Get detailed guidance for Phase 9: Output Generation and Documentation. This tool provides step-by-step guidance for generating outputs and d

Get details about a specific threat. This tool retrieves details about a specific threat in the threat model. Args: ctx:

Get details about a specific threat actor. This tool retrieves details about a specific threat actor in the threat model. Args:

Get the current progress of the threat modeling process. This tool returns the current progress of the threat modeling process, inclu

Get a comprehensive threat modeling plan. This tool returns a detailed threat modeling plan in markdown format, covering all phases o

Get details about a specific trust boundary. This tool retrieves details about a specific trust boundary in the system architecture.

Get a comprehensive trust boundary analysis plan. This tool returns a detailed plan for analyzing trust boundaries for security concerns

Get a comprehensive trust boundary detection plan. This tool returns a detailed plan for detecting trust boundaries from architecture

Get details about a specific trust zone. This tool retrieves details about a specific trust zone in the system architecture. Args:

Link a mitigation to a threat. This tool links a mitigation to a threat in the threat model. Args: ctx: MCP context for

List all assets in the system. This tool lists all assets in the system, optionally filtered by type or classification. Args:

List all current assumptions in the threat model. Args: ctx: MCP context for logging and error handling category: Opt

List all components in the architecture. This tool lists all components in the system architecture. Args: ctx: MCP conte

List all connections in the architecture. This tool lists all connections in the system architecture. Args: ctx: MCP con

List all crossing points. This tool lists all crossing points in the system architecture. Args: ctx: MCP context for log

List all available data models. This tool lists all available data models that can be used with get_data_model_types. Args:

List all data stores in the architecture. This tool lists all data stores in the system architecture. Args: ctx: MCP con

List files in a directory with optional filtering by extension. Args: directory: Directory to list files from extensions: Lis

List all asset flows in the system. This tool lists all asset flows in the system, optionally filtered by asset ID or component ID.

List all mitigations in the model. This tool lists all mitigations in the threat model, optionally filtered by type or status. Args:

List all threat actors. This tool lists all threat actors in the threat model. Args: ctx: MCP context for logging and er

List all threats in the model. This tool lists all threats in the threat model, optionally filtered by category, severity, or status.

List all trust boundaries. This tool lists all trust boundaries in the system architecture. Args: ctx: MCP context for l

List all trust zones. This tool lists all trust zones in the system architecture. Args: ctx: MCP context for logging and

Map detected security controls to threats. Args: security_controls: Dictionary of detected security controls threats: List of

Create a mock MCP context for testing.

Read the content of a file. Args: file_path: Path to the file to read Returns: The content of the file as a stri

Register step orchestration tools with the MCP server. Args: mcp: The MCP server instance

Register threat generator tools with the MCP server.

Register code security validation tools with the MCP server. Args: mcp: The MCP server instance

Register data model types tools with the MCP server. Args: mcp: The MCP server instance

Register assumption management tools with the MCP server. Args: mcp: The MCP server instance

Register asset flow analysis tools with the MCP server. Args: mcp: The MCP server instance

Register trust boundary detection tools with the MCP server. Args: mcp: The MCP server instance

Register trust boundary analysis tools with the MCP server. Args: mcp: The MCP server instance

Register threat actor analysis tools with the MCP server. Args: mcp: The MCP server instance

Register threat model validation tools with the MCP server. Args: mcp: The MCP server instance

Register threat model planning tools with the MCP server. Args: mcp: The MCP server instance

Register architecture analysis tools with the MCP server. Args: mcp: The MCP server instance

Register business context analysis tools with the MCP server. Args: mcp: The MCP server instance

Remove a component from a trust zone. This tool removes a component from a trust zone in the system architecture. Args:

Remove a connection from a crossing point. This tool removes a connection from a crossing point in the system architecture. Args:

Reset assets and flows to the default set. This tool resets assets and flows to the default set. Args: ctx: MCP context

Reset phase completion before each test.

Reset the threat actors to the default set. This tool resets the threat actors to the default set. Args: ctx: MCP contex

Set the business context with description and all features in one call. This streamlined tool sets the business context description and all b

Set the business context description only (legacy method for backward compatibility). Args: ctx: MCP context for logging and error ha

Set the priority of a threat actor. This tool sets the priority of a threat actor in the threat model. Args: ctx: MCP co

Set the relevance of a threat actor. This tool sets whether a threat actor is relevant to the system. Args: ctx: MCP con

Test adding a mitigation with minimal required fields.

Test adding a threat with minimal required fields.

Test that mitigation defaults to identified status.

Test adding a mitigation with custom status.

Test adding a mitigation with type.

Test that adding multiple threats increments numeric IDs.

Test that adding a threat creates a proper statement.

Test adding a threat with category.

Test adding a threat with affected components.

Test adding a threat with severity.

Test that all phases have objectives in their guidance.

Test that all phases have steps in their guidance.

Test that all phases have tools listed in their guidance.

Empty batch returns appropriate message.

Batch mode adds multiple components.

Batch update modifies multiple components.

Batch delete removes multiple components.

Batch handles errors gracefully for individual items.

Batch delete handles missing IDs gracefully.

Batch items can include optional fields.

Test that case-insensitive match returns the enum member.

Test case-insensitive matching with uppercase input.

Test that common mitigations include authentication category.

Test that common mitigations include MFA.

Test that common threats include authentication category.

Test that common threats include SQL injection.

Test that invalid component type raises validation error.

Test that component type accepts case-insensitive values.

Test that ComponentType has expected values.

Test that protocol accepts case-insensitive values.

Test creating an architecture with components.

Test creating an assumption link.

Test creating a component with all fields.

Test creating a connection with all fields.

Test creating a data store with all fields.

Test creating an empty architecture.

Test creating an empty threat model.

Test creating a metadata item.

Test creating a component with minimal required fields.

Test creating a connection with minimal required fields.

Test creating a data store with minimal required fields.

Test creating a mitigation with minimal required fields.