Remote MCP server for DORA compliance: registers ICT third-party contracts and checks them against mandatory clauses, subcontracting, exit and risk criteria.
What you can do
Register and list ICT third-party contracts, with optional filters
Validate contracts against DORA Article 30 mandatory clauses, including standard and CIF variants
Map and assess subcontracting chains and evaluate exit plan readiness
Analyze Critical/Important Function contracts and find missing mandatory clauses across the portfolio
Score red-flag risk (exit risk, lock-in, jurisdiction, subcontracting gaps) and list upcoming expirations
Run AI-based deep analysis of raw contract text or a stored contract, and check server status
When to use it
Useful for financial-entity compliance, legal or procurement teams that must keep an inventory of ICT third-party contracts and test them against DORA Article 30 requirements, subcontracting rules and exit strategies.
Requirements
A remote MCP endpoint reached over streamable HTTP, typically via the mcp-remote bridge in desktop clients. No environment variables or headers are declared. A Pro or Enterprise subscription is needed for full tool access; the free tier is limited to 10 calls per day and read-only assessment tools.
Before you install
Contract text and identifiers are sent to a third-party hosted service, so check confidentiality before submitting real agreements. Registering contracts writes data to that service. Paid tiers cost money (Pro at €99/month), and the free tier is capped at 10 calls per day.
Enable the server for the chats that should use its tools.
Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.
Use with an agent
Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.
Read https://sourceweft.com/mcp/io.tooloracle%2Fcontractoracle/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.
Add or update an ICT third-party contract. Tracks all DORA Art. 30 mandatory clauses.
Parametersnotesis_cifcontract_idaudit_rightsauto_renewalcontract_endjurisdictiondata_locationexit_strategygoverning_lawnotice_periodprovider_namerequired+16 more
list_contracts
List contracts with optional filters.
Parametersis_cifproviderexpiring_days
clause_check
Validate a contract against all DORA Art. 30 mandatory clauses (standard + CIF).
Parameterscontract_idrequired
subcontracting_chain
Map and assess the subcontracting chain of a contract (RTS on subcontracting).
Parameterscontract_idrequired
exit_readiness
Evaluate exit plan readiness for a contract — Art. 28(8) exit strategies.
Parameterscontract_idrequired
cif_analysis
Analyze all Critical/Important Function contracts for enhanced Art. 30(3) requirements.
Takes no parameters.
contract_gaps
Identify missing mandatory clauses across all contracts.
Upcoming contract expirations and renewal deadlines.
Parametersdays_ahead
contract_analyze_llm
AI-powered deep analysis of contract text against DORA Art. 30(2) mandatory clauses using local Gemma 4 LLM. Provide raw contract text or a contract_id for structured analysis.
Parameterstextcontract_id
health_check
Server status.
Takes no parameters.
Version history
1
v1.0.0LatestSep 16, 2026
Score
90%
90% of the applicable checks met
How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.
Reached in the last 30 daysRequired25 pts
Auth declaredRequired10 pts
Tools listedRequired15 pts
DescriptionRequired15 pts
Logo10 pts
Documentation15 pts
License10 pts
Declare a license in the repository or the registry entry.