Handle batch or single add operations. If `items` is provided, iterates over the list and calls impl_fn for each item. Otherwise, calls i

Validate an enum value and provide enhanced error messages on failure. This function provides multiple layers of matching: 1. Exact match

Add a new threat to the model.

Get detailed guidance for a specific phase. Args: phase_number: The phase number to get guidance for Returns: Ma

Handle batch or single delete operations. If `ids` is provided, iterates over the list and calls impl_fn for each id. Otherwise, calls im

Initialize the trust boundary library with default values.

Handle batch or single update operations. If `items` is provided, iterates over the list and calls impl_fn for each item. Each item in th

Add a new mitigation to the model.

Truncate a string to max_length for Threat Composer schema compliance.

Initialize the threat actor library with default actors.

Detect and update phase completion based on actual work done.

Link a mitigation to a threat.

Truncate a string to max_length, preserving whole words where possible.

Add a new component to the architecture. Args: ctx: MCP context for logging and error handling name: Name of the component

Convert generic objects to dictionary format using their dict() method. Args: objects: Dictionary of objects with dict() method

Dynamically discover all Enum classes by re-scanning modules. This ensures we always get the most current enum definitions. Returns:

Automatically determine the current phase based on completion status.

Normalize a file path for consistent output. Args: path: The file path to normalize Returns: A normalized string

Get current enum values dynamically from the enum class. Args: enum_class_name: Name of the enum class Returns:

Get the current phase status and completion progress. Returns: Dictionary with current phase information and completion percentages

Collect all global state variables from threat modeling modules. Returns: ThreatModelState object containing all current state

Get common mitigations organized by category.

Get common threats organized by category.

List all threats in the model.

Update an existing threat.

Delete a threat from the model.

Get details about a specific threat.

List all mitigations in the model.

Unlink a mitigation from a threat.

Add a new asset to the system. Args: ctx: MCP context for logging and error handling name: Name of the asset type: Ty

Add a new assumption to the threat model. Args: ctx: MCP context for logging and error handling description: Description of the a

Add a new trust zone. Args: ctx: MCP context for logging and error handling name: Name of the trust zone trust_level:

Check if all business context features are set. Returns: A tuple of (is_complete, missing_features)

Convert assumptions to Threat Composer format. Args: assumptions: Dictionary of assumption objects Returns: List

Convert mitigations to Threat Composer format. Args: mitigations: Dictionary of mitigation objects Returns: List

Convert threats to Threat Composer format. Args: threats: Dictionary of threat objects Returns: List of threats

Create an enhanced error message with current valid enum values. Args: invalid_value: The invalid value that was provided enu

Detect if code files are present in the specified directory. Args: directory: Directory to check for code files file_patterns

Export comprehensive threat model to both Threat Composer JSON and Markdown formats. Args: output_path: Path to save the exported thr

Extract tool names from a module by inspecting the register_tools function. Args: module: The module to inspect Returns:

Generate comprehensive threat model markdown content. Args: state: ThreatModelState containing all threat model data Ret

Get a set of default threat actors. Returns: A dictionary of default threat actors

Get default assets.

Get default asset flows.

Get the file extension from a file path. Args: file_path: Path to the file Returns: File extension without the d

Map file extension to programming language. Args: extension: File extension Returns: Programming language name

Get a summary of the current threat modeling state. Returns: Dictionary with counts and status of each state category

List all components in the architecture. Args: ctx: MCP context for logging and error handling type: Optional type to filter

Run the threat modeling MCP server.

Update an existing mitigation.

Generate a prompt for LLM to analyze code for security controls. Args: code_content: The code content to analyze file_path: P

Analyze the threat actors. Args: ctx: MCP context for logging and error handling Returns: A markdown-formatted a

Clear the architecture. Args: ctx: MCP context for logging and error handling Returns: A confirmation message

Clear all assets and flows from the system. Args: ctx: MCP context for logging and error handling Returns: A con

Clear the business context. Args: ctx: MCP context for logging and error handling Returns: A confirmation messag

Clear all threat actors. Args: ctx: MCP context for logging and error handling Returns: A confirmation message

Clear all trust boundaries, crossing points, and trust zones. Args: ctx: MCP context for logging and error handling Retu

Convert business context to dictionary format. Args: business_context: BusinessContext object Returns: Dictionar

Convert components to dictionary format. Args: components: Dictionary of component objects Returns: List of comp

Convert connections to dictionary format. Args: connections: Dictionary of connection objects Returns: List of c

Convert data stores to dictionary format. Args: data_stores: Dictionary of data store objects Returns: List of d

Delete a mitigation from the model.

Dynamically discover all Enum classes in the imported modules. Returns: A dictionary mapping enum class names to enum classes

Execute the complete code validation step. Args: ctx: MCP context for logging and error handling Returns: A mark

Execute the complete final export step. Args: ctx: MCP context for logging and error handling Returns: A markdow

Extract tool names from the instructions string. Args: instructions: The instructions string Returns: Set of too

Format threats for LLM analysis context. Args: threats: List of threats to analyze Returns: Formatted string des

Generate a comprehensive threat modeling plan. This function returns a detailed threat modeling plan in markdown format, covering all phases

Generate documentation for all registered tools. Args: modules: List of tool modules Returns: Generated document

Get a comprehensive architecture analysis plan. Args: ctx: MCP context for logging and error handling Returns: A

Get a comprehensive asset flow analysis plan. Args: ctx: MCP context for logging and error handling Returns: A m

Get details about a specific asset. Args: ctx: MCP context for logging and error handling id: ID of the asset to retrieve

Get details about a specific assumption. Args: ctx: MCP context for logging and error handling id: ID of the assumption to retrie

Get a comprehensive business context analysis plan. Returns: A markdown-formatted business context analysis plan with prompts for LLM

Get a comprehensive business context analysis plan. Args: ctx: MCP context for logging and error handling Returns:

Get all business context features with descriptions. Args: ctx: MCP context for logging and error handling Returns:

Get the business context. Args: ctx: MCP context for logging and error handling Returns: A markdown-formatted bu

Get details about a specific crossing point. Args: ctx: MCP context for logging and error handling id: ID of the crossing poi

Get available types for a data model. Args: ctx: MCP context for logging and error handling model_name: Name of the data mode

Get a set of default crossing points. Returns: A dictionary of default crossing points

Get a set of default trust boundaries. Returns: A dictionary of default trust boundaries

Get a set of default trust zones. Returns: A dictionary of default trust zones

Get details about a specific asset flow. Args: ctx: MCP context for logging and error handling id: ID of the flow to retrieve

Get details about a specific mitigation.

Get details about a specific threat actor. Args: ctx: MCP context for logging and error handling id: ID of the threat actor t

Get a comprehensive trust boundary analysis plan with enforced AWS documentation validation. Args: ctx: MCP context for logging and e

Get a comprehensive trust boundary detection plan. Args: ctx: MCP context for logging and error handling Returns:

Get details about a specific trust boundary. Args: ctx: MCP context for logging and error handling id: ID of the trust bounda

Get details about a specific trust zone. Args: ctx: MCP context for logging and error handling id: ID of the trust zone to re

List all assets in the system. Args: ctx: MCP context for logging and error handling type: Optional type to filter assets

List all current assumptions in the threat model. Args: ctx: MCP context for logging and error handling category: Optional catego

List all connections in the architecture. Args: ctx: MCP context for logging and error handling component_id: Optional compon

List all crossing points. Args: ctx: MCP context for logging and error handling zone_id: Optional trust zone ID to filter cro

List all available data models. Args: ctx: MCP context for logging and error handling Returns: A markdown-format

List all data stores in the architecture. Args: ctx: MCP context for logging and error handling type: Optional type to filter

List all asset flows in the system. Args: ctx: MCP context for logging and error handling asset_id: Optional asset ID to filt

List all threat actors. Args: ctx: MCP context for logging and error handling type: Optional type to filter threat actors

List all trust boundaries. Args: ctx: MCP context for logging and error handling type: Optional type to filter trust boundari

List all trust zones. Args: ctx: MCP context for logging and error handling trust_level: Optional trust level to filter zones