assess_trust_principlesLABSCO SUMMARY
The pre-audit paperwork, as a set of calls.
It works from the controls you describe rather than from your systems, so what comes back is the structured readiness view a consultant would draft first — the matrix, the gaps and the evidence list — with the collection still ahead of you.
What it is
A SOC 2 readiness toolkit. You describe the controls you have and it assesses them against the five Trust Services Criteria — security, availability, processing integrity, confidentiality and privacy — then produces the gap list, the control matrix, the evidence checklist and a remediation order.
What you get
- Your controls assessed against all five Trust Services Criteria, or against a single principle you name
- The gaps between what you have and what SOC 2 asks for, listed rather than described
- A control matrix generated from your controls and the evidence you hold against each
- An overall audit-readiness score across the principles
- An evidence checklist per principle, so you know what an auditor will ask to see
- A remediation plan that puts the findings in order against a timeline
Requirements
Python, installed from PyPI or through Smithery. There is a free tier, with Pro and Enterprise plans the vendor bills monthly.
Setup effort
One command — pip install soc2_compliance_ai_mcp
USE CASES
01
Finding out how far off a SOC 2 audit you are
A readiness score across the principles, with the gap list that explains it.
02
Working one criterion at a time
Assess a single principle rather than the whole framework, which is how the work actually gets divided.
03
Producing the control matrix an auditor expects
The matrix is generated from your control list and the evidence against each, instead of being typed into a spreadsheet.
04
Knowing what evidence to start collecting
A per-principle checklist, so collection starts before the auditor names the gap.
05
Turning a gap list into an order of work
The findings come back prioritised against a timeline rather than as an undifferentiated list.
6 tools
Listed in project docs. Your client may show a different list.
control_gap_analysisgenerate_control_matrixrisk_assessmentcrosswalk_to_iso27001readiness_checklistBEFORE YOU INSTALL
What to know first
Tools you get
6 tools named in the project's documentation.
Requires
Python 3.10+
Where it runs
All 3 documented clients run the server on your machine.
INSTALLATION
Connect your client
Server setup
TERMINAL
pip install soc2_compliance_ai_mcpMCP Clients
Claude Desktop, Cursor, Other MCP clients
JSON
{
"mcpServers": {
"soc2-compliance": {
"command": "soc2_compliance_ai_mcp"
}
}
}