MCP Radar
Servidor MCP

dora

io.tooloracle/dora
Legal y cumplimiento Seguridad Público y accesible MCP 2026-07-28

Qué hace este MCP

Supports DORA-oriented ICT risk and compliance work with vulnerability, breach, threat, cloud-provider, incident-timeline, third-party-risk, and TLPT information.

Capacidades

Herramientas

15 herramientas
breach_check
HaveIBeenPwned breach database — check domain/company breach exposure. DORA Art. 18 incident assessment.
Esquema de entrada 
{'type': 'object', 'properties': {'limit': {'type': 'integer', 'default': 20, 'maximum': 50, 'minimum': 1, 'description': 'Max results 1-50 (default: 20)'}, 'domain': {'type': 'string', 'description': "Company domain e.g. 'meinbank.de' (optional — omit for latest breaches)"}}, 'additionalProperties': False}
cert_advisories
CERT-Bund security advisories — authoritative DE source for ICT threats. DORA Art. 17 threat monitoring.
Esquema de entrada 
{'type': 'object', 'properties': {'limit': {'type': 'integer', 'default': 15, 'maximum': 30, 'minimum': 1, 'description': 'Max results 1-30 (default: 15)'}, 'keyword': {'type': 'string', 'description': "Filter by keyword e.g. 'Windows', 'Apache', 'Cisco'"}}, 'additionalProperties': False}
cloud_status
Live status of AWS, GCP, Azure cloud providers. DORA Art. 28 third-party ICT risk monitoring.
Esquema de entrada 
{'type': 'object', 'properties': {'limit': {'type': 'integer', 'default': 10, 'description': 'Max incidents per provider (default: 10)'}, 'provider': {'type': 'string', 'description': 'Provider: aws, gcp, azure, all (default: all)'}}, 'additionalProperties': False}
cve_latest
Latest critical CVEs — daily DORA ICT risk briefing. Filter by severity and banking relevance.
Esquema de entrada 
{'type': 'object', 'properties': {'days': {'type': 'integer', 'default': 7, 'description': 'Last N days (default: 7)'}, 'limit': {'type': 'integer', 'default': 10, 'maximum': 20, 'minimum': 1, 'description': 'Max results 1-20 (default: 10)'}, 'severity': {'type': 'string', 'description': 'CRITICAL, HIGH, MEDIUM (default: CRITICAL)'}, 'banking_only': {'type': 'boolean', 'description': 'Filter to banking-relevant vendors only (default: false)'}}, 'additionalProperties': False}
cve_search
Search CVEs by keyword, vendor or product. Returns CVSS scores, attack vectors, DORA pillar mapping.
Esquema de entrada 
{'type': 'object', 'properties': {'days': {'type': 'integer', 'default': 30, 'description': 'Published within last N days (default: 30)'}, 'limit': {'type': 'integer', 'default': 10, 'maximum': 20, 'minimum': 1, 'description': 'Max results 1-20 (default: 10)'}, 'vendor': {'type': 'string', 'description': "Vendor/product e.g. 'SAP', 'Cisco', 'Microsoft Exchange'"}, 'keyword': {'type': 'string', 'description': "Search keyword e.g. 'authentication bypass', 'remote code execution'"}, 'severity': {'enum': ['CRITICAL', 'HIGH', 'MEDIUM', 'LOW'], 'type': 'string', 'description': 'CVSS severity: CRITICAL, HIGH, MEDIUM, LOW'}}, 'additionalProperties': False}
dora_calendar
DORA compliance milestones and upcoming deadlines for financial institutions. All Art. references included.
Esquema de entrada 
{'type': 'object', 'properties': {}, 'additionalProperties': False}
dora_news
EBA/DORA regulatory news for banks. Topics: general, eba, incident, third_party, testing, guidelines, bafin, swift.
Esquema de entrada 
{'type': 'object', 'properties': {'lang': {'type': 'string', 'description': 'Language: en or de (default: en)'}, 'limit': {'type': 'integer', 'default': 10, 'maximum': 20, 'minimum': 1, 'description': 'Max articles 1-20 (default: 10)'}, 'topic': {'type': 'string', 'description': 'Topic: general, eba, incident, third_party, testing, guidelines, bafin, swift, fintech'}}, 'additionalProperties': False}
health_check
DORAOracle server status and all backend connectivity checks.
Esquema de entrada 
{'type': 'object', 'properties': {}, 'additionalProperties': False}
incident_timeline
Generate a DORA Art. 19-aligned ICT incident reporting timeline with the regulatory deadline structure. Supports - does not constitute - compliant reporting.
Esquema de entrada 
{'type': 'object', 'properties': {'sector': {'type': 'string', 'description': 'Sector: banking, insurance, payment (default: banking)'}, 'incident_time': {'type': 'string', 'description': "ISO timestamp of incident e.g. '2026-03-19T14:00:00Z' (default: now)"}, 'classification': {'type': 'string', 'description': 'Incident class: major, significant, minor (default: major)'}}, 'additionalProperties': False}
kev_check
Check if a specific CVE is in CISA KEV (actively exploited in the wild). Returns DORA incident classification guidance.
Esquema de entrada 
{'type': 'object', 'properties': {'cve_id': {'type': 'string', 'description': "CVE ID to check e.g. 'CVE-2021-44228' (Log4Shell)"}}, 'additionalProperties': False}
kev_list
CISA Known Exploited Vulnerabilities — actively exploited CVEs with patch deadlines. DORA Art. 9 patch compliance.
Esquema de entrada 
{'type': 'object', 'properties': {'days': {'type': 'integer', 'default': 30, 'description': 'Added to KEV within last N days (default: 30)'}, 'limit': {'type': 'integer', 'default': 15, 'maximum': 50, 'minimum': 1, 'description': 'Max results 1-50 (default: 15)'}, 'vendor': {'type': 'string', 'description': "Filter by vendor e.g. 'Cisco', 'Microsoft', 'SAP'"}, 'overdue': {'type': 'boolean', 'description': 'Show only overdue patches (default: false)'}}, 'additionalProperties': False}
mitre_techniques
MITRE ATT&CK techniques for DORA TLPT / TIBER-EU penetration testing. Maps to DORA Art. 26.
Esquema de entrada 
{'type': 'object', 'properties': {'limit': {'type': 'integer', 'default': 10, 'maximum': 20, 'minimum': 1, 'description': 'Max results 1-20 (default: 10)'}, 'tactic': {'type': 'string', 'description': 'Filter by tactic: Initial Access, Lateral Movement, Impact, Persistence, etc.'}, 'keyword': {'type': 'string', 'description': "Search keyword e.g. 'ransomware', 'phishing', 'credential'"}}, 'additionalProperties': False}
provider_risk
DORA Art. 28 ICT third-party risk assessment: CVE history, news, GLEIF registration, contractual checklist.
Esquema de entrada 
{'type': 'object', 'properties': {'provider': {'type': 'string', 'description': "Provider name e.g. 'SAP', 'Salesforce', 'AWS', 'Temenos'"}}, 'additionalProperties': False}
threat_actors
Feodo Tracker: live C2 botnet servers (Emotet, QakBot, etc.). Actionable IP blocklist for DORA Art. 9.
Esquema de entrada 
{'type': 'object', 'properties': {'limit': {'type': 'integer', 'default': 20, 'maximum': 100, 'minimum': 1, 'description': 'Max results 1-100 (default: 20)'}, 'status': {'type': 'string', 'description': 'Filter by status: online, offline'}, 'malware': {'type': 'string', 'description': 'Filter by malware family: Emotet, QakBot, Dridex, TrickBot'}}, 'additionalProperties': False}
tlpt_scenarios
TIBER-EU threat scenarios for DORA resilience testing planning. Banking-specific attack simulations.
Esquema de entrada 
{'type': 'object', 'properties': {'focus': {'type': 'string', 'description': 'Focus area: swift, ransomware, insider, ddos, cloud (default: all)'}, 'sector': {'type': 'string', 'description': 'Sector: banking (default: banking)'}}, 'additionalProperties': False}
Historial

Cambios recientes en herramientas

Añadido
health_check
17 de September de 2026 a las 12:53
Añadido
dora_calendar
17 de September de 2026 a las 12:53
Añadido
dora_news
17 de September de 2026 a las 12:53
Añadido
provider_risk
17 de September de 2026 a las 12:53
Añadido
cloud_status
17 de September de 2026 a las 12:53
Añadido
tlpt_scenarios
17 de September de 2026 a las 12:53
Añadido
mitre_techniques
17 de September de 2026 a las 12:53
Añadido
incident_timeline
17 de September de 2026 a las 12:53
Añadido
threat_actors
17 de September de 2026 a las 12:53
Añadido
breach_check
17 de September de 2026 a las 12:53
Añadido
cert_advisories
17 de September de 2026 a las 12:53
Añadido
kev_check
17 de September de 2026 a las 12:53
Añadido
kev_list
17 de September de 2026 a las 12:53
Añadido
cve_latest
17 de September de 2026 a las 12:53
Añadido
cve_search
17 de September de 2026 a las 12:53
Descubrir

Servidores MCP similares

DataNexus MCP

com.datanexusmcp/mcp-server

Enables public-data research across domains, patents, government contracts, nonprofits, compliance registries, and software secur…

ampel

io.tooloracle/ampel

Assesses regulated entities and providers against DORA and related ESG, MiCA, and AML requirements, with contract analysis, evide…

predictionguard

io.tooloracle/predictionguard

Analyzes Polymarket and Kalshi markets for insider-trading signals, market integrity risks, sanctions and PEP exposure, conflicts…

Nist Standards

io.github.pipeworx-io/nist-standards

Searches and retrieves NIST SP 800-53 security controls and SP 800-171 CUI requirements, including requirements, guidance, and co…

Sanctions Screening

io.github.pipeworx-io/sanctions-screening

Screens names against US sanctions and export-control lists and retrieves detailed sanctions records.

Dilisense

io.github.pipeworx-io/dilisense

Screens individuals and organizations against sanctions, PEP, criminal, and adverse-watchlist data for AML and KYC checks.

Open Sanctions

io.github.pipeworx-io/open-sanctions

Looks up sanctioned and politically exposed entities, including identifiers, aliases, addresses, sanctions programs, and relation…

Sanctions Io

io.github.pipeworx-io/sanctions-io

Screens individuals and organizations in bulk against sanctions, politically exposed person, and watchlists.