Dora Compliance Mcp

io.github.CSOAI-ORGPublished by GitHub account CSOAI-ORGv1.4.15Updated Nov 5, 2026

DORA (EU Digital Operational Resilience Act) compliance for AI agents. 5-pillar audit, incident ...

The publisher's own server: Dora

VerifiedSTDIODesktop onlyFinanceSecurity & Monitoring

Overview

AI-generated overview

Local MCP server that helps AI assistants work through EU DORA (2022/2554) compliance: entity classification, five-pillar audits and incident reporting.

What you can do
  • Classify a financial entity against DORA scope and obligations
  • List and inspect the five DORA compliance pillars
  • Run an audit of a chosen pillar and review the findings
  • Work through ICT risk and incident classification and reporting workflows
When to use it
Useful for financial entities, compliance teams or consultants who want an assistant to structure DORA gap assessments, pillar audits and incident classification, rather than reading the regulation by hand.
Requirements
Runs locally over stdio as a Python package (pip install dora_compliance_mcp, or uvx dora-compliance-mcp). No authentication or environment variables are declared. Pay-per-call billing is optional and only activates when MEOK_PAYG_KEY is set.
Before you install
The README describes pay-per-call billing at about £0.05 per tool call once MEOK_PAYG_KEY is set, with top-ups and optional USDC payment via MEOK_X402_RECEIVER; leaving the key unset keeps behaviour unchanged. Output is measurement, not certification, so audit results should not be treated as legal compliance proof.

Installation

In SourceWeft

  1. Open Dora Compliance Mcp in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.

Other MCP clients

Follow the launch instructions in the repository.

README

Verification is free and public: signed measurement cards and live verification at https://councilof.ai — measurement, not certification.

[MCP Scorecard: 90/100]

Dora Compliance MCP

[Council of AI] [PAYG enabled] [EU AI Act] [License] [PyPI]

DORA (Regulation EU 2022/2554) compliance MCP for financial entities

DORA (Regulation EU 2022/2554) compliance MCP for financial entities. ICT risk, incident classification, reporting workflows. MIT


🚀 Quick Start

bash
# Install via pippip install dora_compliance_mcp
# Or install via Smitherynpx -y @smithery/cli@latest install dora-compliance-mcp --client claude

⚡ Pay-per-call (PAYG) — no subscription

This MCP supports universal pay-per-call billing across the MEOK compliance fleet:

bash
# One-time setupexport MEOK_PAYG_KEY="your_topup_token"
# Every tool call now deducts £0.05 from your balance.# When balance hits zero, the tool returns a top-up URL.# Works across all 7 MEOK compliance MCPs with the same token.
  • No subscription — top up once, deduct per call.
  • £0.05/call default (configurable via MEOK_PAYG_RATE_GBP).
  • USDC on Base L2 accepted — set MEOK_X402_RECEIVER and pay via stablecoin.
  • Backward-compatible — when MEOK_PAYG_KEY is unset, behaviour is unchanged.

Get a token: councilof.ai/payg (£10 / £50 / £200 top-up tiers).

✨ Features

  • MCP protocol compliant
  • Easy installation
  • Well-documented API
  • Production-ready
  • Active maintenance

📖 Documentation

🛡️ Compliance

This MCP server is built with EU AI Act compliance built-in:

  • ✅ Article 9 — Risk Management System
  • ✅ Article 13 — Transparency & Instructions for Use
  • ✅ Article 15 — Bias Detection & Testing
  • ✅ Article 26 — FRIA Support (where applicable)
  • ✅ Article 50 — AI Content Watermarking (where applicable)

Need help getting compliant? Book a free 15-min diagnostic →

🏢 Enterprise

Need custom development, SLA guarantees, or white-label deployment?

View Pricing → | Contact Sales →

🤝 Part of the MEOK Ecosystem

This server is part of the Council of AI ecosystem — 26 PyPI packages · ~public measurement tools.

DomainPurpose
councilof.aiEU AI Act compliance marketplace
safetyof.aiAI safety & monitoring
councilof.aiSovereign AI platform
cobolbridge.aiLegacy modernization

📜 License

MIT © CSOAI-ORG


Built with 💜 by Council of AI · UK Companies House 16939677

Configuration

Add to your claude_desktop_config.json (Claude Desktop) or your MCP client config:

json
{  "mcpServers": {    "dora-compliance-mcp": {      "command": "uvx",      "args": ["dora-compliance-mcp"]    }  }}

Or: pip install dora-compliance-mcp then run the dora-compliance-mcp command (stdio transport).

Examples

Once configured, ask your assistant, for example:

  • "Use classify_entity to …"
  • "Use list_pillars to …"
  • "Use audit_pillar to …"

Source: README.md at commit e76c901

Tools

0
SourceWeft has not started this package in its sandbox yet, so its tools are not known.

Version history

1
  1. v1.4.15LatestSep 16, 2026

Score

50% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 days25 pts

    Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.

  • Auth declared10 pts

    Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.

  • Tools listed15 pts

    Answer tools/list without a credential, or ship a package that starts in a sandbox without one.

  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts

Other Dora integrations