Perform threat model validation against code. This function is designed to be called both from the MCP tool and internally by other compo

Read code files from a directory. Args: directory: Directory to read files from file_patterns: Optional list of file patterns

Remove a component from a trust zone. Args: ctx: MCP context for logging and error handling zone_id: ID of the trust zone

Remove a connection from a crossing point. Args: ctx: MCP context for logging and error handling crossing_point_id: ID of the

Reset assets and flows to the default set. Args: ctx: MCP context for logging and error handling Returns: A conf

Reset the threat actors to the default set. Args: ctx: MCP context for logging and error handling Returns: A con

Generate prompts for LLM to analyze code files for security controls. Args: code_files: Dictionary mapping file paths to file content

Set the business context description and all features in one call. Args: ctx: MCP context for logging and error handling desc

Set the priority of a threat actor. Args: ctx: MCP context for logging and error handling id: ID of the threat actor

Set the relevance of a threat actor. Args: ctx: MCP context for logging and error handling id: ID of the threat actor

Validate that all business context features are set before proceeding to next phase. Args: ctx: MCP context for logging and error han

Generate prompts for LLM to validate code security. Args: code_files: Dictionary mapping file paths to file content threats:

Validate that instructions match registered tools. Args: instructions: The instructions string modules: List of tool modules

Validate that all tools are properly documented in instructions. Args: mcp: The MCP server instance to validate. Returns

Add a new asset to the system. Supports batch operations via the 'items' parameter. This tool adds one or more assets to the system.

Add a new assumption to the threat model. Supports batch operations via the 'items' parameter. Assumptions are statements that we accept as t

Add a new component to the architecture. Supports batch operations via the 'items' parameter. This tool adds one or more components to the sy

Add a component to a trust zone. Supports batch operations via the 'items' parameter. This tool adds one or more components to trust zones in

Add a component to a trust zone. Args: ctx: MCP context for logging and error handling zone_id: ID of the trust zone

Add a connection to a crossing point. Supports batch operations via the 'items' parameter. This tool adds one or more connections to crossing

Add a new connection to the architecture. Supports batch operations via the 'items' parameter. This tool adds one or more connections between

Add a new connection to the architecture. Args: ctx: MCP context for logging and error handling source_id: ID of the source c

Add a connection to a crossing point. Args: ctx: MCP context for logging and error handling crossing_point_id: ID of the cros

Add a new crossing point. Supports batch operations via the 'items' parameter. This tool adds one or more crossing points between trust zones

Add a new crossing point. Args: ctx: MCP context for logging and error handling source_zone_id: ID of the source trust zone

Add a new data store to the architecture. Supports batch operations via the 'items' parameter. This tool adds one or more data stores to the

Add a new data store to the architecture. Args: ctx: MCP context for logging and error handling name: Name of the data store

Add a new asset flow to the system. Supports batch operations via the 'items' parameter. This tool adds one or more asset flows to the system

Add a new asset flow to the system. Args: ctx: MCP context for logging and error handling asset_id: ID of the asset being tra

Add a new mitigation to the model. Supports batch operations via the 'items' parameter. This tool adds one or more mitigations to the threat

Add a new threat to the model. Supports batch operations via the 'items' parameter. This tool adds one or more threats to the threat model.

Add a new threat actor. Supports batch operations via the 'items' parameter. This tool adds one or more threat actors to the threat model.

Add a new threat actor. Args: ctx: MCP context for logging and error handling name: Name of the threat actor type: Ty

Add a new trust boundary. Supports batch operations via the 'items' parameter. This tool adds one or more trust boundaries to the system arch

Add a new trust boundary. Args: ctx: MCP context for logging and error handling name: Name of the trust boundary type

Add a new trust zone. Supports batch operations via the 'items' parameter. This tool adds one or more trust zones to the system architecture.

Advance to the next phase of the threat modeling process. This tool advances to the next phase of the threat modeling process. Args:

Analyze the threat actors. This tool analyzes the threat actors in the threat model and provides recommendations. Args:

Clear the architecture. This tool clears all components, connections, and data stores from the architecture. Args: ctx:

Clear all assets and flows from the system. This tool clears all assets and flows from the system. Args: ctx: MCP contex

Clear the business context. This tool clears the business context, description, and clarification questions. Args: ctx:

Clear global state before each test.

Clear global state before each test.

Clear all threat actors. This tool clears all threat actors from the threat model. Args: ctx: MCP context for logging an

Clear all trust boundaries. This tool clears all trust boundaries, crossing points, and trust zones from the system architecture. Ar

Create a mock context.

Delete an asset from the system. Supports batch operations via the 'ids' parameter. This tool deletes one or more assets from the system. Ass

Delete an asset from the system. Args: ctx: MCP context for logging and error handling id: ID of the asset to delete

Delete an assumption from the threat model. Supports batch operations via the 'ids' parameter. For single item: provide the id directly.

Delete an assumption from the threat model. Args: ctx: MCP context for logging and error handling id: ID of the assumption to del

Delete a component from the architecture. Supports batch operations via the 'ids' parameter. This tool deletes one or more components from th

Delete a component from the architecture. Args: ctx: MCP context for logging and error handling id: ID of the component to de

Delete a connection from the architecture. Supports batch operations via the 'ids' parameter. This tool deletes one or more connections from

Delete a connection from the architecture. Args: ctx: MCP context for logging and error handling id: ID of the connection to

Delete a crossing point. Supports batch operations via the 'ids' parameter. This tool deletes one or more crossing points from the system arc

Delete a crossing point. Args: ctx: MCP context for logging and error handling id: ID of the crossing point to delete

Delete a data store from the architecture. Supports batch operations via the 'ids' parameter. This tool deletes one or more data stores from

Delete a data store from the architecture. Args: ctx: MCP context for logging and error handling id: ID of the data store to

Delete an asset flow from the system. Supports batch operations via the 'ids' parameter. This tool deletes one or more asset flows from the s

Delete an asset flow from the system. Args: ctx: MCP context for logging and error handling id: ID of the flow to delete

Delete a mitigation from the model. Supports batch operations via the 'ids' parameter. This tool deletes one or more mitigations from the thr

Delete a threat from the model. Supports batch operations via the 'ids' parameter. This tool deletes one or more threats from the threat mode

Delete a threat actor. Supports batch operations via the 'ids' parameter. This tool deletes one or more threat actors from the threat model.

Delete a threat actor. Args: ctx: MCP context for logging and error handling id: ID of the threat actor to delete

Delete a trust boundary. Supports batch operations via the 'ids' parameter. This tool deletes one or more trust boundaries from the system ar

Delete a trust boundary. Args: ctx: MCP context for logging and error handling id: ID of the trust boundary to delete

Delete a trust zone. Supports batch operations via the 'ids' parameter. This tool deletes one or more trust zones from the system architectur

Delete a trust zone. Args: ctx: MCP context for logging and error handling id: ID of the trust zone to delete Re

Execute the complete code validation step (Phase 7.5) automatically. This tool automates the code validation step, analyzing the codebase to

Execute the complete final export step (Phase 9) automatically. This tool automates the final export step, generating all required documentat

Export comprehensive threat model with all global variables to Threat Composer JSON format. This tool exports the complete threat model inclu

Export comprehensive threat model to markdown format. Args: output_path: Path to save the exported threat model Returns:

Export comprehensive threat model with all extended data to a separate file. This function creates a separate export with all the extended da

Export the threat model with remediation status. This tool exports the threat model with information about which threats are already

Extract the enum class from a type annotation. Args: field_type: The field type annotation Returns: The enum cla

Follow the threat modeling plan. This tool guides the user through the threat modeling process step by step, following the plan gener

Format a remediation report as markdown. Args: report: The remediation report threats: List of threats for reference

Generate a prompt for LLM to create a comprehensive remediation report. This tool generates a prompt for LLM to create a report showing which

Generate a remediation report from validation results. Args: threats: List of identified threats mitigations: List of propose

Get a comprehensive architecture analysis plan. This tool returns a detailed plan for analyzing system architecture for security concerns

Get details about a specific asset. This tool retrieves details about a specific asset in the system. Args: ctx: MCP con

Get a comprehensive asset flow analysis plan. This tool returns a detailed plan for analyzing asset flows for security concerns using

Get details about a specific assumption. Args: ctx: MCP context for logging and error handling id: ID of the assumpti

Get the business context. This tool returns the business context created from the answers to the clarification questions. Args:

Get all business context features with descriptions. This tool returns all available features of the business context with descriptions of wh

Get details about a specific crossing point. This tool retrieves details about a specific crossing point in the system architecture.

Get available types for a data model. This tool returns the available types for a specified data model. Args: ctx: MCP c

Get details about a specific asset flow. This tool retrieves details about a specific asset flow in the system. Args: ct

Get details about a specific mitigation. This tool retrieves details about a specific mitigation in the threat model. Args:

Get detailed guidance for Phase 1: Business Context Analysis. This tool provides step-by-step guidance for conducting business context analys

Get detailed guidance for Phase 2: Architecture Analysis. This tool provides step-by-step guidance for conducting architecture analysis,

Get detailed guidance for Phase 3: Threat Actor Analysis. This tool provides step-by-step guidance for conducting threat actor analysis,

Get detailed guidance for Phase 4: Trust Boundary Analysis. This tool provides step-by-step guidance for conducting trust boundary analysis,

Get detailed guidance for Phase 5: Asset Flow Analysis. This tool provides step-by-step guidance for conducting asset flow analysis,

Get detailed guidance for Phase 6: Threat Identification. This tool provides step-by-step guidance for conducting threat identification,

Get detailed guidance for Phase 7.5: Code Validation Analysis. This tool provides step-by-step guidance for conducting code validation analys

Get detailed guidance for Phase 7: Mitigation Planning. This tool provides step-by-step guidance for conducting mitigation planning,

Get detailed guidance for Phase 8: Residual Risk Analysis. This tool provides step-by-step guidance for conducting residual risk analysis,