented process, preferably automated, for granting access to enterprise assets upon new hire or role change of a user.",
     implementationGroup: "IG1",
-    assetType: ["Users"],
+    assetType: ["Documentation"],
     securityFunction: ["Govern"],
     governanceElements: [ // Orange - MUST be met
       "Establish",
-      "Follow",
-      "Account and Access Control Management",
-      "Account and Credential Management Policy/Process",
-      "Documentation"
+      "Follow"
     ],
     coreRequirements: [ // Green - The "what"
       "documented process",
       "granting access to enterprise assets"
     ],
     subTaxonomicalElements: [ // Yellow - Sub-taxonomical elements
-      "preferably automated",
       "upon new hire",
       "role change of a user",
-      "New Hire",
-      "Role Change",
       "Enterprise assets"
     ],
     implementationSuggestions: [ // Gray - Implementation suggestions
-      "Account and Access Control Management",
-      "Account and Credential Management Policy/Process"
     ],
     relatedSafeguards: ["5.1", "6.7", "6.8"],
     systemPromptFull: {
@@ -4911,25 +4866,17 @@ export class SafeguardManager {
     title: "Establish an Access Revoking Process",
     description: "Establish and follow a process, preferably automated, for revoking access to enterprise assets, through disabling accounts immediately upon termination, rights revocation, or role change of a user. Disabling accounts, instead of deleting accounts, may be necessary to preserve audit trails.",
     implementationGroup: "IG1",
-    assetType: ["Users"],
+    assetType: ["Documentation"],
     securityFunction: ["Govern"],
     governanceElements: [ // Orange - MUST be met
       "Establish",
       "Follow",
-      "Account and Access Control Management",
-      "Account and Credential Management Policy/Process",
-      "Documentation"
+      "Disabling Accounts, instead of Deleting accounts, may be necessary to preserve audit trails"
     ],
     coreRequirements: [ // Green - The "what"
-      "process",
-      "revoking access to enterprise assets",
-      "disabling accounts immediately"
+      "Access Revoking Process"
     ],
     subTaxonomicalElements: [ // Yellow - Sub-taxonomical elements
-      "preferably automated",
-      "upon termination",
-      "rights revocation",
-      "role change of a user",
       "Role Change",
       "Termination",
       "Rights revocation",
@@ -4937,9 +4884,7 @@ export class SafeguardManager {
       "Disabling accounts immediately"
     ],
     implementationSuggestions: [ // Gray - Implementation suggestions
-      "Disabling accounts, instead of deleting accounts, may be necessary to preserve audit trails",
-      "Account and Access Control Management",
-      "Account and Credential Management Policy/Process"
+      "Preferably Automated"
     ],
     relatedSafeguards: ["5.1", "6.7"],
     systemPromptFull: {
@@ -5031,24 +4976,18 @@ export class SafeguardManager {
     securityFunction: ["Protect"],
     governanceElements: [ // Orange - MUST be met
       "Require",
-      "Account and Access Control Management",
-      "Multi-Factor Authentication Tool"
+      "Enforce",
+      "Where Supported"
     ],
     coreRequirements: [ // Green - The "what"
       "all externally-exposed enterprise or third-party applications to enforce MFA",
-      "where supported"
+      "MFA - Multi Factor Authentication"
     ],
     subTaxonomicalElements: [ // Yellow - Sub-taxonomical elements
-      "ALL Externally Exposed Applications",
-      "Enforce",
-      "Where supported"
+      "MFA for all externally exposed enterprise or third-party applications"
     ],
     implementationSuggestions: [ // Gray - Implementation suggestions
-      "Enforcing MFA through a directory service or SSO provider is a satisfactory implementation of this Safeguard",
-      "Directory service",
-      "SSO Provider",
-      "Account and Access Control Management",
-      "Multi-Factor Authentication Tool"
+      "Enforcing MFA through a directory service or SSO provider is a satisfactory implementation of this Safeguard"
     ],
     relatedSafeguards: ["2.1", "4.1"],
     systemPromptFull: {
@@ -5139,20 +5078,15 @@ export class SafeguardManager {
     assetType: ["Users"],
     securityFunction: ["Protect"],
     governanceElements: [ // Orange - MUST be met
-      "Require",
-      "Account and Access Control Management",
-      "Multi-Factor Authentication Tool"
+      "Require"
     ],
     coreRequirements: [ // Green - The "what"
-      "MFA",
-      "remote network access"
+      "MFA for remote network access"
     ],
     subTaxonomicalElements: [ // Yellow - Sub-taxonomical elements
-      "Remote Network Access"
+      "MFA for Remote Network Access"
     ],
     implementationSuggestions: [ // Gray - Implementation suggestions
-      "Account and Access Control Management",
-      "Multi-Factor Authentication Tool"
     ],
     relatedSafeguards: ["4.2", "12.7"],
     systemPromptFull: {
@@ -5244,25 +5178,17 @@ export class SafeguardManager {
     securityFunction: ["Protect"],
     governanceElements: [ // Orange - MUST be met
       "Require",
-      "Account and Access Control Management",
-      "Multi-Factor Authentication Tool"
+      "Where Supported"
     ],
     coreRequirements: [ // Green - The "what"
-      "MFA",
-      "all administrative access accounts",
-      "all enterprise assets"
+      "MFA on all administrative access accounts"
     ],
     subTaxonomicalElements: [ // Yellow - Sub-taxonomical elements
-      "where supported",
       "All Admin Access Accounts",
       "All enterprise assets",
-      "Onsite Management",
-      "Service Provider",
-      "Or"
+      "Onsite Management accounts or Service Provider Admin Accounts"
     ],
     implementationSuggestions: [ // Gray - Implementation suggestions
-      "Account and Access Control Management",
-      "Multi-Factor Authentication Tool"
     ],
     relatedSafeguards: ["4.1"],
     systemPromptFull: {
@@ -5350,30 +5276,22 @@ export class SafeguardManager {
     title: "Establish and Maintain an Inventory of Authentication and Authorization Systems",
     description: "Establish and maintain an inventory of the enterprise's authentication and authorization systems, including those hosted on-site or at a remote service provider. Review and update the inventory, at a minimum, annually, or more frequently.",
     implementationGroup: "IG2",
-    assetType: ["software"],
+    assetType: ["Software"],
     securityFunction: ["Identify"],
     governanceElements: [ // Orange - MUST be met
       "Establish",
       "maintain",
-      "Review and update",
-      "Account and Access Control Management",
-      "Account and Credential Management Policy/Process"
+      "Review and update inventory",
+      "At a minimum, monthly or more frequenlty"
     ],
     coreRequirements: [ // Green - The "what"
       "inventory of the enterprise's authentication and authorization systems"
     ],
     subTaxonomicalElements: [ // Yellow - Sub-taxonomical elements
-      "including those hosted on-site or at a remote service provider",
-      "at a minimum, annually, or more frequently",
-      "Hosted on-site",
-      "Remote Service Provider",
-      "Or",
-      "At a minimum Annually",
-      "More frequently"
+      "hosted on-site",
+      "hosted at a remote service provider"
     ],
     implementationSuggestions: [ // Gray - Implementation suggestions
-      "Account and Access Control Management",
-      "Account and Credential Management Policy/Process"
     ],
     relatedSafeguards: ["1.1", "2.1", "3.3", "5.6", "6.7"],
     systemPromptFull: {
@@ -5465,27 +5383,17 @@ export class SafeguardManager {
     securityFunction: ["Protect"],
     governanceElements: [ // Orange - MUST be met
       "Centralize",
-      "Account and Access Control Management",
-      "Account and Credential Management Policy/Process",
-      "Identity and Access Management Tool"
+      "Where Supported"
     ],
     coreRequirements: [ // Green - The "what"
-      "access control",
-      "all enterprise assets"
+      "access control"
     ],
     subTaxonomicalElements: [ // Yellow - Sub-taxonomical elements
       "through a directory service or SSO provider",
-      "where supported",
-      "Directory Service",
-      "SSO Provider",
-      "Or",
-      "All enterprise assets",
-      "Where Supported"
+      "Directory Service or SSO Provider",
+      "All enterprise assets"
     ],
     implementationSuggestions: [ // Gray - Implementation suggestions
-      "Account and Access Control Management",
-      "Account and Credential Management Policy/Process",
-      "Identity and Access Management Tool"
     ],
     relatedSafeguards: ["4.1", "5.1", "5.6", "6.1", "6.2", "6.6", "12.5", "12.7"],
     systemPromptFull: {
@@ -5578,30 +5486,21 @@ export class SafeguardManager {
     governanceElements: [ // Orange - MUST be met
       "Define",
       "maintain",
-      "Perform access control reviews of enterprise assets to validate that all privileges are authorized, on a recurring schedule at a minimum annually, or more frequently",
-      "Account and Access Control Management",
-      "Account and Credential Management Policy/Process",
-      "Identity and Access management Tool"
+      "Necessary",
+      "Perform access control reviews of enterprise assets to validate that all privileges are authorized, on a recurring schedule",
+      "At a mimimum Annually, or more Frequently"
     ],
     coreRequirements: [ // Green - The "what"
-      "role-based access control",
-      "determining and documenting the access rights necessary for each role within the enterprise to successfully carry out its assigned duties"
+      "role-based access control"
     ],
     subTaxonomicalElements: [ // Yellow - Sub-taxonomical elements
       "Access rights",
       "Each Role",
-      "Necessary",
-      "Successfully carry out its assigned duties",
+      "Neccesary to Successfully carry out its assigned duties",
       "Determining",
-      "Documenting",
-      "At a minimum Annually",
-      "More frequently",
-      "Or"
+      "Documenting"
     ],
     implementationSuggestions: [ // Gray - Implementation suggestions
-      "Account and Access Control Management",
-      "Account and Credential Management Policy/Process",
-      "Identity and Access management Tool"
     ],
     relatedSafeguards: ["3.3", "4.1", "6.1"],
     systemPromptFull: {

package/src/interfaces/http/http-server.ts

@@ -106,7 +106,7 @@ export class FrameworkHttpServer {
       res.json({
         status: 'healthy',
         uptime: Math.round(process.uptime()),
-        version: '2.4.4',
+        version: '2.4.6',
         timestamp: new Date().toISOString()
       });
     });
@@ -222,7 +222,7 @@ export class FrameworkHttpServer {
     this.app.get('/api', (req, res) => {
       res.json({
         name: 'Framework MCP HTTP API',
-        version: '2.4.4',
+        version: '2.4.6',
         description: 'Pure Data Provider serving authentic CIS Controls Framework data',
         endpoints: {
           'GET /api/safeguards': 'List all available CIS safeguards',
@@ -273,7 +273,7 @@ export class FrameworkHttpServer {
 
   public start(): void {
     this.app.listen(this.port, '0.0.0.0', () => {
-      console.log(`🚀 Framework MCP HTTP Server v2.4.4 running on port ${this.port}`);
+      console.log(`🚀 Framework MCP HTTP Server v2.4.6 running on port ${this.port}`);
       console.log(`📊 Health check: http://localhost:${this.port}/health`);
       console.log(`📖 API docs: http://localhost:${this.port}/api`);
       console.log(`🔧 Environment: ${process.env.NODE_ENV || 'development'}`);

package/src/interfaces/mcp/mcp-server.ts

@@ -18,7 +18,7 @@ export class FrameworkMcpServer {
     this.server = new Server(
       {
         name: 'framework-analyzer',
-        version: '2.4.4',
+        version: '2.4.6',
       }
     );
 
@@ -129,7 +129,7 @@ export class FrameworkMcpServer {
             safeguards,
             total: safeguards.length,
             framework: 'CIS Controls v8.1',
-            version: '2.4.4'
+            version: '2.4.6'
           }, null, 2),
         },
       ],
@@ -153,7 +153,7 @@ export class FrameworkMcpServer {
     const transport = new StdioServerTransport();
     await this.server.connect(transport);
     
-    console.error('🤖 Framework MCP Server v2.4.4 running via stdio');
+    console.error('🤖 Framework MCP Server v2.4.6 running via stdio');
     console.error('📊 Pure Data Provider for CIS Controls v8.1');
   }
 }

package/swagger.json

@@ -299,7 +299,7 @@
           },
           "version": {
             "type": "string",
-            "example": "2.4.4"
+            "example": "2.4.6"
           },
           "timestamp": {
             "type": "string",
@@ -344,7 +344,7 @@
           },
           "version": {
             "type": "string",
-            "example": "2.4.4"
+            "example": "2.4.6"
           },
           "description": {
             "type": "string",