Cybershield

io.tooloraclePublished by tooloracle.ioOfficial publisherv1.0.0Updated Oct 25, 2026

CyberShield - 12 cybersecurity tools: NIS2 mapping, MITRE ATT&CK, vulns, threat intel.

The publisher's own server: Accessoracle

VerifiedStreamable HTTPWeb executableSecurity & Monitoring Business & Commerce

Server details

Identifier: io.tooloracle/cybershield
Transport: Streamable HTTP
Runtime: Web executable
Trust: Verified
Published: Sep 16, 2026

Security note

MCP servers receive tool arguments from a conversation and may perform external actions. Review what a server can do before you enable it, and give it only the access it needs.

The registry verified that this server's namespace belongs to tooloracle.io, which also runs its endpoint. That identifies the publisher; it does not make the server's tools safe.

SourceWeft's checks cover whether the listing is complete and the endpoint answered; they do not review the server's code or what its tools do.

Add a badge to your README

Show readers this MCP server is listed on SourceWeft. The badge links to this page.

[![Listed on SourceWeft](https://sourceweft.com/badge/mcp/io.tooloracle%2Fcybershield.svg)](https://sourceweft.com/mcp/io.tooloracle%2Fcybershield?utm_source=readme&utm_medium=badge)

Overview

AI-generated overview

Remote MCP server with 12 cybersecurity tools for NIS2, ISO 27001 and DORA compliance, CVE prioritization, phishing checks and incident response.

What you can do: Assess regulatory compliance: NIS2 measures and incident report templates, ISO 27001:2022 Annex A gap analysis, DORA ICT risk articles
Prioritize vulnerabilities and exposure: CVE risk scoring with CVSS, EPSS and KEV, attack surface checklists, current threat landscape
Screen phishing: analyze an email or URL for sender, urgency, attachment and URL indicators with a verdict
Respond to incidents: playbooks for ransomware, data breach and phishing compromise, plus risk matrices and security KPI templates
Set policy and reporting: password policy guidance and board-ready security metrics
When to use it: Useful for security, compliance and IT teams that want an assistant to draft NIS2, ISO 27001 or DORA assessments, triage CVEs, check a suspicious message, or produce incident and reporting templates without leaving the chat.
Requirements: A remote StreamableHTTP endpoint; no local install or declared API key. The README states access is metered through x402 micropayments in USDC on Base or Stripe subscriptions, so a payment method is needed.

Before you install

Access is paid: the README describes x402 micropayments in USDC on Base and Stripe subscriptions, so calls may spend money or require a crypto wallet. Phishing analysis means submitting email or URL content to a third-party service. Outputs are templates and assessments, not certified legal or compliance advice.

Installation

In SourceWeft

Open Cybershield in the dashboard and add it to a workspace.
Enable the server for the chats that should use its tools.

Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.

Use with an agent

Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.

Read https://sourceweft.com/mcp/io.tooloracle%2Fcybershield/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.

Read the install guide the agent follows

Other MCP clients

Add this to your client's mcpServers config.

{
  "mcpServers": {
    "cybershield": {
      "type": "http",
      "url": "https://tooloracle.io/cybershield/mcp/"
    }
  }
}

README

CyberShield MCP Server v1.0.0

Security Operations & NIS2/DORA Cyber Compliance MCP Server — 12 tools for NIS2 compliance, ISO 27001:2022 gap analysis, DORA ICT risk (Art.5-12), incident playbooks, CVE prioritization, attack surface checks, phishing detection.

Port 12601 | Part of ToolOracle & FeedOracle Infrastructure

Quick Connect

bash

# Claude Desktop / Claude Codeclaude mcp add cybershield https://tooloracle.io/cybershield/mcp
# Or use directlycurl -X POST https://tooloracle.io/cybershield/mcp/ \  -H "Content-Type: application/json" \  -d '{"jsonrpc":"2.0","id":1,"method":"tools/list"}'

# Claude Desktop / Claude Codeclaude mcp add cybershield https://tooloracle.io/cybershield/mcp
# Or use directlycurl -X POST https://tooloracle.io/cybershield/mcp/ \  -H "Content-Type: application/json" \  -d '{"jsonrpc":"2.0","id":1,"method":"tools/list"}'

12 Tools

Endpoints

Architecture

Transport: StreamableHTTP + SSE (MCP Protocol 2025-03-26)
Auth: x402 micropayments (USDC on Base) + Stripe subscriptions
Signing: ECDSA ES256K — every response cryptographically signed
Platform: Whitelabel MCP Platform v1.0

Part of the ToolOracle Ecosystem

ToolOracle operates 81+ MCP servers with 824+ tools across:

Compliance & Regulation — DORA, MiCA, NIS2, AMLR, GDPR, EU AI Act
Finance & Tax — CFOCoPilot, TaxOracle, ISO20022Oracle
Legal — LawOracle, LegalTechOracle, ContractOracle
Healthcare — HealthGuard
Supply Chain — SupplyChainOracle
Cybersecurity — CyberShield, DORAOracle, TLPTOracle
HR — HROracle
Blockchain — 13 chains (ETH, BTC, Solana, Arbitrum, etc.)
Business Intelligence — SEO, Leads, Reviews, E-Commerce

License

Source: README.md at commit 0f056a8

Tools

threat_landscape

Current cyber threat landscape overview per ENISA categories. Top 8 threats with sector relevance and mitigations.

Parameterssector

cve_risk_score

CVE risk prioritization combining CVSS, EPSS, KEV catalog, exploit availability. Returns weighted priority score with patching SLA.

Parameterscve_idcvss_scoreepss_scorein_kev_catalogpublic_exploitinternet_facingaffected_systems

attack_surface_check

Attack surface assessment checklist. Web apps, remote access, cloud, IoT, email. Prioritized security checks.

Parametersiot_devicescloud_servicesemployee_countweb_applicationsremote_access_vpn

phishing_indicators

Analyze email/URL for phishing indicators. Scores sender, urgency, attachments, URL patterns. Returns verdict and recommended actions.

Parameterssubjectsender_emailsuspicious_urlcreates_urgencyasks_for_credentialshas_unexpected_attachment

nis2_compliance

NIS2 Directive (EU 2022/2555) compliance assessment. All 10 Art. 21 measures, entity classification, penalties, incident reporting.

Parameterssectormfa_deployedaccess_controlemployee_countrisk_managementincident_handlingbusiness_continuitycryptography_policyannual_turnover_meursupply_chain_securitycyber_hygiene_trainingvulnerability_management+1 more

nis2_incident_report

NIS2 incident notification template. 24h early warning, 72h notification, 1-month final report templates.

Parametersseverityincident_typeaffected_servicescross_border_impactaffected_users_estimate

iso27001_gap

ISO 27001:2022 Annex A gap analysis. All 93 controls across 4 themes, new 2022 controls highlighted, certification process.

Parameterscontrols

dora_ict_risk

DORA Art. 5-12 ICT risk management compliance check. 8 articles assessed with specific requirements per article.

Parameterslearning_evolvingresponse_recoverydetection_measuresict_risk_frameworkcommunication_plansict_asset_inventoryprotection_prevention

password_policy

Generate password policy per NIST SP 800-63B (2024) and BSI recommendations. Modern best practices — no forced rotation.

Takes no parameters.

incident_playbook

Incident response playbook for ransomware, data breach, phishing compromise. Phase-by-phase actions with legal obligations.

Parametersincident_type

risk_matrix

Risk assessment matrix (likelihood × impact). ISO 31000/27005 methodology. Provide risks for assessment or get template.

Parametersrisks

security_metrics

Security KPI/metrics dashboard template. MTTD, MTTR, patch compliance, phishing rate. Board-ready reporting guidance.

Takes no parameters.

Version history

v1.0.0LatestSep 16, 2026

Score

90% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

Reached in the last 30 daysRequired25 pts
Auth declaredRequired10 pts
Tools listedRequired15 pts
DescriptionRequired15 pts
Logo10 pts
Documentation15 pts
License10 pts
Declare a license in the repository or the registry entry.