SOC 2 Compliance

Install

Works with Claude Code, Codex, VS Code, Cursor, Windsurf, Claude Desktop. Read the repository before you give any tool access to your data.

npx agentmarket install connector/csoai-org-soc2-compliance-ai-mcp

About

No reviews yet. Installed it? Reviews come from verified installers only. How reviews work

Permissions

What this server can do and what it asks for, from its tool list and install config. Checked Oct 25, 2026.

Tools

1 read · 0 write · 0 delete · 5 not yet classified

Secrets

None asked for

Install scripts

Not scanned yet

Runs as

Python package

Tools (6)

Read from the source code; the running server may differ. Descriptions are the server’s own words; hidden characters are shown as [U+…].

• assess_trust_principles

  Audit an AI system against the 5 SOC 2 Trust Service Criteria: Security (Common Criteria), Availability, Processing Integrity, Confidentiality, and Privacy. Returns compliance status per principle with AI-specific findings. Args: system_description: Description of the AI system or service being assessed principles_in_scope: Which principles to assess (default all 5): ["CC", "A", "PI", "C", "P"] controls_implemented: Dict mapping criteria series to implemented controls, e.g. {"CC6": ["CC6.1", "CC6.2"]} caller: Caller identifier for rate limiting tier: Access tier (free/pro)…

• control_gap_analysis

  Gap analysis against SOC 2 controls. Compares implemented controls to required criteria and produces a prioritized remediation plan. Args: implemented_controls: List of implemented SOC 2 criteria IDs (e.g. ["CC1.1", "CC6.1", "A1.1"]) target_type: "type1" (point-in-time) or "type2" (period of time, requires operational evidence) principles_in_scope: Filter to specific principles ["CC", "A", "PI", "C", "P"] caller: Caller identifier for rate limiting tier: Access tier (free/pro) Behavior: This tool generates structured output without modifying external systems. Outp…

• crosswalk_to_iso27001

  Map SOC 2 controls to ISO 27001 Annex A controls. Shows how SOC 2 compliance overlaps with ISO 27001 certification requirements, enabling organizations pursuing dual compliance to identify shared controls. Args: soc2_series: Specific SOC 2 series to map (e.g. ["CC6", "CC7", "A1"]) focus_principle: Filter by principle: "all", "CC", "A", "PI", "C", or "P" caller: Caller identifier for rate limiting tier: Access tier (free/pro) Behavior: This tool is read-only and stateless — it produces analysis output without modifying any external systems, databases, or files. Saf…

• generate_control_matrix

  Generate a SOC 2 control matrix with control objectives, criteria, control activities, and evidence requirements. Suitable for auditor preparation and internal control documentation. Args: organization_name: Name of the organization principles_in_scope: Which principles to include (default all 5) include_evidence: Whether to include detailed evidence requirements caller: Caller identifier for rate limiting tier: Access tier (free/pro) Behavior: This tool generates structured output without modifying external systems. Output is deterministic for identical inputs. N…

• readiness_checklist

  SOC 2 Type I/II readiness assessment. Generates a comprehensive pre-audit checklist with timeline, resource requirements, and AI-specific considerations. Args: audit_type: "type1" (point-in-time design) or "type2" (operating effectiveness over time) organization_maturity: "low", "moderate", or "high" — current security maturity ai_system: Whether the service includes AI/ML components current_certifications: Existing certifications that provide head start (e.g. ["ISO27001", "GDPR"]) caller: Caller identifier for rate limiting tier: Access tier (free/pro) Behavior: …

• risk_assessment

  SOC 2 risk assessment per AICPA guidelines. Identifies risks to Trust Service Criteria, assesses likelihood and impact, and maps to specific SOC 2 control requirements. Args: system_description: Description of the service organization and its systems service_commitments: System Description service commitments (SLAs, security guarantees) known_risks: Already identified risks to evaluate ai_specific: Whether to include AI-specific risk factors caller: Caller identifier for rate limiting tier: Access tier (free/pro) Behavior: This tool is read-only and stateless — it…

Signals

Stars

0

Forks

0

Open issues

9

Weekly downloads

91

Last commit

Sep 4, 2026 (2 months ago)

Last release

Aug 19, 2026 (2 months ago)

Last package publish

Jun 27, 2026 (4 months ago)

From GitHub (fetched Oct 24, 2026) and the package registry.

Details

Registry name

io.github.CSOAI-ORG/soc2-compliance-ai-mcp

Version

1.0.15

Auth

No auth

Packages

pypi soc2-compliance-ai-mcp

License

MIT

Repository

github.com/CSOAI-ORG/soc2-compliance-ai-mcp

Website

meok.ai/soc2-compliance-ai-mcp

First seen

Oct 24, 2026

Last checked

Nov 1, 2026

Source

Official MCP Registrygithub-graphql