Dora

io.tooloraclePublished by tooloracle.ioOfficial publisherv1.0.0Updated Oct 25, 2026

DORAOracle — 15 tools for DORA Art.5-32: risk register, ICT incidents, TLPT, third-party.

The publisher's own server: Accessoracle

VerifiedStreamable HTTPWeb executableSecurity & MonitoringBusiness & Commerce

Overview

AI-generated overview

Dora provides 15 tools covering DORA Articles 5-32, including risk register, ICT incident, TLPT, and third-party workflows.

What you can do
Dora is a remote MCP server exposing 15 tools aligned with the EU Digital Operational Resilience Act (DORA) Articles 5-32. According to its registry description, the tools cover areas such as a risk register, ICT incidents, threat-led penetration testing (TLPT), and third-party oversight. It is reached over streamable HTTP at a hosted endpoint, so no local package is installed.
When to use it
Consider it when an assistant needs to help with DORA compliance work: tracking operational risk entries, recording or reviewing ICT incidents, organizing TLPT activities, or managing third-party and ICT vendor information. It suits teams that already work within a DORA regulatory program.
Requirements
A remote MCP client that supports streamable HTTP, pointed at the provider's hosted endpoint. No packages, environment variables, or headers are declared, and no authentication is declared in the manifest.
Before you install
The manifest declares no authentication, so it is unclear how access is controlled or who can read or change the compliance data involved. The description mentions incident and third-party records, which are typically sensitive; confirm what the hosted service stores, logs, or shares before sending real regulatory data. No tool list is published, so verify write or delete behavior before relying on it.

Installation

In SourceWeft

  1. Open Dora in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.

Use with an agent

Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.

Read https://sourceweft.com/mcp/io.tooloracle%2Fdora/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.

Read the install guide the agent follows

Other MCP clients

Add this to your client's mcpServers config.

{
  "mcpServers": {
    "dora": {
      "type": "http",
      "url": "https://tooloracle.io/dora/mcp/"
    }
  }
}

README

This repository has no README.

Tools

15

cve_latest

Latest critical CVEs — daily DORA ICT risk briefing. Filter by severity and banking relevance.

Parametersdayslimitseveritybanking_only

kev_list

CISA Known Exploited Vulnerabilities — actively exploited CVEs with patch deadlines. DORA Art. 9 patch compliance.

Parametersdayslimitvendoroverdue

kev_check

Check if a specific CVE is in CISA KEV (actively exploited in the wild). Returns DORA incident classification guidance.

Parameterscve_id

cert_advisories

CERT-Bund security advisories — authoritative DE source for ICT threats. DORA Art. 17 threat monitoring.

Parameterslimitkeyword

breach_check

HaveIBeenPwned breach database — check domain/company breach exposure. DORA Art. 18 incident assessment.

Parameterslimitdomain

threat_actors

Feodo Tracker: live C2 botnet servers (Emotet, QakBot, etc.). Actionable IP blocklist for DORA Art. 9.

Parameterslimitstatusmalware

incident_timeline

Generate a DORA Art. 19-aligned ICT incident reporting timeline with the regulatory deadline structure. Supports - does not constitute - compliant reporting.

Parameterssectorincident_timeclassification

mitre_techniques

MITRE ATT&CK techniques for DORA TLPT / TIBER-EU penetration testing. Maps to DORA Art. 26.

Parameterslimittactickeyword

tlpt_scenarios

TIBER-EU threat scenarios for DORA resilience testing planning. Banking-specific attack simulations.

Parametersfocussector

cloud_status

Live status of AWS, GCP, Azure cloud providers. DORA Art. 28 third-party ICT risk monitoring.

Parameterslimitprovider

provider_risk

DORA Art. 28 ICT third-party risk assessment: CVE history, news, GLEIF registration, contractual checklist.

Parametersprovider

dora_news

EBA/DORA regulatory news for banks. Topics: general, eba, incident, third_party, testing, guidelines, bafin, swift.

Parameterslanglimittopic

dora_calendar

DORA compliance milestones and upcoming deadlines for financial institutions. All Art. references included.

Takes no parameters.

health_check

DORAOracle server status and all backend connectivity checks.

Takes no parameters.

Version history

1
  1. v1.0.0LatestSep 16, 2026

Score

75% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 daysRequired25 pts
  • Auth declaredRequired10 pts
  • Tools listedRequired15 pts
  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts

    Declare a GitHub repository with a README, or serve resource_documentation in the OAuth protected-resource metadata.

  • License10 pts

    Declare a license in the repository or the registry entry.

Other Tooloracle integrations

Accessoracle

io.tooloracleOfficial publisher

AccessOracle is a remote MCP server with 10 tools for tracking IAM and privileged access compliance, including MFA coverage, recertification, SoD conflicts and,

Streamable HTTPWeb executable
Security & Monitoring10 toolsOct 24, 2026

Zkevidenceoracle

io.tooloracleOfficial publisher

A remote MCP server offering 14 zero-knowledge proof tools for compliance evidence, including Groth16 and PLONK.

Streamable HTTPWeb executable
Security & MonitoringNot indexed yetOct 24, 2026

Yieldoracle

io.tooloracleOfficial publisher

Remote DeFi yield intelligence server that gives an assistant access to a large pool dataset with risk-adjusted APY and RWA yield data.

Streamable HTTPWeb executable
FinanceNot indexed yetOct 24, 2026

Trustlayer

io.tooloracleOfficial publisher

A remote MCP server offering ten cross-server trust tools for signing, anchoring and verifying data.

Streamable HTTPWeb executable
Security & MonitoringNot indexed yetOct 24, 2026

Tonoracle

io.tooloracleOfficial publisher

A remote MCP server giving assistants 11 read-only TON blockchain tools for jettons, wallets, DeFi yields, protocols, stablecoins, bridges and network stats.

Streamable HTTPWeb executable
FinanceNot indexed yetOct 24, 2026