io.tooloracle/incidentoracle
IncidentOracle - 12-tool incident management MCP: triage, BaFin DORA reporting, RCA.
Install
Add this to your client's MCP configuration (Claude Desktop: claude_desktop_config.json; Cursor: .cursor/mcp.json; VS Code and others use the same "mcpServers" shape).
claude mcp add --transport http incidentoracle 'https://tooloracle.io/incident/mcp/'{
"mcpServers": {
"incidentoracle": {
"type": "http",
"url": "https://tooloracle.io/incident/mcp/"
}
}
}Documentation
From the project's README on GitHub, refreshed weekly. Links open on GitHub.
🚨 incidentOracle
DORA Execution MCP Server — 12 tools | Part of ToolOracle
Quick Connect
# Claude Desktop / Cursor / Windsurf
npx -y mcp-remote https://tooloracle.io/incident/mcp/// claude_desktop_config.json
{
"mcpServers": {
"incidentoracle": {
"command": "npx",
"args": ["-y", "mcp-remote", "https://tooloracle.io/incident/mcp/"]
}
}
}Tools (12)
| Tool | Description |
|---|---|
log_incident | Log a new ICT-related incident. First step in the DORA incident management proce |
classify_incident | Classify an incident against the 6 DORA criteria (RTS 2024/1772). |
major_incident_check | Quick check: would these criteria values classify as a MAJOR incident? |
initial_notification | Generate the 4h initial notification for a MAJOR incident (ITS 2025/302 Annex I) |
intermediate_report | Generate the 72h intermediate report for a MAJOR incident (ITS 2025/302). |
final_report | Generate the 1-month final report with root cause analysis and lessons learned. |
deadline_tracker | Track all active MAJOR incident reporting deadlines. Shows overdue and upcoming. |
reclassify | Reclassify an incident (MAJOR to NON-MAJOR or vice versa). |
incident_stats | Dashboard: total/open/major incidents, overdue deadlines, by severity/status. |
cyber_threat_notify | Voluntary notification of a significant cyber threat (Art. 19(2)). |
incident_log | Full incident register with filters (status, classification, severity, search). |
health_check | Server status. |
Pricing
| Tier | Rate Limit | Price |
|---|---|---|
| Free | 10 calls/day | €0 |
| Pro | 1,000 calls/day | €99/month |
| Enterprise | Unlimited | Custom |
Note: This is a compliance oracle. Full tool access requires a Pro or Enterprise subscription. Free tier includes read-only assessment tools.
Part of ToolOracle
incidentOracle is one of 42 specialized MCP servers in the ToolOracle ecosystem — the largest collection of production-ready MCP tools for AI agents.
DORA Coverage
Related Oracles:
- FeedOracle — Evidence-grade compliance data infrastructure
- ToolOracle — 42 Oracles, 390+ MCP Tools
Links
- 🌐 Live:
https://tooloracle.io/incident/mcp/ - 📚 Docs: tooloracle.io/docs
- 🏠 Platform: tooloracle.io
Built by FeedOracle — Evidence by Design
Frequently asked questions
What is io.tooloracle/incidentoracle?
IncidentOracle - 12-tool incident management MCP: triage, BaFin DORA reporting, RCA.
How do I install io.tooloracle/incidentoracle?
It runs as a remote server. In Claude Code: claude mcp add --transport http incidentoracle 'https://tooloracle.io/incident/mcp/'. For other clients, paste the JSON configuration from this page into their MCP settings.
Does io.tooloracle/incidentoracle need an API key?
Its registry entry lists no required key or secret. Some features may still need an account with the service it connects to.
Is io.tooloracle/incidentoracle open source?
Its code is public on GitHub, but the repository does not declare a standard license.
Who maintains io.tooloracle/incidentoracle?
It is published by ToolOracle. AI.tn lists it but does not maintain or endorse it.
From the official MCP Registry. Listing is not an endorsement: review a server's code and permissions before giving it access to your data.