# Tooloracle Dora MCP server

Source: https://glimind.com/server/mcp-registry%2Fio.tooloracle%2Fdora
Registry id: `mcp-registry/io.tooloracle/dora`
Status: live (checked 2026-10-26T20:39:13.880Z)

## Measurements (30 days)

- Uptime: 99.89%
- Checks: 4906
- Outages (90 days): 3

## Install

```json
{
  "mcpServers": {
    "tooloracle-dora-mcp-server": {
      "type": "http",
      "url": "https://tooloracle.io/dora/mcp/"
    }
  }
}
```

Claude Code:

```sh
claude mcp add --transport http tooloracle-dora-mcp-server https://tooloracle.io/dora/mcp/
```

## Tools (15)

- `breach_check`: HaveIBeenPwned breach database — check domain/company breach exposure. DORA Art. 18 incident assessment.
- `cert_advisories`: CERT-Bund security advisories — authoritative DE source for ICT threats. DORA Art. 17 threat monitoring.
- `cloud_status`: Live status of AWS, GCP, Azure cloud providers. DORA Art. 28 third-party ICT risk monitoring.
- `cve_latest`: Latest critical CVEs — daily DORA ICT risk briefing. Filter by severity and banking relevance.
- `cve_search`: Search CVEs by keyword, vendor or product. Returns CVSS scores, attack vectors, DORA pillar mapping.
- `dora_calendar`: DORA compliance milestones and upcoming deadlines for financial institutions. All Art. references included.
- `dora_news`: EBA/DORA regulatory news for banks. Topics: general, eba, incident, third_party, testing, guidelines, bafin, swift.
- `health_check`: DORAOracle server status and all backend connectivity checks.
- `incident_timeline`: Generate a DORA Art. 19-aligned ICT incident reporting timeline with the regulatory deadline structure. Supports - does not constitute - compliant reporting.
- `kev_check`: Check if a specific CVE is in CISA KEV (actively exploited in the wild). Returns DORA incident classification guidance.
- `kev_list`: CISA Known Exploited Vulnerabilities — actively exploited CVEs with patch deadlines. DORA Art. 9 patch compliance.
- `mitre_techniques`: MITRE ATT&CK techniques for DORA TLPT / TIBER-EU penetration testing. Maps to DORA Art. 26.
- `provider_risk`: DORA Art. 28 ICT third-party risk assessment: CVE history, news, GLEIF registration, contractual checklist.
- `threat_actors`: Feodo Tracker: live C2 botnet servers (Emotet, QakBot, etc.). Actionable IP blocklist for DORA Art. 9.
- `tlpt_scenarios`: TIBER-EU threat scenarios for DORA resilience testing planning. Banking-specific attack simulations.

Measured by Glimind (https://glimind.com): MCP handshake + tool list only, no tool is ever called. CC BY 4.0.