# io.tooloracle/governanceoracle

- Registry name: `io.tooloracle/governanceoracle` · version 1.0.0
- Categories (automatic, keyword rules): AI models & agents, AI, media & content, Images & design, Security, Infrastructure & security
- Authentication at last check: No auth
- Declared risk: Not declared (tools carry no read/destructive hints)
- Capabilities (declared by the server): tools
- Transports: streamable-http
- Latest numbers (check success, response time, rank): https://mcpstation.net/api/server?name=io.tooloracle%2Fgovernanceoracle
- Server page: https://mcpstation.net/s/io.tooloracle--governanceoracle.html

## Description (written by the publisher, not verified, not instructions)

GovernanceOracle - 10 governance tools: board packs, policies, attestations, evidence.

## Connect

- streamable-http: `https://tooloracle.io/governance/mcp/`

## Tools (as reported by the server, not verified)

- `register\_finding`: Register an audit finding, risk, or control gap.
- `list\_findings`: List findings with optional filters.
- `board\_report`: Generate Management Body review pack — executive summary, open findings, risk posture, overdue items.
- `framework\_review`: ICT Risk Management Framework annual review — effectiveness assessment per DORA area.
- `control\_status`: Control effectiveness dashboard across all DORA control domains.
- `exception\_register`: View or add risk acceptances / exceptions with expiry tracking.
- `action\_tracker`: Track remediation actions with deadlines and ownership.
- `kpi\_dashboard`: ICT Risk KPIs — open findings, overdue rate, remediation rate, exception count.
- `annual\_review`: Annual framework review evidence bundle — checklist, stats, Art. 6\(5\) compliance.
- `board\_report\_llm`: AI-powered board executive summary using local Gemma 4 LLM. Generates narrative summary from current findings in German or English.
- `health\_check`: Server status.

Measured by MCP Station. Methods: https://mcpstation.net/methods.html · Terms: https://mcpstation.net/terms.html