Ampel

io.tooloraclePublished by tooloracle.ioOfficial publisherv1.0.0Updated Oct 27, 2026

AmpelOracle — 50-tool compliance traffic-light: Go/Caution/Stop signals for ESG, MiCA, AML.

The publisher's own server: Accessoracle

VerifiedStreamable HTTPWeb executableSecurity & MonitoringData & AnalyticsBusiness & Commerce

Overview

AI-generated overview

AmpelOracle is a remote compliance server that scores an entity's DORA readiness as green/yellow/red signals and produces gap, evidence and audit outputs.

What you can do
  • Score and inspect DORA readiness: full readiness score, per-article status, gap reports and re-assessment
  • Manage regulated entities and ICT third-party providers, including onboarding and provider registration
  • Collect and track evidence: live Art. 10 collection from NVD, CISA KEV and CERT-Bund, evidence summaries, freshness watchdog and evidence pack export
  • Analyse contracts against Art. 30 clauses, upload contract text with hashing, and run LLM-based clause checks
  • Handle findings, escalations, incidents and bridge resolutions with approval and audit trail
  • Report and simulate: PDF reports, board summaries, score trends, dependency graphs, what-if scenarios and cross-oracle assessments
When to use it
Useful for teams that must demonstrate DORA compliance and want an assistant to check readiness, list gaps, gather evidence and draft reports. Also suited to tracking ICT provider contracts and audit trails across entities.
Requirements
A remote streamable HTTP endpoint at tooloracle.io; no authentication, environment variables or headers are declared. Some checks need extra setup, such as Azure AD configuration in integrations_config.json, and the LLM clause check uses the Claude API.
Before you install
Tools create and change data: entities, providers, findings, approvals, incident notifications and audit entries. Some tools scrape external regulators and call the Claude API, so contract text may leave the server. No authentication is declared, so confirm who can reach the endpoint before registering real entities or evidence.

Installation

In SourceWeft

  1. Open Ampel in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.

Use with an agent

Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.

Read https://sourceweft.com/mcp/io.tooloracle%2Fampel/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.

Read the install guide the agent follows

Other MCP clients

Add this to your client's mcpServers config.

{
  "mcpServers": {
    "ampel": {
      "type": "http",
      "url": "https://tooloracle.io/ampel/mcp/"
    }
  }
}

README

This repository has no README.

Tools

50

readiness_check

Full DORA readiness score + Ampel per article. Returns GREEN/YELLOW/RED/GREY for all 26 articles, score 0-100, days until deadline.

Parametersentity_id

article_status

Detailed Ampel for a specific DORA article. Each check with GREEN/YELLOW/RED conditions and evidence.

Parametersarticleentity_id

gap_report

DORA compliance gaps. RED/GREY/YELLOW items with priority and required actions.

Parametersentity_id

evidence_summary

All evidence artefacts for an entity with hashes and expiry dates.

Parametersentity_id

collect_art10

Collect live Art. 10 evidence from NVD, CISA KEV, CERT-Bund. Auto-assesses.

Parametersentity_id

entity_list

List all registered regulated entities.

Takes no parameters.

create_entity

Register a new regulated entity.

Parametersleinameentity_typejurisdiction

audit_trail

Chain-linked audit log with integrity check.

Parameterslimitentity_id

generate_report

Generate data-driven DORA Ampel PDF report. Score, gap analysis, provider register, audit trail integrity.

Parametersformatentity_id

freshness_check

Run freshness watchdog. Expires stale evidence, downgrades GREEN->YELLOW->GREY if evidence too old.

Parametersentity_id

bridge_report

Bridge gap analysis: classifies gaps by DATA/EVIDENCE/POLICY/WORKFLOW with closure path, owner, effort level.

Parametersentity_id

register_provider

Register an ICT third-party provider for DORA Art. 28 Register of Information. Stores provider data and creates evidence.

Parametersleiservicesentity_idcriticalitycontract_endheadquartersdata_locationprovider_nameprovider_typecertificationscontract_startannual_cost_eur+1 more

check_contract

Check DORA Art. 30 contract clauses for a provider. Returns PASS/WARN/BLOCK with missing clauses and bridge classification.

Parametersis_cifentity_idcif_clausesprovider_idexit_strategystandard_clauses

assess_all

Re-run full assessment for an entity. Recomputes Ampel statuses from all available evidence.

Parametersentity_id

onboard_entity

Full entity onboarding: creates initial RED assessments for all 39 checks, collects auto-evidence from live sources, re-assesses, and returns readiness score.

Parametersentity_id

bridge_resolve

Start bridge resolution workflow. Generates templates (Risk Acceptance, Contract Renegotiation, Concentration Policy, Exit Strategy), tracks approval process. Call bridge_approve to sign off.

Parameterscheck_identity_idexpiry_days

bridge_approve

Approve or reject a bridge resolution. On approval: creates signed evidence, upgrades Ampel to GREEN, logs to audit chain.

Parametersrejectapproved_byresolution_idrejection_reason

bridge_status

Check status of all bridge resolution workflows for an entity. Shows open, pending, closed, rejected.

Parametersentity_id

reg_watchdog

AI Regulatory Watchdog: scrapes EBA/ESMA/BaFin/CERT-Bund for DORA updates. Returns alerts with affected articles and severity. Run daily via cron or on-demand.

Parametersdays_back

azure_ad_check

Live Azure AD integration: MFA registration %, risky users, conditional access policies. DORA Art. 9 evidence. Requires Azure AD config in integrations_config.json.

Parametersforce_refresh

servicenow_sync

ServiceNow incident + change management sync. DORA Art. 17/21 evidence. Returns 30-day incident stats, classification, resolution rates.

Parametersdays_back

llm_clause_check

LLM-based DORA Art. 30 contract analysis. Paste contract text, get clause-by-clause PRESENT/PARTIAL/MISSING for all 15 mandatory clauses. Uses Claude API.

Parameterscontract_textprovider_name

cross_oracle_assess

Enterprise cross-oracle assessment. Runs 18 checks across CyberShield (NIS2/ISO 27001), SupplyChainOracle (LkSG/CSRD), HealthGuard (MDR/GDPR), CFOCoPilot (XRechnung), TaxOracle (DAC6), LegalTechOracle (DORA contracts). Auto-stores evidence and updates Ampel status.

Parameterschecksentity_id

health_check

Server + DB status.

Takes no parameters.

ping

Quick connectivity test.

Takes no parameters.

bus_status

Oracle Event Bus status: events, cross-refs, connected oracles.

Parametersentity_id

escalation_status

Get findings, SLA breaches, escalation status per entity.

Parametersentity_id

run_escalation

Trigger escalation engine: auto-create findings, check SLA, escalate.

Takes no parameters.

whatif_provider

Simulate provider failure: which articles/checks are affected, score impact, risk level.

Parametersentity_idprovider_name

whatif_stale

Simulate stale evidence: what happens if a check stays stale for N days.

Parametersdayscheck_identity_id

board_summary

Executive board summary: overall score, top 5 risks, overdue findings, SLA breaches, concentration risk, evidence health, owner workload. Designed for management/board reporting.

Parametersentity_id

update_finding

Update finding lifecycle: claim, set remediation plan, request re-test, close, or accept risk. Status flow: open -> in_progress -> retest_pending -> closed | risk_accepted.

Parametersactorowneractionreasonfinding_idaccepted_byexpiry_daysremediation_plan

retest_finding

Re-test a finding: collect fresh evidence, reassess check, auto-close if GREEN. Full closed-loop.

Parametersfinding_id

score_trend

Score trend over time: weekly deltas, trajectory, peer benchmark. Shows improvement or decline.

Parametersentity_id

dependency_graph

Full provider dependency graph: providers, systems, checks, blast radius, SPOF detection.

Parametersentity_id

incident_flow

DORA incident lifecycle: log, classify, notify (BaFin), close. Each step creates signed evidence.

Parameterstitleactionseverityentity_idroot_causedescriptionincident_idreport_typeclassificationlessons_learned

evidence_pack

Export evidence pack for article/check/entity. Pruefer-ready: evidence, assessments, findings, audit trail, signatures.

Parametersarticlecheck_identity_id

provider_country_risk

Enrich provider dependencies with OECD economic risk: GDP, unemployment, CLI per provider country. DORA Art. 28-31 relevant.

Parametersentity_id

contract_upload

Upload contract text for DORA Art. 30 analysis. Creates document record with SHA-256 hash, version tracking, audit trail.

Parametersentity_idfile_namecontract_textdocument_typeprovider_name

contract_analyze

Analyze contract against 15 DORA Art. 30 mandatory clauses. Returns compliance status per clause with confidence score, extracted text, gap reasoning, suggested fix.

Parametersdocument_id

contract_status

Overview of all analyzed contracts per entity. Shows clause gaps, review status, document versions.

Parametersentity_id

cross_regulation_check

Tag findings with cross-regulation impact (DORA + MiCA + AMLR). Shows which DORA findings also affect MiCA insider info or AMLR screening.

Parametersentity_id

regulation_impact

Show cross-regulation impacts for a specific DORA article. Maps DORA → MiCA + AMLR.

Parametersdora_article

bafin_report_draft

Generate ITS 2024/1772 compliant BaFin incident report draft. All mandatory fields per DORA Art. 19/20. Preview mode — requires board approval.

Parameterstitleentity_idroot_causedescriptionincident_idremediationreport_typeclassificationaffected_clientsaffected_services

bafin_approve_send

Approve BaFin report for submission (4-eyes principle). Creates signed approval evidence.

Parametersentity_idreport_idapprover_nameapprover_role

cve_asset_map

Map CVE/vulnerability to internal ICT providers and systems. Auto-creates findings for critical matches. DORA Art. 10.

Parameterscve_idvendorentity_id

policy_draft

Generate DORA policy/framework document draft for a specific article. 8 templates available (Art. 5,6,8,10,11,17,28,30). Uses entity data for customization.

Parametersentity_iddora_article

create_trial

Create temporary trial entity (48h) for self-service DORA assessment. No login needed.

Parametersprovidersentity_nameentity_typejurisdiction

run_trial_assessment

Run complete DORA+MiCA assessment for trial entity. Returns score, gaps, automation potential.

Parameterstrial_identity_id

generate_trial_report

Generate watermarked trial report with score, gaps, and CTA.

Parameterstrial_identity_id

Version history

1
  1. v1.0.0LatestSep 16, 2026

Score

75% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 daysRequired25 pts
  • Auth declaredRequired10 pts
  • Tools listedRequired15 pts
  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts

    Declare a GitHub repository with a README, or serve resource_documentation in the OAuth protected-resource metadata.

  • License10 pts

    Declare a license in the repository or the registry entry.

Other Tooloracle integrations

Accessoracle

io.tooloracleOfficial publisher

AccessOracle is a remote MCP server with 10 tools for tracking IAM and privileged access compliance, including MFA coverage, recertification, SoD conflicts and,

Streamable HTTPWeb executable
Security & Monitoring10 toolsOct 24, 2026

Zkevidenceoracle

io.tooloracleOfficial publisher

A remote MCP server offering 14 zero-knowledge proof tools for compliance evidence, including Groth16 and PLONK.

Streamable HTTPWeb executable
Security & MonitoringNot indexed yetOct 24, 2026

Yieldoracle

io.tooloracleOfficial publisher

Remote DeFi yield intelligence server that gives an assistant access to a large pool dataset with risk-adjusted APY and RWA yield data.

Streamable HTTPWeb executable
FinanceNot indexed yetOct 24, 2026

Trustlayer

io.tooloracleOfficial publisher

A remote MCP server offering ten cross-server trust tools for signing, anchoring and verifying data.

Streamable HTTPWeb executable
Security & MonitoringNot indexed yetOct 24, 2026

Tonoracle

io.tooloracleOfficial publisher

A remote MCP server giving assistants 11 read-only TON blockchain tools for jettons, wallets, DeFi yields, protocols, stablecoins, bridges and network stats.

Streamable HTTPWeb executable
FinanceNot indexed yetOct 24, 2026