Tool reference

Research — the core loop — All tiers (Free +) — exceptions marked per row

• search — Full-text search across in-scope sources, routed by jurisdiction, framework, sector, or source. Needs at least one scope. On Premium+ it automatically fans out into case law, preparatory works, and agency guidance.
• get_provision — One article, verbatim, by (jurisdiction, law, article) or canonical_ref — with source URL, publisher, license.
• validate_citation — Check a citation resolves against the served corpus and get its current text for comparison — a deterministic, non-model check.
• list_coverage — What's live: by jurisdiction, by domain ("Using Ansvar: which jurisdictions for NIS2?"), or by region.
• get_changes — Amendment records from corpus change feeds. During the current interim no corpus advertises a feed and the tool is WITHHELD from tools/list entirely (reason: amendment_tracking_unavailable) — do not expect it in your client until a feed serves. For newly published acts, use search_regulatory_updates.
• search_regulatory_updates — What regulators newly published (EUR-Lex OJ-L, Commission DG CNECT, EDPB) — typed records with original-publisher deep links and CELEX ids. Premium and above.
• get_regulatory_update — One regulatory publication record by record_id — the lookup every search_regulatory_updates row names in its _citation.lookup. Premium and above.
• get_regulatory_intelligence_status — What the regulatory monitor actually watches and how current each source is: enrolled sources, publisher, channel, jurisdictions, last successful sync, freshness state. Free — check the watch surface before relying on it.
• diff — Compare two versions of a tracked provision.
• batch_search — Several scoped searches in one call — one quota draw per contained search.
• describe_capabilities / get_my_capabilities — Your tier's live tool list, sources, quotas, and limits. The authoritative answer to "what can I call?"

Vulnerability intelligence — All tiers (Free +)

• search_cve / get_cve_details — CVE search and detail from the live-synced CVE/NVD engine.
• get_epss_score / check_kev_status / get_exploits — Exploit-prediction score, CISA KEV membership, and known exploits for a CVE.
• search_by_product — CVEs affecting a product/vendor.
• get_data_freshness — Per-feed last-sync timestamps for the live data — how fresh the answer is.

The CVE intelligence engine serves these public facts from Free and includes feed-sync timestamps. Premium adds CAPEC, CWE, and D3FEND threat-pattern enrichment. Team adds effective-risk rescoring against customer asset context, review decisions, and OpenVEX export.

Legal evidence layer — Premium +

• search_guidance — Agency guidance from regulators, standalone (the guidance slice of the premium fan-out).
• get_decision — One court decision plus its cross-references — the case-law analog of get_provision.
• get_preparatory_work — One preparatory-work record — bills, propositions, committee reports, legislative history — by jurisdiction and canonical reference; search surfaces the hits inside the premium fan-out.

Case law and preparatory works have no standalone search tool — they arrive inside search's automatic premium fan-out.

Your documents — Premium + (read) · Team + (library)

• get_document_segments / resolve_document_segment — Read uploaded documents at paragraph level and round-trip doc:// citations with content hashes (Premium+).
• list_my_documents / register_document_init / register_document_finalize / register_document_text / delete_my_document — The document library: list, upload (presigned PUT, or register_document_text for pasted text), and delete (Team+).

See the Cite your documents guide for the full loop.

Your standards — Premium +

• list_org_standards / get_org_standard_clause / search_org_standards — Query your organization's own uploaded standards and clause library the same way you query law.

Different surface from the SIS ISO standards add-on (licensed ISO text served by Ansvar) — see the ISO standards add-on guide under Guides.

Control library — Team +

• list_controls / get_control — Canonical controls on the NIST SP 800-53r5 spine plus ANSV-* extensions — filterable by control family, CSF 2.0 function, or applicability profile; one control returns its statement and the framework requirements it maps to.
• get_requirements — The framework requirements a canonical control maps to (ISO 27001/27002, NIS2, DORA, CRA, C5, 800-171, …), each with its relationship type and review status — review-approved mappings only by default.
• crosswalk — Framework A requirement → the canonical controls that satisfy it → framework B's requirements on those controls. Crosswalks route through the spine; only human-reviewed mapping claims count.
• resolve — A requirement id to its citation descriptor (source, edition, ref, and the gateway resolution parameters) — the clause text itself is then fetched through the gateway at your corpus tier.
• coverage — Coverage of a framework against the reviewed mapping set: covered, partially covered, and unmapped requirements, optionally scoped to an applicability profile.
• changes — Change-detection across catalog and mapping versions, plus drift of mapping edges against their resolved sources. Distinct from the corpus-side get_changes.

The library behind the /control-library page — one canonical spine, pointer mappings to the frameworks, coverage counted over reviewed claims only.

Workflows — Free + · LINDDUN and TARA Premium + · document plane Team +

• scope_workflow — Answer a few scoping questions and get the right workflow_type for what you need produced — ambiguity comes back as the next question, never a list of maybes; pass the returned id to start_workflow.
• list_workflow_types / start_workflow / resume_workflow / list_workflows / cancel_workflow — Discover and manage structured workflow runs. Free includes 1 run/month and Solo 2 across seven types (threat model, gap analysis incl. NIS2/DORA/CRA/AI Act, DPIA) on a system you describe, with a watermarked render or JSON and no overage. Premium includes 5 across the full interview-grounded catalog with structured JSON reports. Team runs 20/seat/month, adds document grounding, and produces unwatermarked HTML, PDF, and DOCX exports.
• get_current_step / submit_response / get_progress — Drive a run: what's needed next, answer it, track it.
• generate_report / get_workflow_threats — The final deliverable and (threat workflows) the structured threat list.
• register_document / unregister_document / list_workflow_evidence / get_review_context — The document plane (Team+): bind uploaded documents to a run as evidence, list the evidence register, read a review gate's context.
• create_dfd / recommend_subagents — Threat-modeling specialists: validate and render a data-flow diagram; plan parallel sub-analyses for a phase.

Effective risk — Premium + inside workflow runs · Team + standalone

• effective_risk_inline / effective_risk_inline_batch — Context-supplied CVSS rescoring of a CVE, single or batch. Premium can call these only inside an admitted run of the vulnerability assessment, deferral dossier, or ICS advisory workflow; Team can call them standalone.
• simulate_control_investment — Rank hypothetical control investments by how much effective risk each would remove across your scored findings — an analysis, never a served score. Premium run-scoped (vulnerability assessment and deferral dossier runs); Team standalone.
• effective_risk — Rescoring against a persistent asset context. Team +.
• list_scoring_contexts / list_scoring_policies — Enumerate the asset contexts and rule sets the scorer can apply. Team +.
• record_review_decision / export_vex — Finalize an exploitability disposition and serialize it as an OpenVEX document. Team +.

Architecture workspace — Team +

• arch_overview — Per-kind resource counts, trust zones with exposure, unclassified and uncontrolled asset counts, unmitigated threats, pending proposals, when each kind last changed, bootstrap state, and scoring readiness. The recommended first call.
• arch_search — Substring search across every resource kind, or the subset you name. Returns kind, id, name, and the matching snippet, cursor-paginated.
• arch_get — One resource by kind and id: all its fields, its resolved links (relationship name to target ids), and its provenance.
• arch_list — List one kind, cursor-paginated, with equality filters on that kind's scalar columns. An unknown filter key is rejected, never silently ignored.
• arch_traverse — Breadth-first walk from a start node across the eleven edge families (data flows, dependencies, zone membership, threat and vulnerability links, control anchors, ADR links, obligation links). Depth capped at 3; direction out, in, or both.
• arch_coverage — Compliance-obligation rollup: counts by regime and assessment status, the obligations with no ADR or control evidence linked, and your unclassified and uncontrolled asset counts. Scope it to one regime when that's all you need ("Using Ansvar: which NIS2 obligations have no evidence linked?").
• arch_dfd — Render a Mermaid data-flow diagram from the stored graph: trust zones as subgraphs, services and data stores as nodes, flows labeled with data kind and transit encryption. Deterministic output, scoped to a zone or a list of services.
• arch_propose — Propose a create or update of one resource, with the evidence behind it. Unknown fields, bad enum values, and links to ids that don't exist in your org are rejected. Records a proposal; in steady state nothing changes until a reviewer approves. Inside an open bootstrap window it applies under the standing assent, and the response says so.
• arch_propose_retire — Propose soft-retirement of a resource: service to retired, ADR to deprecated, vulnerability to closed, obligation to non-compliant-accepted. Also a proposal, under the same bootstrap-window exception.
• arch_list_proposals — List your organization's proposals newest first, filtered by status (pending, applied, rejected, stale), kind, or proposer. A read.
• arch_get_proposal — One proposal by id with its full diff, the evidence attached to it, and the reviewer's comment. A read.
• arch_review_proposal — Approve or reject a pending proposal. Org-admin only, and the reviewer is never the proposer. Your comment goes on the record verbatim.
• arch_bootstrap — Read or control the seeding window. Any Team caller can read the status; start and stop are org-admin only. Inside an open window, one standing assent lets proposals apply on the spot, stamped as bootstrap, until stop closes the window.

Your own security-architecture graph, queried by your agent the same way it queries law: services, data stores, flows, trust zones, controls, threats, vulnerabilities, ADRs, and compliance obligations. Seven reads, two propose tools, two proposal reads, and two proposal-workflow tools: arch_review_proposal is org-admin only, as are arch_bootstrap's start and stop, while any Team caller can read the bootstrap status. Resources and proposals are scoped to your organization. A per-organization entitlement gate for the family is being phased in; tier decides access.

Audit ledger — Company

• get_receipt / list_receipts / verify_receipt — Tamper-evident signed receipts: each query generates a cryptographic record of what was asked, what was returned, and when.
• export_audit_package / decrypt_receipt — Offline-verifiable audit bundle export; receipts decrypt client-side with your tenant's KMS key.