Coso MCP server

• add_review_noteFree

  Add a reviewer note to a workpaper.

• add_scope_itemFree

  Add a significant account/process to the review scope, with its objective category and assertions.

• aggregate_deficienciesFree

  Group related deficiencies by control, flag combinations that may aggregate, and report the overall severity.

• assemble_workpaperFree

  Assemble a Markdown control-testing workpaper from the control, its risks, population, sample, test results and exceptions.

• assess_componentFree

  Report coverage indicators for one COSO component, aggregating its principles.

• assess_principleFree

  Report data-driven coverage indicators for one COSO principle (controls, risks and deficiencies mapped to it).

• classify_deficiencyFree

  Classify a control deficiency as deficiency / significant deficiency / material weakness from likelihood × magnitude (escalates for a pervasive control).

• compute_sample_sizeFree

  Recommend a sample size for a control from its frequency, risk and population size, with a documented rationale.

• create_engagementwrite actionFree

  Create a new internal-control review engagement. Returns the engagement id used by all later tools.

• create_populationwrite actionFree

  Register the population for a control — either an explicit item list or a declared size. Bounded to 10000 items.

• framework_integration_checkFree

  Check that all five COSO components have some recorded coverage and that principles are addressed.

• generate_reportFree

  Generate a Markdown internal-control review report: scope, risks, controls, testing, workpapers, deficiencies and COSO coverage.

• get_activity_logFree

  Return the append-only activity log for an engagement, plus a Markdown rendering.

• get_audit_logFree

  Return the append-only audit events recorded for an engagement.

• get_componentFree

  Return a single COSO component by id, with its principles.

• get_engagementFree

  Return an engagement by id.

• get_principleFree

  Return a single COSO principle by framework number or slug, including its paraphrased points of focus.

• get_server_infoFree

  Return the server identity, the COSO framework it covers, and the mandatory disclaimer.

• get_workpaperFree

  Return a workpaper including its rendered Markdown.

• list_assertionsFree

  List the assertions used to frame control objectives: completeness, existence/occurrence, accuracy, valuation, obligations/rights, presentation/disclosure.

• list_componentsFree

  List the five components of the COSO Internal Control—Integrated Framework (ICIF-2013).

• list_controlsFree

  List the controls registered for an engagement.

• list_deficienciesFree

  List the deficiencies recorded for an engagement.

• list_engagementsFree

  List all engagement ids and titles.

• list_exceptionsFree

  List the exceptions recorded for an engagement.

• list_objective_categoriesFree

  List the three COSO objective categories (operations, reporting, compliance).

• list_populationsFree

  List the populations registered for an engagement.

• list_principlesFree

  List the 17 principles of the COSO ICIF-2013, optionally filtered to a single component.

• list_risksFree

  List the risks registered for an engagement.

• list_scope_itemsFree

  List the scope items for an engagement.

• list_test_resultsFree

  List the test results recorded for an engagement.

• list_workpapersFree

  List the workpapers assembled for an engagement.

• note_exceptionFree

  Record an exception identified during testing, with root cause, impact and any compensating control.

• record_test_resultFree

  Record attribute-level outcomes (pass/fail/na) for a tested sample, with an optional conclusion.

• register_controlFree

  Register a key control with its type, frequency, linked risks, assertions and COSO principles.

• register_riskFree

  Register a risk to objectives, with likelihood, assertions, related COSO principles and a fraud flag.

• resolve_review_noteFree

  Mark a review note resolved on a workpaper.

• select_sampleFree

  Select a reproducible sample from a population. Seeded (deterministic) for random/systematic/haphazard; targeted takes explicit references. Records the method, seed and references.

• sign_offFree

  Record a preparer or reviewer sign-off. Warns (does not block) if the same person prepared and reviewed.

• Code scan73 source files scanned25/25
• Live reliabilityremote reachable in 720ms20/20
• Tool poisoning39 tool descriptions checked15/15
• Auth qualityopen endpoint exposes 2 write-action tools with no auth3/15
• Maintenancelast push 0 days ago15/15
• Maintainer identityendpoint served from the registry-verified namespace domain8/10

Safety score

86/100

higher than 72% of 45,646 servers

Tools

39

the typical server has 7

Tools that change things

5%

typical: 0%. Fewer write tools means less an agent can break

Uptime

61%

of our recent checks; the typical remote server answers 100%

Response time

1,758 ms

faster than 5% of 27,829 servers

Downloads a week

472

more than 88% of 11,158 servers with a package

Coso: common questions

Is Coso MCP server safe?

Yes, by our scan: it is graded A (86/100). Read the Coso safety report

How do I install Coso?

It runs remotely at internal-control.ascent-partners.com. Add it to Claude Code, Cursor, VS Code or Claude Desktop with the snippets above, or call it through the mcp.market gateway without installing anything.

Does Coso need an API key?

Not as far as the registry entry and our scan can tell: no credentials are declared or required.

Is Coso maintained?

The last commit was 11 days ago (2026-10-14). The latest release is v0.1.2.

Is Coso up?

61% of our last 28 checks got an answer. We check remote servers about four times a day.

What can I use instead of Coso?

Servers from other publishers that do the same job: QVeris MCP server.

How does Coso compare with other MCP servers?

safety score 86/100 (higher than 72% of 45,646 servers); tools 39 (the typical server has 7); tools that change things 5% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.