Ampel MCP server

• article_statusFree

  Detailed Ampel for a specific DORA article. Each check with GREEN/YELLOW/RED conditions and evidence.

• assess_allFree

  Re-run full assessment for an entity. Recomputes Ampel statuses from all available evidence.

• audit_trailFree

  Chain-linked audit log with integrity check.

• azure_ad_checkFree

  Live Azure AD integration: MFA registration %, risky users, conditional access policies. DORA Art. 9 evidence. Requires Azure AD config in integrations_config.json.

• bafin_approve_sendwrite actionFree

  Approve BaFin report for submission (4-eyes principle). Creates signed approval evidence.

• bafin_report_draftFree

  Generate ITS 2024/1772 compliant BaFin incident report draft. All mandatory fields per DORA Art. 19/20. Preview mode — requires board approval.

• board_summaryFree

  Executive board summary: overall score, top 5 risks, overdue findings, SLA breaches, concentration risk, evidence health, owner workload. Designed for management/board reporting.

• bridge_approveFree

  Approve or reject a bridge resolution. On approval: creates signed evidence, upgrades Ampel to GREEN, logs to audit chain.

• bridge_reportFree

  Bridge gap analysis: classifies gaps by DATA/EVIDENCE/POLICY/WORKFLOW with closure path, owner, effort level.

• bridge_resolveFree

  Start bridge resolution workflow. Generates templates (Risk Acceptance, Contract Renegotiation, Concentration Policy, Exit Strategy), tracks approval process. Call bridge_approve to sign off.

• bridge_statusFree

  Check status of all bridge resolution workflows for an entity. Shows open, pending, closed, rejected.

• bus_statusFree

  Oracle Event Bus status: events, cross-refs, connected oracles.

• check_contractFree

  Check DORA Art. 30 contract clauses for a provider. Returns PASS/WARN/BLOCK with missing clauses and bridge classification.

• collect_art10Free

  Collect live Art. 10 evidence from NVD, CISA KEV, CERT-Bund. Auto-assesses.

• contract_analyzeFree

  Analyze contract against 15 DORA Art. 30 mandatory clauses. Returns compliance status per clause with confidence score, extracted text, gap reasoning, suggested fix.

• contract_statusFree

  Overview of all analyzed contracts per entity. Shows clause gaps, review status, document versions.

• contract_uploadwrite actionFree

  Upload contract text for DORA Art. 30 analysis. Creates document record with SHA-256 hash, version tracking, audit trail.

• create_entitywrite actionFree

  Register a new regulated entity.

• create_trialwrite actionFree

  Create temporary trial entity (48h) for self-service DORA assessment. No login needed.

• cross_oracle_assessFree

  Enterprise cross-oracle assessment. Runs 18 checks across CyberShield (NIS2/ISO 27001), SupplyChainOracle (LkSG/CSRD), HealthGuard (MDR/GDPR), CFOCoPilot (XRechnung), TaxOracle (DAC6), LegalTechOracle (DORA contracts). Auto-stores evidence and updates Ampel status.

• cross_regulation_checkFree

  Tag findings with cross-regulation impact (DORA + MiCA + AMLR). Shows which DORA findings also affect MiCA insider info or AMLR screening.

• cve_asset_mapFree

  Map CVE/vulnerability to internal ICT providers and systems. Auto-creates findings for critical matches. DORA Art. 10.

• dependency_graphFree

  Full provider dependency graph: providers, systems, checks, blast radius, SPOF detection.

• entity_listFree

  List all registered regulated entities.

• escalation_statusFree

  Get findings, SLA breaches, escalation status per entity.

• evidence_packFree

  Export evidence pack for article/check/entity. Pruefer-ready: evidence, assessments, findings, audit trail, signatures.

• evidence_summaryFree

  All evidence artefacts for an entity with hashes and expiry dates.

• freshness_checkwrite actionFree

  Run freshness watchdog. Expires stale evidence, downgrades GREEN->YELLOW->GREY if evidence too old.

• gap_reportFree

  DORA compliance gaps. RED/GREY/YELLOW items with priority and required actions.

• generate_reportFree

  Generate data-driven DORA Ampel PDF report. Score, gap analysis, provider register, audit trail integrity.

• generate_trial_reportFree

  Generate watermarked trial report with score, gaps, and CTA.

• health_checkFree

  Server + DB status.

• incident_flowFree

  DORA incident lifecycle: log, classify, notify (BaFin), close. Each step creates signed evidence.

• llm_clause_checkFree

  LLM-based DORA Art. 30 contract analysis. Paste contract text, get clause-by-clause PRESENT/PARTIAL/MISSING for all 15 mandatory clauses. Uses Claude API.

• onboard_entityFree

  Full entity onboarding: creates initial RED assessments for all 39 checks, collects auto-evidence from live sources, re-assesses, and returns readiness score.

• pingFree

  Quick connectivity test.

• policy_draftFree

  Generate DORA policy/framework document draft for a specific article. 8 templates available (Art. 5,6,8,10,11,17,28,30). Uses entity data for customization.

• provider_country_riskFree

  Enrich provider dependencies with OECD economic risk: GDP, unemployment, CLI per provider country. DORA Art. 28-31 relevant.

• readiness_checkFree

  Full DORA readiness score + Ampel per article. Returns GREEN/YELLOW/RED/GREY for all 26 articles, score 0-100, days until deadline.

• reg_watchdogFree

  AI Regulatory Watchdog: scrapes EBA/ESMA/BaFin/CERT-Bund for DORA updates. Returns alerts with affected articles and severity. Run daily via cron or on-demand.

• register_providerFree

  Register an ICT third-party provider for DORA Art. 28 Register of Information. Stores provider data and creates evidence.

• regulation_impactFree

  Show cross-regulation impacts for a specific DORA article. Maps DORA → MiCA + AMLR.

• retest_findingFree

  Re-test a finding: collect fresh evidence, reassess check, auto-close if GREEN. Full closed-loop.

• run_escalationwrite actionFree

  Trigger escalation engine: auto-create findings, check SLA, escalate.

• run_trial_assessmentwrite actionFree

  Run complete DORA+MiCA assessment for trial entity. Returns score, gaps, automation potential.

• score_trendFree

  Score trend over time: weekly deltas, trajectory, peer benchmark. Shows improvement or decline.

• servicenow_syncFree

  ServiceNow incident + change management sync. DORA Art. 17/21 evidence. Returns 30-day incident stats, classification, resolution rates.

• update_findingwrite actionFree

  Update finding lifecycle: claim, set remediation plan, request re-test, close, or accept risk. Status flow: open -> in_progress -> retest_pending -> closed | risk_accepted.

• whatif_providerFree

  Simulate provider failure: which articles/checks are affected, score impact, risk level.

• whatif_staleFree

  Simulate stale evidence: what happens if a check stays stale for N days.

• –Code scanremote-only server, no package to scann/a
• Live reliabilityremote reachable in 482ms20/20
• Tool poisoning50 tool descriptions checked15/15
• Auth qualityopen endpoint exposes 8 write-action tools with no auth3/15
• Maintenancerepository not readable: repo not found3/15
• Maintainer identityno repository or website to verify2/10

Ampel: common questions

Is Ampel MCP server safe?

With care: it is graded C, so read the findings first (57/100). Read the Ampel safety report

How do I install Ampel?

It runs remotely at tooloracle.io. Add it to Claude Code, Cursor, VS Code or Claude Desktop with the snippets above, or call it through the mcp.market gateway without installing anything.

Does Ampel need an API key?

Not as far as the registry entry and our scan can tell: no credentials are declared or required.

Is Ampel maintained?

The latest release is v1.0.0.

Is Ampel up?

93% of our last 28 checks got an answer. We check remote servers about four times a day.