MCP Python SDK

autociso-mcp-client is the first-party Python SDK for the AutoCISO MCP server. It gives you a typed method per tool, sync and async clients, and built-in retries.

Install

pip install autociso-mcp-client

The import name is autociso_mcp:

from autociso_mcp import AutocisoMcpClient

Create a client

base_url is required — there is no default. Pass the full URL including /mcp:

import os
from autociso_mcp import AutocisoMcpClient

client = AutocisoMcpClient(
  base_url="https://autociso.io/mcp",
  token=os.environ["AUTOCISO_MCP_TOKEN"],  # mcp:read scope
)

First call

Each tool maps 1:1 to a namespaced, snake_case method. Use the sync client for scripts or the async client inside an event loop:

import os
from autociso_mcp import AutocisoMcpClient

client = AutocisoMcpClient(
  base_url="https://autociso.io/mcp",
  token=os.environ["AUTOCISO_MCP_TOKEN"],
)

posture = client.posture.summary()
print("Overall score:", posture.overall_score)

stale = client.access.stale_accounts()
print("Stale accounts:", len(stale))

import asyncio, os
from autociso_mcp import AsyncAutocisoMcpClient

async def main():
  client = AsyncAutocisoMcpClient(
      base_url="https://autociso.io/mcp",
      token=os.environ["AUTOCISO_MCP_TOKEN"],
  )
  posture = await client.posture.summary()
  print("Overall score:", posture.overall_score)

asyncio.run(main())

Results are PII-masked — emails appear as a***@domain.com and personal names are redacted:

{
  "overallScore": 72,
  "staleAccounts": 14,
  "openRisks": 6,
  "isoGapsOpen": 23,
  "topConcern": "14 stale accounts pending review"
}

Patterns

• Typed method per tool. client.access.stale_accounts(), client.risk.get(id="risk_…"), client.iso.gap_status() map to the same tools as the TypeScript SDK. See the Tool Catalog.
• No org_id, ever. Your org is bound to the token on the server. There is no org argument — you can’t query another tenant. By design.
• Retries on reads. Idempotent reads retry automatically on 429 and transient errors with exponential backoff and jitter (capped at ~3 attempts).
• Writes are not auto-retried. client.risk.create_draft(title="…") is the one write tool. It is never retried automatically, to avoid duplicate drafts.
• Timeout override. Pass timeout= per call when a tool is slow.
• call_raw escape hatch. For a tool the typed surface doesn’t cover, call it by name; the result is an untyped dict:

raw = client.call_raw("audit_trail_search", {"limit": 25, "offset": 0})
# raw is a dict — validate before use

Error handling

Tool failures raise typed exceptions (e.g. AutocisoScopeError, AutocisoRateLimitError). See MCP Errors and Retries for the full mapping and retry behavior.