Governanceoracle

io.tooloraclePublished by tooloracle.ioOfficial publisherv1.0.0Updated Oct 31, 2026

GovernanceOracle - 10 governance tools: board packs, policies, attestations, evidence.

The publisher's own server: Accessoracle

VerifiedStreamable HTTPWeb executableProductivity & Workflow Security & Monitoring Business & Commerce

Server details

Identifier: io.tooloracle/governanceoracle
Transport: Streamable HTTP
Runtime: Web executable
Trust: Verified
Published: Sep 16, 2026

Security note

MCP servers receive tool arguments from a conversation and may perform external actions. Review what a server can do before you enable it, and give it only the access it needs.

The registry verified that this server's namespace belongs to tooloracle.io, which also runs its endpoint. That identifies the publisher; it does not make the server's tools safe.

SourceWeft's checks cover whether the listing is complete and the endpoint answered; they do not review the server's code or what its tools do.

Add a badge to your README

Show readers this MCP server is listed on SourceWeft. The badge links to this page.

[![Listed on SourceWeft](https://sourceweft.com/badge/mcp/io.tooloracle%2Fgovernanceoracle.svg)](https://sourceweft.com/mcp/io.tooloracle%2Fgovernanceoracle?utm_source=readme&utm_medium=badge)

Overview

AI-generated overview

Remote DORA compliance server that lets an assistant register audit findings, track remediation and exceptions, and produce board and framework review packs.

What you can do: Register and list audit findings, risks and control gaps with filters
Track remediation actions with deadlines and owners, and record risk acceptances or exceptions with expiry
View control effectiveness across DORA control domains and ICT risk KPIs such as overdue and remediation rates
Generate Management Body board packs, annual framework review evidence bundles and DORA Article 6(5) compliance output
Produce an AI-written board summary in German or English from current findings
Check server status
When to use it: Useful for teams that must run a DORA ICT risk and governance process and want an assistant to log findings, follow remediation and exceptions, and draft board or annual review material from the same data.
Requirements: A remote endpoint at tooloracle.io, reached through an mcp-remote bridge in clients such as Claude Desktop, Cursor or Windsurf. No environment variables or headers are declared. A paid Pro or Enterprise subscription is needed for full tool access; the free tier is limited to 10 calls per day and read-only assessment tools.

Before you install

The server records and changes compliance data: findings, exceptions and remediation actions are written, and board and review packs are generated from them. Full access requires a paid subscription (Pro at €99/month, Enterprise custom), so costs apply. The AI board summary is produced by a local Gemma model and should be reviewed before use. Data is sent to a third-party hosted service.

Installation

In SourceWeft

Open Governanceoracle in the dashboard and add it to a workspace.
Enable the server for the chats that should use its tools.

Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.

Use with an agent

Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.

Read https://sourceweft.com/mcp/io.tooloracle%2Fgovernanceoracle/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.

Read the install guide the agent follows

Other MCP clients

Add this to your client's mcpServers config.

{
  "mcpServers": {
    "governanceoracle": {
      "type": "http",
      "url": "https://tooloracle.io/governance/mcp/"
    }
  }
}

README

🏛️ governanceOracle

DORA Execution MCP Server — 10 tools | Part of ToolOracle

[Tools] [Status] [Tier] [Bus]

Quick Connect

json

// claude_desktop_config.json{  "mcpServers": {    "governanceoracle": {      "command": "npx",      "args": ["-y", "mcp-remote", "https://tooloracle.io/governance/mcp/"]    }  }}

// claude_desktop_config.json{  "mcpServers": {    "governanceoracle": {      "command": "npx",      "args": ["-y", "mcp-remote", "https://tooloracle.io/governance/mcp/"]    }  }}

Tools (10)

Tool	Description
`register_finding`	Register an audit finding, risk, or control gap.
`list_findings`	List findings with optional filters.
`board_report`	Generate Management Body review pack — executive summary, open findings, risk po
`framework_review`	ICT Risk Management Framework annual review — effectiveness assessment per DORA
`control_status`	Control effectiveness dashboard across all DORA control domains.
`exception_register`	View or add risk acceptances / exceptions with expiry tracking.
`action_tracker`	Track remediation actions with deadlines and ownership.
`kpi_dashboard`	ICT Risk KPIs — open findings, overdue rate, remediation rate, exception count.
`annual_review`	Annual framework review evidence bundle — checklist, stats, Art. 6(5) compliance
`health_check`	Server status.

Pricing

Note: This is a compliance oracle. Full tool access requires a Pro or Enterprise subscription. Free tier includes read-only assessment tools.

Part of ToolOracle

governanceOracle is one of 42 specialized MCP servers in the ToolOracle ecosystem — the largest collection of production-ready MCP tools for AI agents.

DORA Coverage

Related Oracles:

FeedOracle — Evidence-grade compliance data infrastructure
ToolOracle — 42 Oracles, 390+ MCP Tools

Tools

register_finding

Parametersnotesownertitlerequireddomainsourcestatusdue_dateseverityrequiredfinding_iddescriptionevidence_refrelated_article+1 more

list_findings

List findings with optional filters.

Parametersownerdomainstatusseverity

board_report

Generate Management Body review pack — executive summary, open findings, risk posture, overdue items.

Parametersperiod

framework_review

ICT Risk Management Framework annual review — effectiveness assessment per DORA area.

Takes no parameters.

control_status

Control effectiveness dashboard across all DORA control domains.

Takes no parameters.

exception_register

View or add risk acceptances / exceptions with expiry tracking.

Parametersaddtitlefinding_idaccepted_byexpiry_dateacceptance_daterisk_descriptioncompensating_controls

action_tracker

Track remediation actions with deadlines and ownership.

Parametersaddownertitledue_datepriorityfinding_id

kpi_dashboard

ICT Risk KPIs — open findings, overdue rate, remediation rate, exception count.

Takes no parameters.

annual_review

Annual framework review evidence bundle — checklist, stats, Art. 6(5) compliance.

Takes no parameters.

board_report_llm

AI-powered board executive summary using local Gemma 4 LLM. Generates narrative summary from current findings in German or English.

Parameterslanguageadditional_context

health_check

Server status.

Takes no parameters.

Version history

v1.0.0LatestSep 16, 2026

Score

90% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

Reached in the last 30 daysRequired25 pts
Auth declaredRequired10 pts
Tools listedRequired15 pts
DescriptionRequired15 pts
Logo10 pts
Documentation15 pts
License10 pts
Declare a license in the repository or the registry entry.