-
Notifications
You must be signed in to change notification settings - Fork 2
Reference Generated MCP Tools Trust Center
Input schemas for the 42 trust_center tools. The index of every module is in mcp-tools.md; a live server answers the same thing authoritatively through the tools/list JSON-RPC method.
Approve a gated-document request: issues a time-limited signed download link and emails it to the requester.
Requires trust_center.document_request.approve.
| Parameter | Type | Required | Description |
|---|---|---|---|
id |
string |
yes | UUID of the object |
Create or upsert multiple trust center certifications in one call (max 500). Non-atomic: valid items are applied even if others fail. Pass 'match_on' (a list of field names, e.g. ["name"]) to make the call idempotent: each item whose match_on values already exist is UPDATED in place instead of duplicated, so a failed import can be safely replayed. Returns per-item status (created / updated / error) with created, updated and error counts.
Requires trust_center.certification.create.
| Parameter | Type | Required | Description |
|---|---|---|---|
items |
array |
yes | Array of trust center certification objects to create or upsert (max 500). |
match_on |
array |
- | Optional business key: list of writable field names used to find an existing record (e.g. ["name"]). When an item matches, it is updated; otherwise it is created. Omit for create-only behaviour. Many-to-many fields are not allowed. |
Create or upsert multiple trust center documents in one call (max 500). Non-atomic: valid items are applied even if others fail. Pass 'match_on' (a list of field names, e.g. ["name"]) to make the call idempotent: each item whose match_on values already exist is UPDATED in place instead of duplicated, so a failed import can be safely replayed. Returns per-item status (created / updated / error) with created, updated and error counts.
Requires trust_center.document.create.
| Parameter | Type | Required | Description |
|---|---|---|---|
items |
array |
yes | Array of trust center document objects to create or upsert (max 500). |
match_on |
array |
- | Optional business key: list of writable field names used to find an existing record (e.g. ["name"]). When an item matches, it is updated; otherwise it is created. Omit for create-only behaviour. Many-to-many fields are not allowed. |
Create or upsert multiple trust center measures in one call (max 500). Non-atomic: valid items are applied even if others fail. Pass 'match_on' (a list of field names, e.g. ["name"]) to make the call idempotent: each item whose match_on values already exist is UPDATED in place instead of duplicated, so a failed import can be safely replayed. Returns per-item status (created / updated / error) with created, updated and error counts.
Requires trust_center.measure.create.
| Parameter | Type | Required | Description |
|---|---|---|---|
items |
array |
yes | Array of trust center measure objects to create or upsert (max 500). |
match_on |
array |
- | Optional business key: list of writable field names used to find an existing record (e.g. ["name"]). When an item matches, it is updated; otherwise it is created. Omit for create-only behaviour. Many-to-many fields are not allowed. |
Create or upsert multiple trust center subprocessors in one call (max 500). Non-atomic: valid items are applied even if others fail. Pass 'match_on' (a list of field names, e.g. ["name"]) to make the call idempotent: each item whose match_on values already exist is UPDATED in place instead of duplicated, so a failed import can be safely replayed. Returns per-item status (created / updated / error) with created, updated and error counts.
Requires trust_center.subprocessor.create.
| Parameter | Type | Required | Description |
|---|---|---|---|
items |
array |
yes | Array of trust center subprocessor objects to create or upsert (max 500). |
match_on |
array |
- | Optional business key: list of writable field names used to find an existing record (e.g. ["name"]). When an item matches, it is updated; otherwise it is created. Omit for create-only behaviour. Many-to-many fields are not allowed. |
Create a new trust center certification
Requires trust_center.certification.create.
| Parameter | Type | Required | Description |
|---|---|---|---|
framework |
string |
yes | UUID of the source compliance framework. |
public_label |
string |
yes | public_label |
public_description |
string |
- | public_description |
show_percentage |
boolean |
- | Show this certification's compliance percentage. |
display_order |
integer |
- | Ascending sort order. |
created_at |
string |
- | Optional ISO 8601 date-time to preserve from a legacy system on bulk import (e.g. 2023-05-12T09:00:00Z). Requires the 'system.data_import.override_dates' permission; ignored without it. |
updated_at |
string |
- | Optional ISO 8601 date-time to preserve from a legacy system on bulk import (e.g. 2023-05-12T09:00:00Z). Requires the 'system.data_import.override_dates' permission; ignored without it. |
Create a new trust center document
Requires trust_center.document.create.
| Parameter | Type | Required | Description |
|---|---|---|---|
title |
string |
yes | title |
description |
string |
- | description |
access |
string |
- | Access level: 'public' (direct download) or 'gated' (request + approval). |
requires_nda |
boolean |
- | Whether a gated document requires NDA acceptance. |
report |
string |
- | UUID of the source generated report (required when creating via the API/MCP). |
display_order |
integer |
- | Ascending sort order. |
created_at |
string |
- | Optional ISO 8601 date-time to preserve from a legacy system on bulk import (e.g. 2023-05-12T09:00:00Z). Requires the 'system.data_import.override_dates' permission; ignored without it. |
updated_at |
string |
- | Optional ISO 8601 date-time to preserve from a legacy system on bulk import (e.g. 2023-05-12T09:00:00Z). Requires the 'system.data_import.override_dates' permission; ignored without it. |
Create a new trust center measure
Requires trust_center.measure.create.
| Parameter | Type | Required | Description |
|---|---|---|---|
title |
string |
yes | title |
description |
string |
- | description |
icon |
string |
- | Bootstrap Icons name, e.g. bi-shield-check. |
category |
string |
- | One of: organizational, technical, physical. |
display_order |
integer |
- | Ascending sort order. |
created_at |
string |
- | Optional ISO 8601 date-time to preserve from a legacy system on bulk import (e.g. 2023-05-12T09:00:00Z). Requires the 'system.data_import.override_dates' permission; ignored without it. |
updated_at |
string |
- | Optional ISO 8601 date-time to preserve from a legacy system on bulk import (e.g. 2023-05-12T09:00:00Z). Requires the 'system.data_import.override_dates' permission; ignored without it. |
Create a new trust center subprocessor
Requires trust_center.subprocessor.create.
| Parameter | Type | Required | Description |
|---|---|---|---|
supplier |
string |
yes | UUID of the source supplier. |
public_name |
string |
yes | public_name |
purpose |
string |
- | purpose |
public_country |
string |
- | public_country |
public_website |
string |
- | public_website |
display_order |
integer |
- | Ascending sort order. |
created_at |
string |
- | Optional ISO 8601 date-time to preserve from a legacy system on bulk import (e.g. 2023-05-12T09:00:00Z). Requires the 'system.data_import.override_dates' permission; ignored without it. |
updated_at |
string |
- | Optional ISO 8601 date-time to preserve from a legacy system on bulk import (e.g. 2023-05-12T09:00:00Z). Requires the 'system.data_import.override_dates' permission; ignored without it. |
Delete a trust center certification
Requires trust_center.certification.delete.
| Parameter | Type | Required | Description |
|---|---|---|---|
id |
string |
yes | UUID of the object |
Delete a trust center document
Requires trust_center.document.delete.
| Parameter | Type | Required | Description |
|---|---|---|---|
id |
string |
yes | UUID of the object |
Delete a trust center measure
Requires trust_center.measure.delete.
| Parameter | Type | Required | Description |
|---|---|---|---|
id |
string |
yes | UUID of the object |
Delete a trust center subprocessor
Requires trust_center.subprocessor.delete.
| Parameter | Type | Required | Description |
|---|---|---|---|
id |
string |
yes | UUID of the object |
Get a trust center certification by ID
Requires trust_center.certification.read.
| Parameter | Type | Required | Description |
|---|---|---|---|
id |
string |
yes | UUID of the object |
Return the change history of a trust center certification: field-level diffs, approval events and lifecycle transitions (with comments where recorded) merged into one reverse-chronological timeline.
Requires trust_center.certification.read.
| Parameter | Type | Required | Description |
|---|---|---|---|
id |
string |
yes | UUID of the trust center certification |
limit |
integer |
- | Max entries (default 100, max 500). |
offset |
integer |
- | Entries to skip (pagination). |
Get a trust center document by ID
Requires trust_center.document.read.
| Parameter | Type | Required | Description |
|---|---|---|---|
id |
string |
yes | UUID of the object |
Return the change history of a trust center document: field-level diffs, approval events and lifecycle transitions (with comments where recorded) merged into one reverse-chronological timeline.
Requires trust_center.document.read.
| Parameter | Type | Required | Description |
|---|---|---|---|
id |
string |
yes | UUID of the trust center document |
limit |
integer |
- | Max entries (default 100, max 500). |
offset |
integer |
- | Entries to skip (pagination). |
Get a Trust Center document request by ID.
Requires trust_center.document_request.read.
| Parameter | Type | Required | Description |
|---|---|---|---|
id |
string |
yes | UUID of the object |
Get a trust center measure by ID
Requires trust_center.measure.read.
| Parameter | Type | Required | Description |
|---|---|---|---|
id |
string |
yes | UUID of the object |
Return the change history of a trust center measure: field-level diffs, approval events and lifecycle transitions (with comments where recorded) merged into one reverse-chronological timeline.
Requires trust_center.measure.read.
| Parameter | Type | Required | Description |
|---|---|---|---|
id |
string |
yes | UUID of the trust center measure |
limit |
integer |
- | Max entries (default 100, max 500). |
offset |
integer |
- | Entries to skip (pagination). |
Get the public Trust Center settings (publication switch, headline, intro, security contact, theme).
Requires trust_center.settings.read.
No parameters.
Get a trust center subprocessor by ID
Requires trust_center.subprocessor.read.
| Parameter | Type | Required | Description |
|---|---|---|---|
id |
string |
yes | UUID of the object |
Return the change history of a trust center subprocessor: field-level diffs, approval events and lifecycle transitions (with comments where recorded) merged into one reverse-chronological timeline.
Requires trust_center.subprocessor.read.
| Parameter | Type | Required | Description |
|---|---|---|---|
id |
string |
yes | UUID of the trust center subprocessor |
limit |
integer |
- | Max entries (default 100, max 500). |
offset |
integer |
- | Entries to skip (pagination). |
List trust center certifications with optional search and filters
Requires trust_center.certification.read.
| Parameter | Type | Required | Description |
|---|---|---|---|
search |
string |
- | Text search query |
limit |
integer |
- | Max items to return (default 25, max 100) |
offset |
integer |
- | Offset for pagination |
List Trust Center gated-document access requests (optionally filter by workflow_state).
Requires trust_center.document_request.read.
| Parameter | Type | Required | Description |
|---|---|---|---|
search |
string |
- | Text search query |
limit |
integer |
- | Max items to return (default 25, max 100) |
offset |
integer |
- | Offset for pagination |
workflow_state |
string |
- | Filter by state: pending, approved, rejected. |
List trust center documents with optional search and filters
Requires trust_center.document.read.
| Parameter | Type | Required | Description |
|---|---|---|---|
search |
string |
- | Text search query |
limit |
integer |
- | Max items to return (default 25, max 100) |
offset |
integer |
- | Offset for pagination |
List trust center measures with optional search and filters
Requires trust_center.measure.read.
| Parameter | Type | Required | Description |
|---|---|---|---|
search |
string |
- | Text search query |
limit |
integer |
- | Max items to return (default 25, max 100) |
offset |
integer |
- | Offset for pagination |
List trust center subprocessors with optional search and filters
Requires trust_center.subprocessor.read.
| Parameter | Type | Required | Description |
|---|---|---|---|
search |
string |
- | Text search query |
limit |
integer |
- | Max items to return (default 25, max 100) |
offset |
integer |
- | Offset for pagination |
Reject a pending gated-document request, or revoke access for an approved one. A comment is required.
Requires trust_center.document_request.approve.
| Parameter | Type | Required | Description |
|---|---|---|---|
id |
string |
yes | UUID of the request |
comment |
string |
yes | Reason (required) |
Change the lifecycle state of a trust center certification (e.g. draft -> pending -> validated -> archived). The transition is validated against the entity's workflow: required permission, mandatory comment, and side effects (owner notification on submit, validation stamping).
Requires trust_center.certification.read.
| Parameter | Type | Required | Description |
|---|---|---|---|
id |
string |
yes | UUID of the trust center certification |
target_state |
string |
yes | Target lifecycle state code (see _allowed_transitions). |
comment |
string |
- | Comment, mandatory for transitions that require one. |
Change the lifecycle state of a trust center document (e.g. draft -> pending -> validated -> archived). The transition is validated against the entity's workflow: required permission, mandatory comment, and side effects (owner notification on submit, validation stamping).
Requires trust_center.document.read.
| Parameter | Type | Required | Description |
|---|---|---|---|
id |
string |
yes | UUID of the trust center document |
target_state |
string |
yes | Target lifecycle state code (see _allowed_transitions). |
comment |
string |
- | Comment, mandatory for transitions that require one. |
Change the lifecycle state of a trust center measure (e.g. draft -> pending -> validated -> archived). The transition is validated against the entity's workflow: required permission, mandatory comment, and side effects (owner notification on submit, validation stamping).
Requires trust_center.measure.read.
| Parameter | Type | Required | Description |
|---|---|---|---|
id |
string |
yes | UUID of the trust center measure |
target_state |
string |
yes | Target lifecycle state code (see _allowed_transitions). |
comment |
string |
- | Comment, mandatory for transitions that require one. |
Change the lifecycle state of a trust center subprocessor (e.g. draft -> pending -> validated -> archived). The transition is validated against the entity's workflow: required permission, mandatory comment, and side effects (owner notification on submit, validation stamping).
Requires trust_center.subprocessor.read.
| Parameter | Type | Required | Description |
|---|---|---|---|
id |
string |
yes | UUID of the trust center subprocessor |
target_state |
string |
yes | Target lifecycle state code (see _allowed_transitions). |
comment |
string |
- | Comment, mandatory for transitions that require one. |
List the lifecycle transitions the caller may perform on a trust center certification from its current state.
Requires trust_center.certification.read.
| Parameter | Type | Required | Description |
|---|---|---|---|
id |
string |
yes | UUID of the object |
List the lifecycle transitions the caller may perform on a trust center document from its current state.
Requires trust_center.document.read.
| Parameter | Type | Required | Description |
|---|---|---|---|
id |
string |
yes | UUID of the object |
List the lifecycle transitions the caller may perform on a trust center measure from its current state.
Requires trust_center.measure.read.
| Parameter | Type | Required | Description |
|---|---|---|---|
id |
string |
yes | UUID of the object |
List the lifecycle transitions the caller may perform on a trust center subprocessor from its current state.
Requires trust_center.subprocessor.read.
| Parameter | Type | Required | Description |
|---|---|---|---|
id |
string |
yes | UUID of the object |
Update an existing trust center certification
Requires trust_center.certification.update.
| Parameter | Type | Required | Description |
|---|---|---|---|
id |
string |
yes | UUID of the object to update |
framework |
string |
- | UUID of the source compliance framework. |
public_label |
string |
- | public_label |
public_description |
string |
- | public_description |
show_percentage |
boolean |
- | Show this certification's compliance percentage. |
display_order |
integer |
- | Ascending sort order. |
Update an existing trust center document
Requires trust_center.document.update.
| Parameter | Type | Required | Description |
|---|---|---|---|
id |
string |
yes | UUID of the object to update |
title |
string |
- | title |
description |
string |
- | description |
access |
string |
- | Access level: 'public' (direct download) or 'gated' (request + approval). |
requires_nda |
boolean |
- | Whether a gated document requires NDA acceptance. |
report |
string |
- | UUID of the source generated report (required when creating via the API/MCP). |
display_order |
integer |
- | Ascending sort order. |
Update an existing trust center measure
Requires trust_center.measure.update.
| Parameter | Type | Required | Description |
|---|---|---|---|
id |
string |
yes | UUID of the object to update |
title |
string |
- | title |
description |
string |
- | description |
icon |
string |
- | Bootstrap Icons name, e.g. bi-shield-check. |
category |
string |
- | One of: organizational, technical, physical. |
display_order |
integer |
- | Ascending sort order. |
Update the public Trust Center settings. Set is_published=true to expose the public page and API; false takes the whole Trust Center offline (404).
Requires trust_center.settings.update.
| Parameter | Type | Required | Description |
|---|---|---|---|
is_published |
boolean |
- | Master switch: expose the public Trust Center page and API. |
headline |
string |
- | Public hero headline. |
intro |
string |
- | Public introduction paragraph. |
contact_email |
string |
- | Public security contact email. |
show_compliance_percentages |
boolean |
- | Show numeric compliance percentages on certifications. |
theme_accent |
string |
- | Accent colour as a hex value, e.g. #1E3A8A. |
custom_domain |
string |
- | Informational custom domain (routing is configured via the TRUST_CENTER_HOST env var). |
Update an existing trust center subprocessor
Requires trust_center.subprocessor.update.
| Parameter | Type | Required | Description |
|---|---|---|---|
id |
string |
yes | UUID of the object to update |
supplier |
string |
- | UUID of the source supplier. |
public_name |
string |
- | public_name |
purpose |
string |
- | purpose |
public_country |
string |
- | public_country |
public_website |
string |
- | public_website |
display_order |
integer |
- | Ascending sort order. |
Built from docs/ at v0.36.0. Edits made here are overwritten by the next release : open a pull request against the source instead.
- Administration
- Ask Cairn
- Assets and suppliers
- Compliance
- The dashboard
- Finding your way
- Getting started
- Incidents
- How records move
- Organisational context
- Reports and management review
- Risks
- Trust Center
- Architecture
- Configuration
- Contributing
- The documentation system
- Installation
- Internationalisation
- Operations
- Release process
- Security
- Testing
- Adding an assistant provider
- Adding a dashboard widget
- Adding a domain entity
- Declaring a lifecycle
- Adding an MCP tool
- Adding a REST endpoint
- Adding a report
- Interface conventions
- Dashboard widgets
- Lifecycles
- MCP tools
- MCP tool parameters : Assets
- MCP tool parameters : Compliance
- MCP tool parameters : Governance and context
- MCP tool parameters : General
- MCP tool parameters : Incidents
- MCP tool parameters : Reports and management review
- MCP tool parameters : Risks
- MCP tool parameters : System and administration
- MCP tool parameters : Trust Center
- Management commands
- Models
- Permissions
- REST endpoints
- Environment variables
- MCP server
- REST API
- Assistant module (Ask Cairn)
- Module 0: User Management and Access Control
- Module 1: Context and Organization
- Module 2: Asset Management
- Module 3: Compliance
- Module 4: Risk Management
- Module 4 bis - EBIOS Risk Manager
- Module 5 : Trust Center
- Module 6 : Security Incident Management
- Management review : ISO 27001:2022 compliance (clause 9.3)