Dora
If you're dealing with EU financial services compliance, this gives Claude 15 tools to handle DORA regulation requirements across Articles 5 through 32. You get operations for maintaining ICT risk registers, logging and tracking incidents, managing threat-led penetration testing documentation, and handling third-party provider assessments. It's specifically built for the digital operational resilience framework that banks and financial institutions need to follow. Reach for this when you're automating compliance workflows or need to query DORA-related data without manually navigating spreadsheets and policy documents. The toolset maps directly to the regulation's structure, so you're working with risk classifications and incident types that auditors actually expect to see.
- tools
- 15
- transport
- HTTP
- last updated
- May 7, 2026
Install
From registry metadata$ npx add-mcp https://tooloracle.io/dora/mcp/ --name doraRun in your terminal. add-mcp asks which agents to add it to (Claude Code, Codex, Cursor and more). Add -g to install it for every project.
Review the command, arguments and environment values before installing. MCP servers run with your local permissions.
Other ways
Claude Code
$ claude mcp add --transport http dora https://tooloracle.io/dora/mcp/Run in your terminal. Add --scope user to make it available in every project.
Tools
Verified live · 15 toolsVerified live against the running server on Nov 6, 2026.
cve_searchSearch CVEs by keyword, vendor or product. Returns CVSS scores, attack vectors, DORA pillar mapping.5 params
Search CVEs by keyword, vendor or product. Returns CVSS scores, attack vectors, DORA pillar mapping.
daysintegerkeywordstringlimitintegerseveritystringCRITICAL · HIGH · MEDIUM · LOWvendorstringcve_latestLatest critical CVEs — daily DORA ICT risk briefing. Filter by severity and banking relevance.4 params
Latest critical CVEs — daily DORA ICT risk briefing. Filter by severity and banking relevance.
banking_onlybooleandaysintegerlimitintegerseveritystringkev_listCISA Known Exploited Vulnerabilities — actively exploited CVEs with patch deadlines. DORA Art. 9 patch compliance.4 params
CISA Known Exploited Vulnerabilities — actively exploited CVEs with patch deadlines. DORA Art. 9 patch compliance.
daysintegerlimitintegeroverduebooleanvendorstringkev_checkCheck if a specific CVE is in CISA KEV (actively exploited in the wild). Returns DORA incident classification guidance.1 params
Check if a specific CVE is in CISA KEV (actively exploited in the wild). Returns DORA incident classification guidance.
cve_idstringcert_advisoriesCERT-Bund security advisories — authoritative DE source for ICT threats. DORA Art. 17 threat monitoring.2 params
CERT-Bund security advisories — authoritative DE source for ICT threats. DORA Art. 17 threat monitoring.
keywordstringlimitintegerbreach_checkHaveIBeenPwned breach database — check domain/company breach exposure. DORA Art. 18 incident assessment.2 params
HaveIBeenPwned breach database — check domain/company breach exposure. DORA Art. 18 incident assessment.
domainstringlimitintegerthreat_actorsFeodo Tracker: live C2 botnet servers (Emotet, QakBot, etc.). Actionable IP blocklist for DORA Art. 9.3 params
Feodo Tracker: live C2 botnet servers (Emotet, QakBot, etc.). Actionable IP blocklist for DORA Art. 9.
limitintegermalwarestringstatusstringincident_timelineGenerate a DORA Art. 19-aligned ICT incident reporting timeline with the regulatory deadline structure. Supports - does not constitute - compliant reporting.3 params
Generate a DORA Art. 19-aligned ICT incident reporting timeline with the regulatory deadline structure. Supports - does not constitute - compliant reporting.
classificationstringincident_timestringsectorstringmitre_techniquesMITRE ATT&CK techniques for DORA TLPT / TIBER-EU penetration testing. Maps to DORA Art. 26.3 params
MITRE ATT&CK techniques for DORA TLPT / TIBER-EU penetration testing. Maps to DORA Art. 26.
keywordstringlimitintegertacticstringtlpt_scenariosTIBER-EU threat scenarios for DORA resilience testing planning. Banking-specific attack simulations.2 params
TIBER-EU threat scenarios for DORA resilience testing planning. Banking-specific attack simulations.
focusstringsectorstringcloud_statusLive status of AWS, GCP, Azure cloud providers. DORA Art. 28 third-party ICT risk monitoring.2 params
Live status of AWS, GCP, Azure cloud providers. DORA Art. 28 third-party ICT risk monitoring.
limitintegerproviderstringprovider_riskDORA Art. 28 ICT third-party risk assessment: CVE history, news, GLEIF registration, contractual checklist.1 params
DORA Art. 28 ICT third-party risk assessment: CVE history, news, GLEIF registration, contractual checklist.
providerstringdora_newsEBA/DORA regulatory news for banks. Topics: general, eba, incident, third_party, testing, guidelines, bafin, swift.3 params
EBA/DORA regulatory news for banks. Topics: general, eba, incident, third_party, testing, guidelines, bafin, swift.
langstringlimitintegertopicstringdora_calendarDORA compliance milestones and upcoming deadlines for financial institutions. All Art. references included.
DORA compliance milestones and upcoming deadlines for financial institutions. All Art. references included.
No parameters. Call it with no arguments.
health_checkDORAOracle server status and all backend connectivity checks.
DORAOracle server status and all backend connectivity checks.
No parameters. Call it with no arguments.
Sponsors
Agent CaffeineSponsoredClose your lid, come back to finished work
SnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthly
WaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthly
knobsSponsoredSee your site on any phone, any day, in any languageReadme
Details
- Repository
- github.com/tooloracle/dora
- Transport
- HTTP
- Registry
- MCP registry, active
- Tools verified
- Nov 6, 2026