All servers · Images & design · Security · Monitoring & logs

io.tooloracle/ampel

io.tooloracle/ampel · v1.0.0

Measured by MCP Station

Description written by the publisher, not verified

AmpelOracle — 50-tool compliance traffic-light: Go/Caution/Stop signals for ESG, MiCA, AML.

Connect

claude mcp add --transport http ampel https://tooloracle.io/ampel/mcp/

{
  "mcpServers": {
    "ampel": {
      "url": "https://tooloracle.io/ampel/mcp/"
    }
  }
}

Tools as reported by the server

• readiness_check
  Full DORA readiness score + Ampel per article. Returns GREEN/YELLOW/RED/GREY for all 26 articles, score 0-100, days until deadline.
• article_status
  Detailed Ampel for a specific DORA article. Each check with GREEN/YELLOW/RED conditions and evidence.
• gap_report
  DORA compliance gaps. RED/GREY/YELLOW items with priority and required actions.
• evidence_summary
  All evidence artefacts for an entity with hashes and expiry dates.
• collect_art10
  Collect live Art. 10 evidence from NVD, CISA KEV, CERT-Bund. Auto-assesses.
• entity_list
  List all registered regulated entities.
• create_entity
  Register a new regulated entity.
• audit_trail
  Chain-linked audit log with integrity check.
• generate_report
  Generate data-driven DORA Ampel PDF report. Score, gap analysis, provider register, audit trail integrity.
• freshness_check
  Run freshness watchdog. Expires stale evidence, downgrades GREEN->YELLOW->GREY if evidence too old.
• bridge_report
  Bridge gap analysis: classifies gaps by DATA/EVIDENCE/POLICY/WORKFLOW with closure path, owner, effort level.
• register_provider
  Register an ICT third-party provider for DORA Art. 28 Register of Information. Stores provider data and creates evidence.
• check_contract
  Check DORA Art. 30 contract clauses for a provider. Returns PASS/WARN/BLOCK with missing clauses and bridge classification.
• assess_all
  Re-run full assessment for an entity. Recomputes Ampel statuses from all available evidence.
• onboard_entity
  Full entity onboarding: creates initial RED assessments for all 39 checks, collects auto-evidence from live sources, re-assesses, and returns readiness score.
• bridge_resolve
  Start bridge resolution workflow. Generates templates (Risk Acceptance, Contract Renegotiation, Concentration Policy, Exit Strategy), tracks approval process. Call bridge_approve to sign off.
• bridge_approve
  Approve or reject a bridge resolution. On approval: creates signed evidence, upgrades Ampel to GREEN, logs to audit chain.
• bridge_status
  Check status of all bridge resolution workflows for an entity. Shows open, pending, closed, rejected.
• reg_watchdog
  AI Regulatory Watchdog: scrapes EBA/ESMA/BaFin/CERT-Bund for DORA updates. Returns alerts with affected articles and severity. Run daily via cron or on-demand.
• azure_ad_check
  Live Azure AD integration: MFA registration %, risky users, conditional access policies. DORA Art. 9 evidence. Requires Azure AD config in integrations_config.json.
• servicenow_sync
  ServiceNow incident + change management sync. DORA Art. 17/21 evidence. Returns 30-day incident stats, classification, resolution rates.
• llm_clause_check
  LLM-based DORA Art. 30 contract analysis. Paste contract text, get clause-by-clause PRESENT/PARTIAL/MISSING for all 15 mandatory clauses. Uses Claude API.
• cross_oracle_assess
  Enterprise cross-oracle assessment. Runs 18 checks across CyberShield (NIS2/ISO 27001), SupplyChainOracle (LkSG/CSRD), HealthGuard (MDR/GDPR), CFOCoPilot (XRechnung), TaxOracle (DAC6), LegalTechOracle (DORA contracts). Auto-stores evidence and updates Ampel status.
• health_check
  Server + DB status.
• ping
  Quick connectivity test.
• bus_status
  Oracle Event Bus status: events, cross-refs, connected oracles.
• escalation_status
  Get findings, SLA breaches, escalation status per entity.
• run_escalation
  Trigger escalation engine: auto-create findings, check SLA, escalate.
• whatif_provider
  Simulate provider failure: which articles/checks are affected, score impact, risk level.
• whatif_stale
  Simulate stale evidence: what happens if a check stays stale for N days.
• board_summary
  Executive board summary: overall score, top 5 risks, overdue findings, SLA breaches, concentration risk, evidence health, owner workload. Designed for management/board reporting.
• update_finding
  Update finding lifecycle: claim, set remediation plan, request re-test, close, or accept risk. Status flow: open -> in_progress -> retest_pending -> closed | risk_accepted.
• retest_finding
  Re-test a finding: collect fresh evidence, reassess check, auto-close if GREEN. Full closed-loop.
• score_trend
  Score trend over time: weekly deltas, trajectory, peer benchmark. Shows improvement or decline.
• dependency_graph
  Full provider dependency graph: providers, systems, checks, blast radius, SPOF detection.
• incident_flow
  DORA incident lifecycle: log, classify, notify (BaFin), close. Each step creates signed evidence.
• evidence_pack
  Export evidence pack for article/check/entity. Pruefer-ready: evidence, assessments, findings, audit trail, signatures.
• provider_country_risk
  Enrich provider dependencies with OECD economic risk: GDP, unemployment, CLI per provider country. DORA Art. 28-31 relevant.
• contract_upload
  Upload contract text for DORA Art. 30 analysis. Creates document record with SHA-256 hash, version tracking, audit trail.
• contract_analyze
  Analyze contract against 15 DORA Art. 30 mandatory clauses. Returns compliance status per clause with confidence score, extracted text, gap reasoning, suggested fix.
• contract_status
  Overview of all analyzed contracts per entity. Shows clause gaps, review status, document versions.
• cross_regulation_check
  Tag findings with cross-regulation impact (DORA + MiCA + AMLR). Shows which DORA findings also affect MiCA insider info or AMLR screening.
• regulation_impact
  Show cross-regulation impacts for a specific DORA article. Maps DORA → MiCA + AMLR.
• bafin_report_draft
  Generate ITS 2024/1772 compliant BaFin incident report draft. All mandatory fields per DORA Art. 19/20. Preview mode — requires board approval.
• bafin_approve_send
  Approve BaFin report for submission (4-eyes principle). Creates signed approval evidence.
• cve_asset_map
  Map CVE/vulnerability to internal ICT providers and systems. Auto-creates findings for critical matches. DORA Art. 10.
• policy_draft
  Generate DORA policy/framework document draft for a specific article. 8 templates available (Art. 5,6,8,10,11,17,28,30). Uses entity data for customization.
• create_trial
  Create temporary trial entity (48h) for self-service DORA assessment. No login needed.
• run_trial_assessment
  Run complete DORA+MiCA assessment for trial entity. Returns score, gaps, automation potential.
• generate_trial_report
  Generate watermarked trial report with score, gaps, and CTA.

Repository · JSON · Text for agents · Registry updated 2026-05-07