Search / io.tooloracle/incidentoracle
incidentoracle
not classifiedIncidentOracle - 12-tool incident management MCP: triage, BaFin DORA reporting, RCA.
v1.0.0 · active · repository · descriptor JSON · versions
Search / io.tooloracle/incidentoracle
IncidentOracle - 12-tool incident management MCP: triage, BaFin DORA reporting, RCA.
v1.0.0 · active · repository · descriptor JSON · versions
{
"mcpServers": {
"incidentoracle": {
"type": "http",
"url": "https://tooloracle.io/incident/mcp/"
}
}
}claude mcp add --transport http incidentoracle https://tooloracle.io/incident/mcp/[mcp_servers.incidentoracle]
url = "https://tooloracle.io/incident/mcp/"
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"incidentoracle": {
"type": "remote",
"url": "https://tooloracle.io/incident/mcp/",
"enabled": true
}
}
}{
"mcpServers": {
"incidentoracle": {
"type": "http",
"url": "https://tooloracle.io/incident/mcp/"
}
},
"deeplink": "cursor://anysphere.cursor-deeplink/mcp/install?name=incidentoracle&config=eyJ0eXBlIjoiaHR0cCIsInVybCI6Imh0dHBzOi8vdG9vbG9yYWNsZS5pby9pbmNpZGVudC9tY3AvIn0%3D"
}{
"servers": {
"incidentoracle": {
"type": "http",
"url": "https://tooloracle.io/incident/mcp/"
}
}
}{
"mcpServers": {
"incidentoracle": {
"httpUrl": "https://tooloracle.io/incident/mcp/"
}
}
}extensions:
"incidentoracle":
enabled: true
name: "incidentoracle"
type: streamable_http
uri: "https://tooloracle.io/incident/mcp/"
timeout: 300
protocol.modernnewest supported version is 2025-03-26; 2026-07-28 not supported, older versions are deprecated until 2027-07-28protocol.statelessonly applies to 2026-07-28 serversprotocol.transportstreamable HTTPprotocol.list_ttlonly applies to 2026-07-28 serversauth.prm, auth.as_metadata, auth.cimdno remote uses OAuthauth.secret_in_urlno templated URLtools.descriptions1 of 12 tools have a description under 20 characterstools.description_lengthdescriptions are concisetools.schemasevery tool has an object input schematools.annotationsno tool declares readOnlyHint or destructiveHint, so clients cannot tell safe calls from risky onestools.directory_hintsno tool declares all four of readOnlyHint, destructiveHint, idempotentHint and openWorldHint; missing: classify_incident (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); incident_stats (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); log_incident (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); …tools.token_costabout 1,319 tokens to load every tooltools.api_dumptools are not a one-to-one API dumpstability.changesno tool changes in 30 daysstability.rug_pullno tool changed its meaning under the same namedeps.known_vulns, deps.mcp_sdk_version, deps.resolvableno npm or PyPI packageNo tool definition changes recorded. A server's first observation is its baseline; later probes record what changes.
Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.
+repository +namespace-matches-repo +dns-namespace -unreachable(3 failures) ~updated-166d-ago
Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. How it is computed.
| remote | auth | reachable | uptime 30d | p50 | protocol | last ok |
|---|---|---|---|---|---|---|
https://tooloracle.io/incident/mcp/ streamable-http | none | no (3 failures) | 97% | 311 ms | 2025-03-26 | 2026-10-18 |
classify_incident | Classify an incident against the 6 DORA criteria (RTS 2024/1772). Determines if MAJOR (triggers 4h/72h/1m reporting) or NON-MAJOR. |
cyber_threat_notify | Voluntary notification of a significant cyber threat (Art. 19(2)). Uses ITS 2025/302 Annex III template. |
deadline_tracker | Track all active MAJOR incident reporting deadlines. Shows overdue and upcoming. |
final_report | Generate the 1-month final report with root cause analysis and lessons learned. |
health_check | Server status. |
incident_log | Full incident register with filters (status, classification, severity, search). |
incident_stats | Dashboard: total/open/major incidents, overdue deadlines, by severity/status. |
initial_notification | Generate the 4h initial notification for a MAJOR incident (ITS 2025/302 Annex I). Must be submitted within 4h of classification, max 24h after detection. |
intermediate_report | Generate the 72h intermediate report for a MAJOR incident (ITS 2025/302). Must include action plan if incident is not yet resolved. |
log_incident | Log a new ICT-related incident. First step in the DORA incident management process (Art. 17). |
major_incident_check | Quick check: would these criteria values classify as a MAJOR incident? No incident record needed — use for pre-assessment. |
reclassify | Reclassify an incident (MAJOR to NON-MAJOR or vice versa). Competent authority must be notified of reclassification. |
Schemas: list_tools.
And 53 more from this publisher.
{
"name": "io.tooloracle/incidentoracle",
"$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
"remotes": [
{
"url": "https://tooloracle.io/incident/mcp/",
"type": "streamable-http"
}
],
"version": "1.0.0",
"repository": {
"url": "https://github.com/ToolOracle/incidentoracle",
"source": "github"
},
"description": "IncidentOracle - 12-tool incident management MCP: triage, BaFin DORA reporting, RCA."
}