MCP server
Run a COSO internal-control review end to end — scope, risks, controls, sampling, testing, workpapers, sign-off and deficiency evaluation.
Internal control is an argument about evidence. This runs the argument — traceable, to the framework a reviewer will test.
- COSO components
- 5
- principles
- 17
- MCP tools
- 20
- no API key
- Open
Capabilities
- 20 tools across the full review lifecycle
- COSO ICIF-2013: 5 components, 17 principles, points of focus
- Deterministic sampling and deficiency math
Standards
- COSO ICIF-2013
Connect
Point an MCP client at the hosted endpoint. Open access, no API key.
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"coso": { "type": "remote", "url": "https://internal-control.ascent-partners.com/mcp" }
}
}claude mcp add --transport http coso https://internal-control.ascent-partners.com/mcp
{
"mcpServers": {
"coso": { "url": "https://internal-control.ascent-partners.com/mcp" }
}
}{
"mcpServers": {
"coso": { "url": "https://internal-control.ascent-partners.com/mcp" }
}
}{
"servers": {
"coso": { "type": "http", "url": "https://internal-control.ascent-partners.com/mcp" }
}
}{
"mcpServers": {
"coso": { "url": "https://internal-control.ascent-partners.com/mcp" }
}
}Facts
- Endpoint
https://internal-control.ascent-partners.com/mcp- Transport
- Streamable HTTP
- Auth
- Open — no API key
- Licence
- MIT
- Registry
com.ascent-partners/coso-mcp
Where it comes from
Built by the Ascent Partners technology practice. Internal-control review methodology — not audit or legal advice.