io.tooloracle/incidentoracle
io.tooloracle/incidentoracleIncidentOracle - 12-tool incident management MCP: triage, BaFin DORA reporting, RCA.
Tools · 12
Log a new ICT-related incident. First step in the DORA incident management process (Art. 17).
Classify an incident against the 6 DORA criteria (RTS 2024/1772). Determines if MAJOR (triggers 4h/72h/1m reporting) or NON-MAJOR.
Quick check: would these criteria values classify as a MAJOR incident? No incident record needed — use for pre-assessment.
Generate the 4h initial notification for a MAJOR incident (ITS 2025/302 Annex I). Must be submitted within 4h of classification, max 24h after detection.
Generate the 72h intermediate report for a MAJOR incident (ITS 2025/302). Must include action plan if incident is not yet resolved.
Generate the 1-month final report with root cause analysis and lessons learned.
Track all active MAJOR incident reporting deadlines. Shows overdue and upcoming.
Reclassify an incident (MAJOR to NON-MAJOR or vice versa). Competent authority must be notified of reclassification.
Dashboard: total/open/major incidents, overdue deadlines, by severity/status.
Voluntary notification of a significant cyber threat (Art. 19(2)). Uses ITS 2025/302 Annex III template.
Full incident register with filters (status, classification, severity, search).
Server status.
Similar MCP servers embedding-nearest
How to use
Add to your Claude Desktop / Cursor / Cline MCP config:
{
"mcpServers": {
"io.tooloracle/incidentoracle": {
"url": "https://tooloracle.io/incident/mcp/",
"transport": "streamable-http"
}
}
}