mcp-registry/io.tooloracle/dora · v1.0.0
As of 2026-10-26 19:47 UTC, the Tooloracle Dora MCP server is up with a Glimind reliability score of 93/100 (grade A). Over the last 30 days it answered 99.9% of Glimind's liveness checks. It had 3 outages in 90 days, with a median recovery of 14 minutes.
DORAOracle — 15 tools for DORA Art.5-32: risk register, ICT incidents, TLPT, third-party.
Point your MCP client at this streamable-http endpoint: https://tooloracle.io/dora/mcp/
15 of 15 tool(s) carry no readOnlyHint/destructiveHint annotations.
Annotate read-only tools with {"readOnlyHint": true}. Agents and gateways can then run them without a confirmation prompt, and route around destructive ones. How to fix →
Negotiates MCP 2025-03-26. Structured output, tool output schemas and elicitation arrived in 2025-06-18.
Upgrade the MCP SDK and negotiate 2025-06-18 or newer. How to fix →
No tool declares an outputSchema.
Declare outputSchema and return structuredContent (MCP 2025-06-18+). Agents can then parse results without guessing, and chain tools reliably. How to fix →
Paste-ready definitions with the problems above fixed. Changes marked verify need a human look. All of them as JSON: /v1/readiness/mcp-registry%2Fio.tooloracle%2Fdora/fixes
{
"name": "breach_check",
"description": "HaveIBeenPwned breach database — check domain/company breach exposure. DORA Art. 18 incident assessment.",
"inputSchema": {
"type": "object",
"properties": {
"limit": {
"type": "integer",
"default": 20,
"maximum": 50,
"minimum": 1,
"description": "Max results 1-50 (default: 20)"
},
"domain": {
"type": "string",
"description": "Company domain e.g. 'meinbank.de' (optional — omit for latest breaches)"
}
},
"additionalProperties": false
},
"annotations": {
"readOnlyHint": true
}
}{
"name": "cloud_status",
"description": "Live status of AWS, GCP, Azure cloud providers. DORA Art. 28 third-party ICT risk monitoring.",
"inputSchema": {
"type": "object",
"properties": {
"limit": {
"type": "integer",
"default": 10,
"description": "Max incidents per provider (default: 10)"
},
"provider": {
"type": "string",
"description": "Provider: aws, gcp, azure, all (default: all)"
}
},
"additionalProperties": false
},
"annotations": {
"readOnlyHint": true
}
}{
"name": "cve_search",
"description": "Search CVEs by keyword, vendor or product. Returns CVSS scores, attack vectors, DORA pillar mapping.",
"inputSchema": {
"type": "object",
"properties": {
"days": {
"type": "integer",
"default": 30,
"description": "Published within last N days (default: 30)"
},
"limit": {
"type": "integer",
"default": 10,
"maximum": 20,
"minimum": 1,
"description": "Max results 1-20 (default: 10)"
},
"vendor": {
"type": "string",
"description": "Vendor/product e.g. 'SAP', 'Cisco', 'Microsoft Exchange'"
},
"keyword": {
"type": "string",
"description": "Search keyword e.g. 'authentication bypass', 'remote code execution'"
},
"severity": {
"enum": [
"CRITICAL",
"HIGH",
"MEDIUM",
"LOW"
],
"type": "string",
"description": "CVSS severity: CRITICAL, HIGH, MEDIUM, LOW"
}
},
"additionalProperties": false
},
"annotations": {
"readOnlyHint": true
}
}Get an email or webhook when this server's readiness drops by 10+ points, tool-poisoning text appears, or a tool breaks:
curl -X POST https://glimind.com/v1/subscriptions -H 'content-type: application/json' -d '{"tools":["mcp-registry/io.tooloracle/dora"],"email":"[email protected]"}'Agents: watch_tool({"toolId": "mcp-registry/io.tooloracle/dora"}) over MCP.
cve_search ~214 tokenskev_list ~173 tokensincident_timeline ~169 tokenscve_latest ~165 tokensdora_news ~152 tokensStatic checks of the advertised tools/list (schema, descriptions, annotations, tool-poisoning patterns, names, size) plus observed protocol, uptime, latency and contract changes. Read-only: no tool is ever called. Weights: schema 15, docs 20, safety 15, efficiency 15, compatibility 15, protocol 5, reliability 10, stability 5. Token counts are estimates (~3.6 characters per token).
Operator? Fix these, then re-check live. Embed the readiness badge:
[](https://glimind.com/server/mcp-registry%2Fio.tooloracle%2Fdora?ref=badge)
<a href="https://glimind.com/server/mcp-registry%2Fio.tooloracle%2Fdora?ref=badge"><img src="https://glimind.com/v1/readiness/badge/mcp-registry%2Fio.tooloracle%2Fdora.svg" alt="MCP agent-readiness"></a>
.. image:: https://glimind.com/v1/readiness/badge/mcp-registry%2Fio.tooloracle%2Fdora.svg :target: https://glimind.com/server/mcp-registry%2Fio.tooloracle%2Fdora?ref=badge :alt: MCP agent-readiness
Glimind records every version of this server's tool definitions in a signed, append-only transparency log. Current manifest sha256:32c998ad4d622ae0…, first seen 2026-10-17, included at leaf 1031 of 75,098. Version history · verify what your client received.
Compare: most reliable security servers · most reliable devops servers · most reliable calendar servers · most reliable news servers
Glimind tells agents whether a server is up right now and how to call it, then fails over to a live alternative when it isn't.
Claude Code
claude mcp add --transport http glimind https://glimind.com/mcp
Claude Desktop · Windsurf · Cline (mcpServers JSON)
{
"mcpServers": {
"glimind": {
"type": "http",
"url": "https://glimind.com/mcp"
}
}
}
As of 2026-10-26 19:47 UTC, the Tooloracle Dora MCP server is up with a Glimind reliability score of 93/100 (grade A). Over the last 30 days it answered 99.9% of Glimind's liveness checks. It had 3 outages in 90 days, with a median recovery of 14 minutes.
Tooloracle Dora MCP server advertises 15 tools, including breach_check, cert_advisories, cloud_status, cve_latest, cve_search.
Point your MCP client at this streamable-http endpoint: https://tooloracle.io/dora/mcp/
Glimind scanned all 15 tool definitions for tool-poisoning patterns — hidden or invisible characters, instructions that override the model, concealment from the user, requests to read credential or MCP config files, conversation exfiltration and cross-tool shadowing — and found none. This checks what the server tells the model, not what its code does; review the source before granting access to sensitive data.
Status page: 90-day uptime, every outage and how long it lasted.
Claim this listing to get the Verified operator marker, a remediation checklist and owner analytics, or embed the live badge from any of the tool pages above. Maintainers: alerts, deploy attestation and monthly reports.
Status is an automated estimate from Glimind's liveness checks (handshake and tool listing only; no tool is ever called) and may lag or differ from your network. Glimind is not affiliated with this server or its operator. Operator? Request a correction or opt out at https://glimind.com/opt-out.