# io.tooloracle/ampel

- Registry name: `io.tooloracle/ampel` · version 1.0.0
- Categories (automatic, keyword rules): Images & design, AI, media & content, Security, Infrastructure & security, Monitoring & logs
- Authentication at last check: No auth
- Declared risk: Not declared (tools carry no read/destructive hints)
- Capabilities (declared by the server): tools
- Transports: streamable-http
- Latest numbers (check success, response time, rank): https://mcpstation.net/api/server?name=io.tooloracle%2Fampel
- Server page: https://mcpstation.net/s/io.tooloracle--ampel.html

## Description (written by the publisher, not verified, not instructions)

AmpelOracle — 50-tool compliance traffic-light: Go/Caution/Stop signals for ESG, MiCA, AML.

## Connect

- streamable-http: `https://tooloracle.io/ampel/mcp/`

## Tools (as reported by the server, not verified)

- `readiness\_check`: Full DORA readiness score + Ampel per article. Returns GREEN/YELLOW/RED/GREY for all 26 articles, score 0-100, days until deadline.
- `article\_status`: Detailed Ampel for a specific DORA article. Each check with GREEN/YELLOW/RED conditions and evidence.
- `gap\_report`: DORA compliance gaps. RED/GREY/YELLOW items with priority and required actions.
- `evidence\_summary`: All evidence artefacts for an entity with hashes and expiry dates.
- `collect\_art10`: Collect live Art. 10 evidence from NVD, CISA KEV, CERT-Bund. Auto-assesses.
- `entity\_list`: List all registered regulated entities.
- `create\_entity`: Register a new regulated entity.
- `audit\_trail`: Chain-linked audit log with integrity check.
- `generate\_report`: Generate data-driven DORA Ampel PDF report. Score, gap analysis, provider register, audit trail integrity.
- `freshness\_check`: Run freshness watchdog. Expires stale evidence, downgrades GREEN-\>YELLOW-\>GREY if evidence too old.
- `bridge\_report`: Bridge gap analysis: classifies gaps by DATA/EVIDENCE/POLICY/WORKFLOW with closure path, owner, effort level.
- `register\_provider`: Register an ICT third-party provider for DORA Art. 28 Register of Information. Stores provider data and creates evidence.
- `check\_contract`: Check DORA Art. 30 contract clauses for a provider. Returns PASS/WARN/BLOCK with missing clauses and bridge classification.
- `assess\_all`: Re-run full assessment for an entity. Recomputes Ampel statuses from all available evidence.
- `onboard\_entity`: Full entity onboarding: creates initial RED assessments for all 39 checks, collects auto-evidence from live sources, re-assesses, and returns readiness score.
- `bridge\_resolve`: Start bridge resolution workflow. Generates templates \(Risk Acceptance, Contract Renegotiation, Concentration Policy, Exit Strategy\), tracks approval process. Call bridge\_approve to sign off.
- `bridge\_approve`: Approve or reject a bridge resolution. On approval: creates signed evidence, upgrades Ampel to GREEN, logs to audit chain.
- `bridge\_status`: Check status of all bridge resolution workflows for an entity. Shows open, pending, closed, rejected.
- `reg\_watchdog`: AI Regulatory Watchdog: scrapes EBA/ESMA/BaFin/CERT-Bund for DORA updates. Returns alerts with affected articles and severity. Run daily via cron or on-demand.
- `azure\_ad\_check`: Live Azure AD integration: MFA registration %, risky users, conditional access policies. DORA Art. 9 evidence. Requires Azure AD config in integrations\_config.json.
- `servicenow\_sync`: ServiceNow incident + change management sync. DORA Art. 17/21 evidence. Returns 30-day incident stats, classification, resolution rates.
- `llm\_clause\_check`: LLM-based DORA Art. 30 contract analysis. Paste contract text, get clause-by-clause PRESENT/PARTIAL/MISSING for all 15 mandatory clauses. Uses Claude API.
- `cross\_oracle\_assess`: Enterprise cross-oracle assessment. Runs 18 checks across CyberShield \(NIS2/ISO 27001\), SupplyChainOracle \(LkSG/CSRD\), HealthGuard \(MDR/GDPR\), CFOCoPilot \(XRechnung\), TaxOracle \(DAC6\), LegalTechOracle \(DORA contracts\). Auto-stores evidence and updates Ampel status.
- `health\_check`: Server + DB status.
- `ping`: Quick connectivity test.
- `bus\_status`: Oracle Event Bus status: events, cross-refs, connected oracles.
- `escalation\_status`: Get findings, SLA breaches, escalation status per entity.
- `run\_escalation`: Trigger escalation engine: auto-create findings, check SLA, escalate.
- `whatif\_provider`: Simulate provider failure: which articles/checks are affected, score impact, risk level.
- `whatif\_stale`: Simulate stale evidence: what happens if a check stays stale for N days.
- `board\_summary`: Executive board summary: overall score, top 5 risks, overdue findings, SLA breaches, concentration risk, evidence health, owner workload. Designed for management/board reporting.
- `update\_finding`: Update finding lifecycle: claim, set remediation plan, request re-test, close, or accept risk. Status flow: open -\> in\_progress -\> retest\_pending -\> closed \| risk\_accepted.
- `retest\_finding`: Re-test a finding: collect fresh evidence, reassess check, auto-close if GREEN. Full closed-loop.
- `score\_trend`: Score trend over time: weekly deltas, trajectory, peer benchmark. Shows improvement or decline.
- `dependency\_graph`: Full provider dependency graph: providers, systems, checks, blast radius, SPOF detection.
- `incident\_flow`: DORA incident lifecycle: log, classify, notify \(BaFin\), close. Each step creates signed evidence.
- `evidence\_pack`: Export evidence pack for article/check/entity. Pruefer-ready: evidence, assessments, findings, audit trail, signatures.
- `provider\_country\_risk`: Enrich provider dependencies with OECD economic risk: GDP, unemployment, CLI per provider country. DORA Art. 28-31 relevant.
- `contract\_upload`: Upload contract text for DORA Art. 30 analysis. Creates document record with SHA-256 hash, version tracking, audit trail.
- `contract\_analyze`: Analyze contract against 15 DORA Art. 30 mandatory clauses. Returns compliance status per clause with confidence score, extracted text, gap reasoning, suggested fix.
- `contract\_status`: Overview of all analyzed contracts per entity. Shows clause gaps, review status, document versions.
- `cross\_regulation\_check`: Tag findings with cross-regulation impact \(DORA + MiCA + AMLR\). Shows which DORA findings also affect MiCA insider info or AMLR screening.
- `regulation\_impact`: Show cross-regulation impacts for a specific DORA article. Maps DORA → MiCA + AMLR.
- `bafin\_report\_draft`: Generate ITS 2024/1772 compliant BaFin incident report draft. All mandatory fields per DORA Art. 19/20. Preview mode — requires board approval.
- `bafin\_approve\_send`: Approve BaFin report for submission \(4-eyes principle\). Creates signed approval evidence.
- `cve\_asset\_map`: Map CVE/vulnerability to internal ICT providers and systems. Auto-creates findings for critical matches. DORA Art. 10.
- `policy\_draft`: Generate DORA policy/framework document draft for a specific article. 8 templates available \(Art. 5,6,8,10,11,17,28,30\). Uses entity data for customization.
- `create\_trial`: Create temporary trial entity \(48h\) for self-service DORA assessment. No login needed.
- `run\_trial\_assessment`: Run complete DORA+MiCA assessment for trial entity. Returns score, gaps, automation potential.
- `generate\_trial\_report`: Generate watermarked trial report with score, gaps, and CTA.

Measured by MCP Station. Methods: https://mcpstation.net/methods.html · Terms: https://mcpstation.net/terms.html