All servers · Government & law · Monitoring & logs · Security

Indian Cyber Regulation Register (BitScore)

io.github.nimitt-IN/india-cyber-regulations · v1.0.0

Measured by MCP Station

Description written by the publisher, not verified

Indian cyber regulation register and incident-reporting deadlines (India, US, EU), read at source.

Connect

claude mcp add --transport http india-cyber-regulations https://www.bitscore.in/mcp

{
  "mcpServers": {
    "india-cyber-regulations": {
      "url": "https://www.bitscore.in/mcp"
    }
  }
}

Tools as reported by the server

• search_instruments
  Search every cyber and data-protection instrument binding Indian regulated entities (RBI, SEBI, IRDAI, IFSCA, CERT-In, MeitY/DPDP): reference number, issue date, status, who it binds and the deadlines it sets. Filter by free text, issuer or status. Returns summaries; use get_instrument for one entry
• get_instrument
  Full register entry for one instrument by its id (from search_instruments): formal name, reference, issue date, status, who it binds, every dated deadline it sets, the regulator’s own URL and the date it was last re-read there.
• find_applicable_regulations
  Given an Indian entity class, whether it is listed and whether it handles personal data, returns the cyber and data-protection instruments that bind it, why each applies, a caution where one is commonly misapplied, and its next dated deadline. RBI classes each map to their own 2026 Directions; RRBs
• india_incident_reporting_deadlines
  Every incident-reporting clock an Indian entity owes — CERT-In six hours, the sectoral regulator (RBI, SEBI, IRDAI, IFSCA), SEBI LODR, NCIIPC, DPDP — each with its trigger, recipient, channel and source clause. Give noticed_at to get wall-clock IST due times. Clocks run in parallel; none discharges
• us_eu_incident_reporting_deadlines
  Incident-reporting clocks under SEC Form 8-K/6-K, NYDFS Part 500, the US bank 36-hour rule, HIPAA, the FTC Safeguards Rule, NIS2, DORA, GDPR and the EU Cyber Resilience Act, each from its own trigger. Give aware_at (and decided_at for materiality/classification clocks) for wall-clock due times.
• find_global_cyber_regulations
  For an organisation operating across India, the US and the EU, lists the cyber and data-protection regimes that apply, may apply (check) or are pending, with why and a caution for each. All flags default to false and sizes/sectors to none.
• sebi_cscrf_category
  Works out a SEBI regulated entity’s CSCRF category (MII, Qualified, Mid-size, Small-size, Self-certification or Exempt) from the current thresholds, and the obligations that category carries. Call with only entity_type to see which figures it needs. Boundary values the circulars leave uncategorised
• india_threat_scorecard
  Aggregate counts of publicly observed cyber threat activity affecting Indian organisations, by industry vertical and category, for one edition (latest by default). Aggregate only: no organisation is named. A vertical the source did not cover is unmeasured, not zero.
• cyber_weather_today
  Today’s global cyber threat condition (Clear, Cloudy, Showers, Storm or Severe) from BitScore’s Cyber Weather, refreshed daily at 07:30 IST: points per instrument, CISA KEV additions, EPSS risers, outlook, patch calendar, outages and three actions. Each field names its source and licence. Indicative

Tool changes

• 2026-10-20: search_instruments, get_instrument, find_applicable_regulations, india_incident_reporting_deadlines, us_eu_incident_reporting_deadlines, find_global_cyber_regulations, sebi_cscrf_category, india_threat_scorecard, cyber_weather_today
• 2026-10-16: search_instruments, get_instrument, find_applicable_regulations, india_incident_reporting_deadlines, us_eu_incident_reporting_deadlines, find_global_cyber_regulations, sebi_cscrf_category, india_threat_scorecard

Website · JSON · Text for agents · Registry updated 2026-09-28