
Incidentoracle
This is a focused incident management toolkit built for teams dealing with EU financial services compliance. You get 12 tools covering the typical incident lifecycle: triage workflows, root cause analysis templates, and automated BaFin DORA reporting formats. The DORA piece is the key differentiator here, handling the Digital Operational Resilience Act's incident notification requirements that hit EU financial institutions in January 2025. Reach for this if you're running ops at a bank, payment processor, or fintech that needs to file ICT incident reports with regulators. The streamable HTTP transport means you can pipe incident data through without managing local state.
- tools
- 12
- transport
- HTTP
- last updated
- May 7, 2026
Tools
12 toolsPublic tool metadata for what this MCP can expose to an agent.
log_incidentLog a new ICT-related incident. First step in the DORA incident management process.
Log a new ICT-related incident. First step in the DORA incident management process.
No parameter schema in public metadata yet.
classify_incidentClassify an incident against the 6 DORA criteria (RTS 2024/1772).
Classify an incident against the 6 DORA criteria (RTS 2024/1772).
No parameter schema in public metadata yet.
major_incident_checkQuick check: would these criteria values classify as a MAJOR incident?
Quick check: would these criteria values classify as a MAJOR incident?
No parameter schema in public metadata yet.
initial_notificationGenerate the 4h initial notification for a MAJOR incident (ITS 2025/302 Annex I).
Generate the 4h initial notification for a MAJOR incident (ITS 2025/302 Annex I).
No parameter schema in public metadata yet.
intermediate_reportGenerate the 72h intermediate report for a MAJOR incident (ITS 2025/302).
Generate the 72h intermediate report for a MAJOR incident (ITS 2025/302).
No parameter schema in public metadata yet.
final_reportGenerate the 1-month final report with root cause analysis and lessons learned.
Generate the 1-month final report with root cause analysis and lessons learned.
No parameter schema in public metadata yet.
deadline_trackerTrack all active MAJOR incident reporting deadlines. Shows overdue and upcoming.
Track all active MAJOR incident reporting deadlines. Shows overdue and upcoming.
No parameter schema in public metadata yet.
reclassifyReclassify an incident (MAJOR to NON-MAJOR or vice versa).
Reclassify an incident (MAJOR to NON-MAJOR or vice versa).
No parameter schema in public metadata yet.
incident_statsDashboard: total/open/major incidents, overdue deadlines, by severity/status.
Dashboard: total/open/major incidents, overdue deadlines, by severity/status.
No parameter schema in public metadata yet.
cyber_threat_notifyVoluntary notification of a significant cyber threat (Art. 19(2)).
Voluntary notification of a significant cyber threat (Art. 19(2)).
No parameter schema in public metadata yet.
incident_logFull incident register with filters (status, classification, severity, search).
Full incident register with filters (status, classification, severity, search).
No parameter schema in public metadata yet.
health_checkServer status.
Server status.
No parameter schema in public metadata yet.
Sponsors
Readme
π¨ incidentOracle
DORA Execution MCP Server β 12 tools | Part of ToolOracle
Quick Connect
# Claude Desktop / Cursor / Windsurf
npx -y mcp-remote https://tooloracle.io/incident/mcp/
// claude_desktop_config.json
{
"mcpServers": {
"incidentoracle": {
"command": "npx",
"args": ["-y", "mcp-remote", "https://tooloracle.io/incident/mcp/"]
}
}
}
Tools (12)
Details
- Repository
- github.com/tooloracle/incidentoracle
- Categories
- Monitoring & Observability, Data & Analytics
- Transport
- HTTP
- Registry
- MCP registry, active