MCP TypeScript SDK

@autociso/mcp-client is the first-party TypeScript SDK for the AutoCISO MCP server. It gives you a typed method per tool, autocomplete, and built-in retries — no raw JSON-RPC.

Install

npm install @autociso/mcp-client

Create a client

baseUrl is required — there is no default, because AutoCISO runs in multiple environments. Pass the full URL including /mcp:

import { AutocisoMcpClient } from '@autociso/mcp-client';

const client = new AutocisoMcpClient({
baseUrl: 'https://autociso.io/mcp',
token:   process.env.AUTOCISO_MCP_TOKEN!, // mcp:read scope
});

First call

Every tool maps to a namespaced, camelCase method. Here’s posture_summary:

import { AutocisoMcpClient } from '@autociso/mcp-client';

const client = new AutocisoMcpClient({
baseUrl: 'https://autociso.io/mcp',
token:   process.env.AUTOCISO_MCP_TOKEN!,
});

const posture = await client.posture.summary();
console.log('Overall score:', posture.overallScore);

const stale = await client.access.staleAccounts();
console.log('Stale accounts:', stale.length);

Results are PII-masked — emails appear as a***@domain.com and personal names are redacted:

{
  "overallScore": 72,
  "staleAccounts": 14,
  "openRisks": 6,
  "isoGapsOpen": 23,
  "topConcern": "14 stale accounts pending review"
}

Patterns

• Typed method per tool. client.access.staleAccounts(), client.risk.get({ id }), client.iso.gapStatus() — autocomplete shows every tool and its arguments. See the Tool Catalog for the full list.
• No org_id, ever. Your org is bound to the token on the server. The method signatures don’t accept an org argument — there’s no way to query another tenant. This is by design.
• Retries on reads. Idempotent read calls retry automatically on 429 and transient errors with exponential backoff and jitter (capped at ~3 attempts).
• Writes are not auto-retried. client.risk.createDraft({ title }) is the one write tool. It is never retried automatically, to avoid creating duplicate drafts.
• Timeout override. Pass a per-call timeout if a tool is slow:

const risks = await client.risk.registerList({ timeoutMs: 10_000 });

• callRaw escape hatch. For a tool the typed surface doesn’t cover yet, call it by name. The result is untyped (unknown):

const raw = await client.callRaw('audit_trail_search', { limit: 25, offset: 0 });
// raw is unknown — validate before use

Error handling

Tool failures surface as typed exceptions (e.g. AutocisoScopeError, AutocisoRateLimitError). See MCP Errors and Retries for the full code-to-exception mapping and retry behavior.