# Account Recovery Readiness Audit AI Agent Connect

> Account Recovery Readiness Audit MCP lets your AI client inspect how prepared a user is for account lockout scenarios. It analyzes recovery vectors like email, phone, and hardware keys to find critical security gaps. You can use it to score readiness or compare current settings against a target security profile to ensure you have enough redundancy.

## Overview
- **Category:** security
- **Price:** Free
- **Endpoint:** https://edge.vinkius.com/vk_preview_vLC9yNNL7aDx2c9Fp3drhxC9jQbH4MqCraXIaNlk/ai-agent-connect
- **Tags:** security, audit, recovery, account-safety, risk-assessment

## Description

You can't fix what you haven't measured. This MCP gives your AI agent the ability to look under the hood of user security profiles to see if they'll actually be able to get back into their accounts if things go wrong. Instead of guessing if a user has enough backup methods, you can run a precise audit. It looks at the specific recovery vectors currently in place, such as hardware keys or backup codes, and flags where the setup is too thin. You can use it to calculate the exact gap between a user's current state and a hardened security standard. It's a direct way to move from vague security assumptions to a quantified readiness score. Whether you are checking a single account or comparing profiles against a strict target, this tool provides the data needed to prioritize which recovery factors to add next.

## Tools

### audit_account_readiness
This tool evaluates a specific user account to determine its current readiness and identify security gaps.

### calculate_readiness_gap
This tool compares existing recovery factors against a target security profile to quantify the remaining gap.

### get_factor_requirements
This tool retrieves the standard definitions and required characteristics for every type of recovery factor.

### list_user_recovery_factors
This tool provides a raw inventory of all recovery methods currently linked to a specific user.

## Prompt Examples

**Prompt:** 
```
Can you audit the readiness for account ID user_123?
```

**Response:** 
```
The audit for user_123 shows a status of 'At Risk' with a score of 45. Missing factors include 'security_key' and 'backup_codes'. It is highly recommended to set up a hardware security key immediately.
```

**Prompt:** 
```
What are the requirements for a security key factor?
```

**Response:** 
```
A security key is a high-importance, high-risk factor that provides phishing-resistant, hardware-based authentication for account recovery.
```

**Prompt:** 
```
Calculate the gap between these factors: ['recovery_email'] and ['recovery_email', 'backup_codes', 'security_key'].
```

**Response:** 
```
The gap score is 2. The missing factors are 'backup_codes' and 'security_key'. You should prioritize adding a security key first.
```

## Capabilities

### Readiness Scoring
Your agent uses this to assign a numerical value to an account's ability to recover from lockout.

### Gap Analysis
Your agent compares current user settings against a desired security standard to find missing pieces.

### Factor Inventory
Your agent pulls a list of all recovery methods currently tied to a user profile.

### Requirement Lookup
Your agent checks the specific standards and characteristics required for different recovery types.

## Use Cases

### Risk Assessment
Identify which users are most vulnerable to permanent account lockout.

### Policy Enforcement
Check if a user's recovery setup meets the company's required security profile.

### Remediation Planning
Determine which recovery factors to suggest to a user based on their specific gaps.

### Security Auditing
Run regular checks to ensure recovery redundancy across a user base.

## Benefits

- Quantifies security gaps with numerical scores.
- Identifies specific missing recovery factors like hardware keys.
- Compares current user settings against strict security targets.
- Provides a raw inventory of all active recovery methods.

## How It Works

Connect your client to Vinkius to start running security audits through your agent.

1. Connect your MCP-compatible client to Vinkius.
2. Ask your agent to audit a specific user account.
3. The agent uses the MCP to pull recovery factors and calculate scores.
4. Review the identified gaps and missing requirements provided by the agent.

## Frequently Asked Questions

**What can this MCP do?**
This MCP audits user account security to see if they have enough recovery methods to prevent permanent lockout.

**How does it identify security gaps?**
It compares the recovery factors a user actually has against a target security profile to find what is missing.

**Which clients can I use with this MCP?**
You can use this with any MCP-compatible client like Claude, Cursor, Windsurf, or VS Code.

**Can I see a list of a user's current recovery methods?**
Yes, you can use the tool to get a raw inventory of all recovery methods linked to a specific user.

**Does this MCP host the data?**
Vinkius hosts the MCP and manages the connection, so you can use it immediately after connecting your client.

**What does the readiness score represent?**
The score is a numerical value representing the strength of the recovery profile based on the diversity and security of configured factors.

**How can I see which recovery methods a user has configured?**
You can use the `list_user_recovery_factors` tool to retrieve a raw inventory of all recovery methods currently linked to a specific account.

**What is the difference between hard and soft recovery factors?**
Hard factors, like Security Keys, provide autonomous, high-security recovery. Soft factors, like Recovery Email, rely on external infrastructure or human interaction.