
This is a focused incident management toolkit built for teams dealing with EU financial services compliance. You get 12 tools covering the typical incident lifecycle: triage workflows, root cause analysis templates, and automated BaFin DORA reporting formats. The DORA piece is the key differentiator here, handling the Digital Operational Resilience Act's incident notification requirements that hit EU financial institutions in January 2025. Reach for this if you're running ops at a bank, payment processor, or fintech that needs to file ICT incident reports with regulators. The streamable HTTP transport means you can pipe incident data through without managing local state.
DORA Execution MCP Server — 12 tools | Part of ToolOracle
# Claude Desktop / Cursor / Windsurf
npx -y mcp-remote https://tooloracle.io/incident/mcp/
// claude_desktop_config.json
{
"mcpServers": {
"incidentoracle": {
"command": "npx",
"args": ["-y", "mcp-remote", "https://tooloracle.io/incident/mcp/"]
}
}
}
| Tool | Description |
|---|---|
log_incident | Log a new ICT-related incident. First step in the DORA incident management proce |
classify_incident | Classify an incident against the 6 DORA criteria (RTS 2024/1772). |
major_incident_check | Quick check: would these criteria values classify as a MAJOR incident? |
initial_notification | Generate the 4h initial notification for a MAJOR incident (ITS 2025/302 Annex I) |
intermediate_report | Generate the 72h intermediate report for a MAJOR incident (ITS 2025/302). |
final_report | Generate the 1-month final report with root cause analysis and lessons learned. |
deadline_tracker | Track all active MAJOR incident reporting deadlines. Shows overdue and upcoming. |
reclassify | Reclassify an incident (MAJOR to NON-MAJOR or vice versa). |
incident_stats | Dashboard: total/open/major incidents, overdue deadlines, by severity/status. |
cyber_threat_notify | Voluntary notification of a significant cyber threat (Art. 19(2)). |
incident_log | Full incident register with filters (status, classification, severity, search). |
health_check | Server status. |
| Tier | Rate Limit | Price |
|---|---|---|
| Free | 10 calls/day | €0 |
| Pro | 1,000 calls/day | €99/month |
| Enterprise | Unlimited | Custom |
Note: This is a compliance oracle. Full tool access requires a Pro or Enterprise subscription. Free tier includes read-only assessment tools.
incidentOracle is one of 42 specialized MCP servers in the ToolOracle ecosystem — the largest collection of production-ready MCP tools for AI agents.
Related Oracles:
https://tooloracle.io/incident/mcp/Built by FeedOracle — Evidence by Design