# Two-Factor Coverage Report AI Agent Connect

> Two-Factor Coverage Report MCP lets your AI client audit account security by comparing active MFA methods against required security standards. It identifies exactly where users fall short of their assigned protection levels, making it easy to spot vulnerabilities in your authentication setup.

## Overview
- **Category:** security
- **Price:** Free
- **Endpoint:** https://edge.vinkius.com/vk_preview_IL62lyeiYwjUyOqZPQtkokOxGJOtCrTutfN77tmo/ai-agent-connect
- **Tags:** mfa, security-audit, compliance, authentication, risk-assessment

## Description

You can use this MCP to run targeted security audits on account authentication. Instead of manually checking every user, you can ask your agent to compare active MFA methods against specific security tiers like Critical, Standard, or Basic. It maps out the relationship between what a user actually has enabled and what your security policy requires for their specific role. This makes it easy to pinpoint exactly which users are under-protected and which specific authentication methods they need to add to meet compliance. Whether you are checking a single account or looking for systemic gaps in your security posture, this MCP provides the data needed to close those holes.

## Tools

### calculate_coverage_gap
It calculates the specific deficit between an account's enabled methods and its assigned priority tier requirements.

### get_account_security_summary
This tool provides a high-level overview of an account's current MFA status and how ready they are for recovery.

### get_priority_requirements
This tool defines what constitutes full coverage for any specific priority label.

### list_available_methods
It identifies which second-factor methods a specific user can technically use based on their profile.

## Prompt Examples

**Prompt:** 
```
Give me a summary of the security status for account ID 'user_123'.
```

**Response:** 
```
Account 'user_123' is currently in the Standard tier. Enabled methods include Authenticator Apps. The recovery status is Fully Protected.
```

**Prompt:** 
```
What is the coverage gap for account 'admin_99'?
```

**Response:** 
```
Account 'admin_99' has a coverage of 50%. The missing method is Hardware Keys, which is required for the Critical tier.
```

**Prompt:** 
```
What methods are required for a Critical security tier?
```

**Response:** 
```
For the Critical tier, the required methods are Hardware Keys.
```

## Capabilities

### Security Tier Auditing
Your agent compares active MFA methods against assigned priority levels.

### Gap Identification
The AI calculates the specific difference between current settings and required standards.

### Method Availability Checks
Your agent checks which authentication methods are valid for a specific user profile.

### Status Summarization
The AI generates high-level overviews of account MFA and recovery readiness.

## Use Cases

### Compliance Verification
Check if users in the Critical tier have met all required hardware key mandates.

### Risk Assessment
Find accounts with low MFA coverage to prioritize security training or enforcement.

### User Onboarding Audits
Verify that new users have enabled the correct methods for their assigned roles.

### Security Posture Reporting
Generate summaries of MFA status across different user groups.

## Benefits

- Identifies specific missing authentication methods for different security tiers.
- Automates the comparison between user profiles and security requirements.
- Provides clear visibility into account recovery readiness.

## How It Works

Connect your client to Vinkius and start querying security data immediately.

1. Connect your MCP-compatible client to the Vinkius platform.
2. Ask your agent to pull a security summary for a specific user.
3. Request a gap calculation to see where a user fails to meet their tier requirements.
4. Use the results to guide user remediation or policy updates.

## Frequently Asked Questions

**What security tiers can I audit?**
The MCP works with Critical, Standard, and Basic security tiers to define coverage requirements.

**How does the MCP identify missing security methods?**
It uses the calculate_coverage_gap tool to compare what a user has enabled against the requirements of their assigned tier.

**Can I see which MFA methods a user is allowed to use?**
Yes, the list_available_methods tool identifies which second-factor methods are possible for a user based on their profile.

**Does this MCP work with Claude?**
Yes, you can connect this MCP to any MCP-compatible client including Claude.

**What information is in a security summary?**
The summary includes the account's MFA status and its current recovery readiness.

**How is security coverage calculated?**
Coverage is calculated by comparing the number of enabled authentication methods against the total number of methods required for the account's specific security tier.

**What are the different security tiers?**
There are three tiers: Critical (highest security, requires hardware keys), Standard (requires digital methods like apps or push), and Basic (allows legacy methods like SMS).

**Can I see which methods are missing for a specific user?**
Yes, you can use `calculate_coverage_gap` to get a detailed breakdown of missing and unavailable methods for any given account ID.