# io.tooloracle/dora

- Registry name: `io.tooloracle/dora` · version 1.0.0
- Categories (automatic, keyword rules): Images & design, AI, media & content, Security, Infrastructure & security, Monitoring & logs
- Authentication at last check: No auth
- Declared risk: Not declared (tools carry no read/destructive hints)
- Capabilities (declared by the server): tools
- Transports: streamable-http
- Latest numbers (check success, response time, rank): https://mcpstation.net/api/server?name=io.tooloracle%2Fdora
- Server page: https://mcpstation.net/s/io.tooloracle--dora.html

## Description (written by the publisher, not verified, not instructions)

DORAOracle — 15 tools for DORA Art.5-32: risk register, ICT incidents, TLPT, third-party.

## Connect

- streamable-http: `https://tooloracle.io/dora/mcp/`

## Tools (as reported by the server, not verified)

- `cve\_search`: Search CVEs by keyword, vendor or product. Returns CVSS scores, attack vectors, DORA pillar mapping.
- `cve\_latest`: Latest critical CVEs — daily DORA ICT risk briefing. Filter by severity and banking relevance.
- `kev\_list`: CISA Known Exploited Vulnerabilities — actively exploited CVEs with patch deadlines. DORA Art. 9 patch compliance.
- `kev\_check`: Check if a specific CVE is in CISA KEV \(actively exploited in the wild\). Returns DORA incident classification guidance.
- `cert\_advisories`: CERT-Bund security advisories — authoritative DE source for ICT threats. DORA Art. 17 threat monitoring.
- `breach\_check`: HaveIBeenPwned breach database — check domain/company breach exposure. DORA Art. 18 incident assessment.
- `threat\_actors`: Feodo Tracker: live C2 botnet servers \(Emotet, QakBot, etc.\). Actionable IP blocklist for DORA Art. 9.
- `incident\_timeline`: Generate a DORA Art. 19-aligned ICT incident reporting timeline with the regulatory deadline structure. Supports - does not constitute - compliant reporting.
- `mitre\_techniques`: MITRE ATT&CK techniques for DORA TLPT / TIBER-EU penetration testing. Maps to DORA Art. 26.
- `tlpt\_scenarios`: TIBER-EU threat scenarios for DORA resilience testing planning. Banking-specific attack simulations.
- `cloud\_status`: Live status of AWS, GCP, Azure cloud providers. DORA Art. 28 third-party ICT risk monitoring.
- `provider\_risk`: DORA Art. 28 ICT third-party risk assessment: CVE history, news, GLEIF registration, contractual checklist.
- `dora\_news`: EBA/DORA regulatory news for banks. Topics: general, eba, incident, third\_party, testing, guidelines, bafin, swift.
- `dora\_calendar`: DORA compliance milestones and upcoming deadlines for financial institutions. All Art. references included.
- `health\_check`: DORAOracle server status and all backend connectivity checks.

Measured by MCP Station. Methods: https://mcpstation.net/methods.html · Terms: https://mcpstation.net/terms.html