Indian Cyber Regulation Register (BitScore)

io.github.nimitt-INPublished by GitHub account nimitt-INv1.0.0Updated Oct 25, 2026

Indian cyber regulation register and incident-reporting deadlines (India, US, EU), read at source.

The publisher's own server: Regulations.ai — Global AI Law Tracker

VerifiedStreamable HTTPWeb executableSecurity & MonitoringBusiness & Commerce

Overview

AI-generated overview

A remote MCP server that lets an assistant look up Indian cyber and data-protection regulations, incident-reporting deadlines, and global cyber threat summaries

What you can do
Search and read Indian cyber and data-protection instruments by text, issuer or status, with full register entries and deadlines. Match an Indian entity class to the regulations that bind it and its next deadline. List Indian incident-reporting clocks with triggers, recipients and IST due times. List US and EU incident-reporting clocks from SEC, NYDFS, HIPAA, NIS2, DORA, GDPR and related regimes. Check cross-border regimes and work out a SEBI entity's CSCRF category. Read aggregate India threat scorecards and a daily global cyber weather summary.
When to use it
Useful for compliance, legal and security work where someone needs to know which Indian or US/EU cyber rules apply to an organisation, what incident-reporting clocks are running, or how a SEBI entity is categorised. Also handy for a quick daily threat overview.
Requirements
Remote streamable HTTP endpoint at bitscore.in; no packages, environment variables or headers declared. No authentication is declared. Network access to the endpoint is needed.
Before you install
Results are summaries and indicative guidance, not legal advice; verify against the regulator's own source before relying on a deadline or obligation. The threat scorecard is aggregate only and an uncovered vertical is unmeasured, not zero. No credentials are requested, but queries about entity type and sector are sent to the provider.

Installation

In SourceWeft

  1. Open Indian Cyber Regulation Register (BitScore) in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.

Use with an agent

Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.

Read https://sourceweft.com/mcp/io.github.nimitt-IN%2Findia-cyber-regulations/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.

Read the install guide the agent follows

Other MCP clients

Add this to your client's mcpServers config.

{
  "mcpServers": {
    "indian-cyber-regulation-register-bitscor": {
      "type": "http",
      "url": "https://www.bitscore.in/mcp"
    }
  }
}

Tools

9

search_instruments

Search the Indian cyber regulation register

Search every cyber and data-protection instrument binding Indian regulated entities (RBI, SEBI, IRDAI, IFSCA, CERT-In, MeitY/DPDP): reference number, issue date, status, who it binds and the deadlines it sets. Filter by free text, issuer or status. Returns summaries; use get_instrument for one entry in full.

Parameterslimitqueryissuerstatus

get_instrument

Get one instrument from the register

Full register entry for one instrument by its id (from search_instruments): formal name, reference, issue date, status, who it binds, every dated deadline it sets, the regulator’s own URL and the date it was last re-read there.

Parametersidrequired

find_applicable_regulations

Which Indian cyber regulations apply to an entity

Given an Indian entity class, whether it is listed and whether it handles personal data, returns the cyber and data-protection instruments that bind it, why each applies, a caution where one is commonly misapplied, and its next dated deadline. RBI classes each map to their own 2026 Directions; RRBs and LABs have none, and the result says so.

Parameterslistedrequiredentity_classrequiredhandles_personal_datarequired

india_incident_reporting_deadlines

Indian cyber incident reporting deadlines

Every incident-reporting clock an Indian entity owes — CERT-In six hours, the sectoral regulator (RBI, SEBI, IRDAI, IFSCA), SEBI LODR, NCIIPC, DPDP — each with its trigger, recipient, channel and source clause. Give noticed_at to get wall-clock IST due times. Clocks run in parallel; none discharges another.

Parameterslistedrequiredsectorrequiredifsca_miirbi_classnbfc_layernoticed_atifsca_exemptpersonal_datarequiredprotected_systemrequiredsebi_broker_or_dp

us_eu_incident_reporting_deadlines

US and EU cyber incident reporting deadlines

Incident-reporting clocks under SEC Form 8-K/6-K, NYDFS Part 500, the US bank 36-hour rule, HIPAA, the FTC Safeguards Rule, NIS2, DORA, GDPR and the EU Cyber Resilience Act, each from its own trigger. Give aware_at (and decided_at for materiality/classification clocks) for wall-clock due times.

Parameterssecrequireddorarequiredgdprrequirednis2requiredhipaarequirednydfsrequiredus_bankrequiredaware_atdecided_atftc_safeguardsrequiredcra_manufacturerrequiredbank_service_providerrequired

find_global_cyber_regulations

Which cyber regulations apply across India, the US and the EU

For an organisation operating across India, the US and the EU, lists the cyber and data-protection regimes that apply, may apply (check) or are pending, with why and a caution for each. All flags default to false and sizes/sectors to none.

Parameterssecsizehipaanydfsus_banknis2_sectorindia_listedftc_safeguardscra_manufacturereu_personal_dataindia_operationsus_personal_data+5 more

sebi_cscrf_category

SEBI CSCRF category for a regulated entity

Works out a SEBI regulated entity’s CSCRF category (MII, Qualified, Mid-size, Small-size, Self-certification or Exempt) from the current thresholds, and the obligations that category carries. Call with only entity_type to see which figures it needs. Boundary values the circulars leave uncategorised are reported as such, not guessed.

Parametersaucaumcorpusfoliosentity_typerequiredregistered_clientscollateral_with_ccsclientele_trading_volume

india_threat_scorecard

India Cyber Threat Scorecard

Aggregate counts of publicly observed cyber threat activity affecting Indian organisations, by industry vertical and category, for one edition (latest by default). Aggregate only: no organisation is named. A vertical the source did not cover is unmeasured, not zero.

Parametersedition

cyber_weather_today

Cyber Weather today

Today’s global cyber threat condition (Clear, Cloudy, Showers, Storm or Severe) from BitScore’s Cyber Weather, refreshed daily at 07:30 IST: points per instrument, CISA KEV additions, EPSS risers, outlook, patch calendar, outages and three actions. Each field names its source and licence. Indicative, not a measure of any organisation’s risk.

Takes no parameters.

Version history

1
  1. v1.0.0LatestSep 28, 2026

Score

83% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 daysRequired25 pts
  • Auth declaredRequired10 pts
  • Tools listedRequired15 pts
  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts

    Declare a GitHub repository with a README, or serve resource_documentation in the OAuth protected-resource metadata.

  • LicenseNot applicable

    A hosted service is used under its provider's terms, so no license is expected here. This check is left out of the percentage.

Other Regulations integrations