Dora Compliance MCP

Install

Works with Claude Code, Codex, VS Code, Cursor, Windsurf, Claude Desktop. Read the repository before you give any tool access to your data.

npx agentmarket install connector/csoai-org-dora-compliance-mcp

About

No reviews yet. Installed it? Reviews come from verified installers only. How reviews work

Permissions

What this server can do and what it asks for, from its tool list and install config. Checked Oct 25, 2026.

Tools

7 read · 1 write · 0 delete · 2 not yet classified

Secrets

None asked for

Install scripts

Not scanned yet

Runs as

Python package

Tools (10)

Read from the source code; the running server may differ. Descriptions are the server’s own words; hidden characters are shown as [U+…].

• audit_all_pillars

  COST WARNING: $0.50/call on x402-billed deployments (hosted); free when self-hosted or X402 is disabled. Run audits across all 5 DORA pillars and return an executive summary. Behavior: This tool is read-only and stateless — it produces analysis output without modifying any external systems, databases, or files. Safe to call repeatedly with identical inputs (idempotent). Free tier: 10/day rate limit. Pro tier: unlimited. No authentication required for basic usage. When to use: Use this tool when you need to assess, audit, or verify compliance requirements. Ideal f…

• audit_pillar

  COST WARNING: $0.10/call on x402-billed deployments (hosted); free when self-hosted or X402 is disabled. Audit a specific DORA pillar (1-5) against your entity's current controls. Returns per-obligation pass/fail + gap list + remediation priority. Behavior: This tool is read-only and stateless — it produces analysis output without modifying any external systems, databases, or files. Safe to call repeatedly with identical inputs (idempotent). Free tier: 10/day rate limit. Pro tier: unlimited. No authentication required for basic usage. When to use: Use this tool when …

• classify_entity

  Classify a financial entity's DORA applicability + which entity type it is. Returns in-scope status, entity type, proportionality tier, and starting pillars. Behavior: This tool is read-only and stateless — it produces analysis output without modifying any external systems, databases, or files. Safe to call repeatedly with identical inputs (idempotent). Free tier: 10/day rate limit. Pro tier: unlimited. No authentication required for basic usage. When to use: Use this tool when you need to assess, audit, or verify compliance requirements. Ideal for gap analysis, r…

• classify_incident

  COST WARNING: $0.10/call on x402-billed deployments (hosted); free when self-hosted or X402 is disabled. Classify an ICT incident against DORA major-incident thresholds per Commission Delegated Regulation (EU) 2024/1772. Returns whether it qualifies as a 'major ICT incident' requiring 4h/72h/1-month reporting. Behavior: This tool is read-only and stateless — it produces analysis output without modifying any external systems, databases, or files. Safe to call repeatedly with identical inputs (idempotent). Free tier: 10/day rate limit. Pro tier: unlimited. No authentication…

• enforcement_status

  Current DORA enforcement status + key upcoming deadlines for financial entities. Behavior: This tool is read-only and stateless — it produces analysis output without modifying any external systems, databases, or files. Safe to call repeatedly with identical inputs (idempotent). Free tier: 10/day rate limit. Pro tier: unlimited. No authentication required for basic usage. When to use: Use this tool when you need to assess, audit, or verify compliance requirements. Ideal for gap analysis, readiness checks, and generating compliance documentation. When NOT to us…

• generate_incident_report

  Generate a DORA RTS-compliant ICT incident report template. Args: severity: One of anomalous, significant, major, significant_cyber_threat. entity_name: Reporting entity legal name (optional — leaves placeholder if empty). incident_summary: One-sentence description of the incident (optional). api_key: MEOK API key (Pro tier gets the HMAC-signed evidence pack version). Returns: Initial (T+4h), intermediate (T+72h) and final (T+1mo) report templates with every field defined by Commission Implementing Regulation (EU) 2024/2956. Fields are pre-filled where determinist…

• get_dora_certificate

  COST WARNING: $0.25/call on x402-billed deployments (hosted); free when self-hosted or X402 is disabled. Generate a cryptographically signed DORA compliance attestation (Pro/Enterprise). Uses the shared MEOK attestation module (HMAC-SHA256 signed JSON + verify URL + optional base64-encoded PDF). Share the verify_url with your auditor / board / procurement team — the signature is cryptographically binding and any tampering invalidates it. Certificates expire 365 days from issue. Args: entity_name (str): The entity name to appear on the certificate. overall_score (float): Overall comp…

• list_pillars

  List all 5 DORA pillars with article ranges and key obligations. Behavior: This tool is read-only and stateless — it produces analysis output without modifying any external systems, databases, or files. Safe to call repeatedly with identical inputs (idempotent). Free tier: 10/day rate limit. Pro tier: unlimited. No authentication required for basic usage. When to use: Use this tool when you need to assess, audit, or verify compliance requirements. Ideal for gap analysis, readiness checks, and generating compliance documentation. When NOT to use: Do not us…

• register_of_information_template

  COST WARNING: $0.25/call on x402-billed deployments (hosted); free when self-hosted or X402 is disabled. Return the Article 28.3 Register of Information template structure. Financial entities must submit this annually to their competent authority under DORA. Behavior: This tool generates structured output without modifying external systems. Output is deterministic for identical inputs. No side effects. Free tier: 10/day rate limit. Pro tier: unlimited. No authentication required for basic usage. When to use: Use this tool when you need to assess, audit, or verify complia…

• tlpt_readiness

  Assess Threat-Led Penetration Testing (Article 26) readiness. Returns whether the entity is likely in scope and what's needed to pass a TIBER-EU-aligned TLPT. Behavior: This tool is read-only and stateless — it produces analysis output without modifying any external systems, databases, or files. Safe to call repeatedly with identical inputs (idempotent). Free tier: 10/day rate limit. Pro tier: unlimited. No authentication required for basic usage. When to use: Use this tool when you need to assess, audit, or verify compliance requirements. Ideal for gap analysis, …

Signals

Stars

1

Forks

0

Open issues

1

Weekly downloads

76

Last commit

Sep 13, 2026 (1 month ago)

Last release

Aug 19, 2026 (2 months ago)

Last package publish

Sep 13, 2026 (1 month ago)

From GitHub (fetched Oct 24, 2026) and the package registry.

Details

Registry name

io.github.CSOAI-ORG/dora-compliance-mcp

Version

1.4.15

Auth

No auth

Packages

pypi dora-compliance-mcp

License

MIT

Repository

github.com/CSOAI-ORG/dora-compliance-mcp

Website

meok.ai/dora-compliance-mcp

First seen

Oct 24, 2026

Last checked

Oct 25, 2026

Source

Official MCP Registrygithub-graphql