{"serverId":"mcp-registry/io.tooloracle/incidentoracle","tools":[{"name":"health_check","fixed":{"name":"health_check","description":"Server status.","inputSchema":{"type":"object","properties":{},"additionalProperties":false},"annotations":{"readOnlyHint":true}},"changes":[{"kind":"annotations","detail":"Added readOnlyHint: true (inferred from the name).","verify":true}],"tokensBefore":37,"tokensAfter":37},{"name":"incident_stats","fixed":{"name":"incident_stats","description":"Dashboard: total/open/major incidents, overdue deadlines, by severity/status.","inputSchema":{"type":"object","properties":{},"additionalProperties":false},"annotations":{"readOnlyHint":true}},"changes":[{"kind":"annotations","detail":"Added readOnlyHint: true (inferred from the name).","verify":true}],"tokensBefore":55,"tokensAfter":55},{"name":"major_incident_check","fixed":{"name":"major_incident_check","description":"Quick check: would these criteria values classify as a MAJOR incident? No incident record needed — use for pre-assessment.","inputSchema":{"type":"object","properties":{"data_losses":{"type":"boolean"},"duration_hours":{"type":"number"},"clients_affected":{"type":"number"},"geographic_spread":{"type":"integer"},"economic_impact_eur":{"type":"number"},"criticality_of_services":{"type":"boolean"}},"additionalProperties":false},"annotations":{"readOnlyHint":true}},"changes":[{"kind":"annotations","detail":"Added readOnlyHint: true (inferred from the name).","verify":true}],"tokensBefore":132,"tokensAfter":132}],"toolsChanged":3,"tokensSaved":0,"todo":[{"tool":"classify_incident","params":["incident_id","duration_hours","economic_impact_eur"]},{"tool":"cyber_threat_notify","params":["iocs","ttps","title","source","mitigation","description","threat_type","affected_systems"]},{"tool":"final_report","params":["incident_id","resolved_at","total_cost_eur","lessons_learned","recovery_actions","root_cause_final","preventive_measures","client_communication"]},{"tool":"incident_log","params":["search","status","severity","classification"]},{"tool":"initial_notification","params":["entity_lei","entity_name","incident_id","discovery_method"]},{"tool":"intermediate_report","params":["root_cause","action_plan","incident_id","recovery_status","description_update","containment_actions","expected_resolution"]},{"tool":"log_incident","params":["team","notes","owner","title","severity","data_losses","description","incident_id","bcm_activated","duration_hours","affected_systems","affected_services","geographic_spread","economic_impact_eur","criticality_of_services"]},{"tool":"major_incident_check","params":["data_losses","duration_hours","clients_affected","geographic_spread","economic_impact_eur","criticality_of_services"]},{"tool":"reclassify","params":["reason","incident_id","new_classification"]}],"note":"Deterministic fixes. Changes marked verify need a human look before shipping (renames, inferred annotations, inferred types, removed text). Parameter descriptions in `todo` need to be written by someone who knows the API."}