Mmcp.market

Dora MCP server

online · 100% uptime
by tooloracle.io·io.tooloracle/dora·v1.0.0
No reviews yet

DORAOracle — 15 tools for DORA Art.5-32: risk register, ICT incidents, TLPT, third-party.

C67/100grade C
Write a reviewRun it
What users say
No reviews yet
Be the first
Safety scan
C67/100

full report

Adoption
New

Little public usage data yet

Reviews

Write one

Nobody has reviewed Dora yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Dora tools (15)

write = sends, deletes, buys or posts
  • breach_checkFree

    HaveIBeenPwned breach database — check domain/company breach exposure. DORA Art. 18 incident assessment.

  • cert_advisoriesFree

    CERT-Bund security advisories — authoritative DE source for ICT threats. DORA Art. 17 threat monitoring.

  • cloud_statusFree

    Live status of AWS, GCP, Azure cloud providers. DORA Art. 28 third-party ICT risk monitoring.

  • cve_latestFree

    Latest critical CVEs — daily DORA ICT risk briefing. Filter by severity and banking relevance.

  • cve_searchFree

    Search CVEs by keyword, vendor or product. Returns CVSS scores, attack vectors, DORA pillar mapping.

  • dora_calendarFree

    DORA compliance milestones and upcoming deadlines for financial institutions. All Art. references included.

  • dora_newsFree

    EBA/DORA regulatory news for banks. Topics: general, eba, incident, third_party, testing, guidelines, bafin, swift.

  • health_checkFree

    DORAOracle server status and all backend connectivity checks.

  • incident_timelineFree

    Generate a DORA Art. 19-aligned ICT incident reporting timeline with the regulatory deadline structure. Supports - does not constitute - compliant reporting.

  • kev_checkFree

    Check if a specific CVE is in CISA KEV (actively exploited in the wild). Returns DORA incident classification guidance.

  • kev_listFree

    CISA Known Exploited Vulnerabilities — actively exploited CVEs with patch deadlines. DORA Art. 9 patch compliance.

  • mitre_techniquesFree

    MITRE ATT&CK techniques for DORA TLPT / TIBER-EU penetration testing. Maps to DORA Art. 26.

  • provider_riskFree

    DORA Art. 28 ICT third-party risk assessment: CVE history, news, GLEIF registration, contractual checklist.

  • threat_actorsFree

    Feodo Tracker: live C2 botnet servers (Emotet, QakBot, etc.). Actionable IP blocklist for DORA Art. 9.

  • tlpt_scenariosFree

    TIBER-EU threat scenarios for DORA resilience testing planning. Banking-specific attack simulations.

Public scan report

scanner v0.1.9 · 2026-09-27 · same rubric, same numbers if you re-run it

no findings
  • –Code scanremote-only server, no package to scann/a
  • Live reliabilityremote reachable in 484ms20/20
  • Tool poisoning15 tool descriptions checked15/15
  • Auth qualityopen endpoint, read-only tools10/15
  • Maintenancerepository not readable: repo not found3/15
  • Maintainer identityno repository or website to verify2/10
Overall 67/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

Install Dora in Claude Code, Cursor or VS Code

claude mcp add --transport http dora https://tooloracle.io/dora/mcp/
Add to Cursor

Dora: common questions

Is Dora MCP server safe?
With care: it is graded C, so read the findings first (67/100). Read the Dora safety report
How do I install Dora?
It runs remotely at tooloracle.io. Add it to Claude Code, Cursor, VS Code or Claude Desktop with the snippets above, or call it through the mcp.market gateway without installing anything.
Does Dora need an API key?
Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is Dora maintained?
The latest release is v1.0.0.
Is Dora up?
100% of our last 28 checks got an answer. We check remote servers about four times a day.

More from tooloracle.io →