{"name":"io.tooloracle/dora","slug":"tooloracle-dora","title":null,"description":"DORAOracle — 15 tools for DORA Art.5-32: risk register, ICT incidents, TLPT, third-party.","url":"https://mcp.market/server/tooloracle-dora","rating":null,"grade":"C","score":67,"certified":false,"status":"active","category":"other","tags":[],"presence":{"score":5,"stars":null,"forks":null,"downloads_week":null,"last_push_at":null,"license":null},"uptime":{"percent":100,"checks":28,"ok":28,"last_checked_at":"2026-10-13T09:00:24.101Z","last_ok_at":"2026-10-13T09:00:24.101Z","latency_ms":132},"claimed":false,"transport":"remote","callable_via_gateway":true,"default_price_micros":0,"repository":"https://github.com/ToolOracle/dora","website":null,"version":"1.0.0","remotes":[{"type":"streamable-http","url":"https://tooloracle.io/dora/mcp/"}],"packages":[],"tools":[{"name":"breach_check","description":"HaveIBeenPwned breach database — check domain/company breach exposure. DORA Art. 18 incident assessment.","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{"domain":{"type":"string","description":"Company domain e.g. 'meinbank.de' (optional — omit for latest breaches)"},"limit":{"type":"integer","description":"Max results 1-50 (default: 20)","default":20,"minimum":1,"maximum":50}},"additionalProperties":false}},{"name":"cert_advisories","description":"CERT-Bund security advisories — authoritative DE source for ICT threats. DORA Art. 17 threat monitoring.","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{"keyword":{"type":"string","description":"Filter by keyword e.g. 'Windows', 'Apache', 'Cisco'"},"limit":{"type":"integer","description":"Max results 1-30 (default: 15)","default":15,"minimum":1,"maximum":30}},"additionalProperties":false}},{"name":"cloud_status","description":"Live status of AWS, GCP, Azure cloud providers. DORA Art. 28 third-party ICT risk monitoring.","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{"provider":{"type":"string","description":"Provider: aws, gcp, azure, all (default: all)"},"limit":{"type":"integer","description":"Max incidents per provider (default: 10)","default":10}},"additionalProperties":false}},{"name":"cve_latest","description":"Latest critical CVEs — daily DORA ICT risk briefing. Filter by severity and banking relevance.","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{"severity":{"type":"string","description":"CRITICAL, HIGH, MEDIUM (default: CRITICAL)"},"days":{"type":"integer","description":"Last N days (default: 7)","default":7},"limit":{"type":"integer","description":"Max results 1-20 (default: 10)","default":10,"minimum":1,"maximum":20},"banking_only":{"type":"boolean","description":"Filter to banking-relevant vendors only (default: false)"}},"additionalProperties":false}},{"name":"cve_search","description":"Search CVEs by keyword, vendor or product. Returns CVSS scores, attack vectors, DORA pillar mapping.","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{"keyword":{"type":"string","description":"Search keyword e.g. 'authentication bypass', 'remote code execution'"},"vendor":{"type":"string","description":"Vendor/product e.g. 'SAP', 'Cisco', 'Microsoft Exchange'"},"severity":{"type":"string","description":"CVSS severity: CRITICAL, HIGH, MEDIUM, LOW","enum":["CRITICAL","HIGH","MEDIUM","LOW"]},"days":{"type":"integer","description":"Published within last N days (default: 30)","default":30},"limit":{"type":"integer","description":"Max results 1-20 (default: 10)","default":10,"minimum":1,"maximum":20}},"additionalProperties":false}},{"name":"dora_calendar","description":"DORA compliance milestones and upcoming deadlines for financial institutions. All Art. references included.","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{},"additionalProperties":false}},{"name":"dora_news","description":"EBA/DORA regulatory news for banks. Topics: general, eba, incident, third_party, testing, guidelines, bafin, swift.","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{"topic":{"type":"string","description":"Topic: general, eba, incident, third_party, testing, guidelines, bafin, swift, fintech"},"lang":{"type":"string","description":"Language: en or de (default: en)"},"limit":{"type":"integer","description":"Max articles 1-20 (default: 10)","default":10,"minimum":1,"maximum":20}},"additionalProperties":false}},{"name":"health_check","description":"DORAOracle server status and all backend connectivity checks.","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{},"additionalProperties":false}},{"name":"incident_timeline","description":"Generate a DORA Art. 19-aligned ICT incident reporting timeline with the regulatory deadline structure. Supports - does not constitute - compliant reporting.","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{"incident_time":{"type":"string","description":"ISO timestamp of incident e.g. '2026-03-19T14:00:00Z' (default: now)"},"classification":{"type":"string","description":"Incident class: major, significant, minor (default: major)"},"sector":{"type":"string","description":"Sector: banking, insurance, payment (default: banking)"}},"additionalProperties":false}},{"name":"kev_check","description":"Check if a specific CVE is in CISA KEV (actively exploited in the wild). Returns DORA incident classification guidance.","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{"cve_id":{"type":"string","description":"CVE ID to check e.g. 'CVE-2021-44228' (Log4Shell)"}},"additionalProperties":false}},{"name":"kev_list","description":"CISA Known Exploited Vulnerabilities — actively exploited CVEs with patch deadlines. DORA Art. 9 patch compliance.","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{"vendor":{"type":"string","description":"Filter by vendor e.g. 'Cisco', 'Microsoft', 'SAP'"},"days":{"type":"integer","description":"Added to KEV within last N days (default: 30)","default":30},"limit":{"type":"integer","description":"Max results 1-50 (default: 15)","default":15,"minimum":1,"maximum":50},"overdue":{"type":"boolean","description":"Show only overdue patches (default: false)"}},"additionalProperties":false}},{"name":"mitre_techniques","description":"MITRE ATT&CK techniques for DORA TLPT / TIBER-EU penetration testing. Maps to DORA Art. 26.","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{"tactic":{"type":"string","description":"Filter by tactic: Initial Access, Lateral Movement, Impact, Persistence, etc."},"keyword":{"type":"string","description":"Search keyword e.g. 'ransomware', 'phishing', 'credential'"},"limit":{"type":"integer","description":"Max results 1-20 (default: 10)","default":10,"minimum":1,"maximum":20}},"additionalProperties":false}},{"name":"provider_risk","description":"DORA Art. 28 ICT third-party risk assessment: CVE history, news, GLEIF registration, contractual checklist.","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{"provider":{"type":"string","description":"Provider name e.g. 'SAP', 'Salesforce', 'AWS', 'Temenos'"}},"additionalProperties":false}},{"name":"threat_actors","description":"Feodo Tracker: live C2 botnet servers (Emotet, QakBot, etc.). Actionable IP blocklist for DORA Art. 9.","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{"malware":{"type":"string","description":"Filter by malware family: Emotet, QakBot, Dridex, TrickBot"},"status":{"type":"string","description":"Filter by status: online, offline"},"limit":{"type":"integer","description":"Max results 1-100 (default: 20)","default":20,"minimum":1,"maximum":100}},"additionalProperties":false}},{"name":"tlpt_scenarios","description":"TIBER-EU threat scenarios for DORA resilience testing planning. Banking-specific attack simulations.","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{"sector":{"type":"string","description":"Sector: banking (default: banking)"},"focus":{"type":"string","description":"Focus area: swift, ransomware, insider, ddos, cloud (default: all)"}},"additionalProperties":false}}],"scan":{"score":67,"grade":"C","scanned_at":"2026-09-27T21:47:09.676Z","report":{"scannerVersion":"0.1.9","scannedAt":"2026-09-27T21:47:09.581Z","components":{"code":{"score":-1,"max":25,"notes":["remote-only server, no package to scan"]},"reliability":{"score":20,"max":20,"notes":["remote reachable in 484ms"]},"poisoning":{"score":15,"max":15,"notes":["15 tool descriptions checked"]},"auth":{"score":10,"max":15,"notes":["open endpoint, read-only tools"]},"maintenance":{"score":3,"max":15,"notes":["repository not readable: repo not found"]},"identity":{"score":2,"max":10,"notes":["no repository or website to verify"]}},"findings":[],"inputs":{"probes":[{"url":"https://tooloracle.io/dora/mcp/","reachable":true,"authRequired":false,"latencyMs":484,"serverInfo":{"name":"DORAOracle","version":"1.0.0"}}],"packages":[],"repo":{"found":false,"owner":"ToolOracle","repo":"dora","error":"repo not found"},"icon":{"url":"https://tooloracle.io/favicon.ico","source":"site","width":16,"height":16},"presence":{"stars":null,"forks":null,"downloadsWeek":null,"license":null,"lastPushAt":null,"score":5}}}},"grade_history":[],"reviews":[]}