MCP MeasureMCP Measure

índice observado

cybershield

CyberShield - 12 cybersecurity tools: NIS2 mapping, MITRE ATT&CK, vulns, threat intel.

¿Debería usar esto?

Calidad y seguridad

A
Calidad de la descripción
96%
Integridad del esquema
70%
Calidad de los nombres
80%
Riesgo de envenenamiento
100%
Coincidencia de permisos
100%
Cumplimiento del protocolo
100%

Hallazgos (1)

  • LOWTool 'threat_landscape' description lacks action verben threat_landscape

Basado en el análisis automatizado de las definiciones de herramientas y el cumplimiento del protocolo.

Costo de contexto

~1,102Tokens (definiciones de herramientas)
~693 BTamaño de respuesta típico
Impacto moderado en la atención (0.86% del contexto de 128k)

Este es el número aproximado de tokens que se consumen cada vez que las herramientas del servidor se cargan en el contexto de un modelo. Los recuentos más altos reducen la atención disponible para otras tareas.

Instalar

Instalación con un clic

Agrega esto a tu archivo `claude_desktop_config.json`:

{
  "mcpServers": {
    "cybershield": {
      "url": "https://tooloracle.io/cybershield/mcp/"
    }
  }
}

Puntos de conexión remotos

https://tooloracle.io/cybershield/mcp/streamable-http

Qué puede hacer

Inventario de herramientas

Herramientas (12)

🟢 Solo lectura🟡 Escritura🔴 Eliminación⚪ Desconocido
⚪threat_landscape(sector)

Current cyber threat landscape overview per ENISA categories. Top 8 threats with sector relevance and mitigations.

Esquema de entrada

{
  "type": "object",
  "properties": {
    "sector": {
      "type": "string",
      "description": "energy|finance|healthcare|manufacturing|public_admin|general"
    }
  },
  "additionalProperties": false
}
⚪cve_risk_score(cve_id, cvss_score, epss_score, in_kev_catalog, public_exploit, ...)

CVE risk prioritization combining CVSS, EPSS, KEV catalog, exploit availability. Returns weighted priority score with patching SLA.

Esquema de entrada

{
  "type": "object",
  "properties": {
    "cve_id": {
      "type": "string"
    },
    "cvss_score": {
      "type": "number"
    },
    "epss_score": {
      "type": "number",
      "description": "0-1 EPSS probability"
    },
    "in_kev_catalog": {
      "type": "boolean"
    },
    "public_exploit": {
      "type": "boolean"
    },
    "internet_facing": {
      "type": "boolean"
    },
    "affected_systems": {
      "type": "integer"
    }
  },
  "additionalProperties": false
}
🟢attack_surface_check(web_applications, remote_access_vpn, cloud_services, iot_devices, employee_count)

Attack surface assessment checklist. Web apps, remote access, cloud, IoT, email. Prioritized security checks.

Esquema de entrada

{
  "type": "object",
  "properties": {
    "web_applications": {
      "type": "boolean"
    },
    "remote_access_vpn": {
      "type": "boolean"
    },
    "cloud_services": {
      "type": "boolean"
    },
    "iot_devices": {
      "type": "boolean"
    },
    "employee_count": {
      "type": "integer"
    }
  },
  "additionalProperties": false
}
🟢phishing_indicators(sender_email, subject, suspicious_url, creates_urgency, has_unexpected_attachment, ...)

Analyze email/URL for phishing indicators. Scores sender, urgency, attachments, URL patterns. Returns verdict and recommended actions.

Esquema de entrada

{
  "type": "object",
  "properties": {
    "sender_email": {
      "type": "string"
    },
    "subject": {
      "type": "string"
    },
    "suspicious_url": {
      "type": "string"
    },
    "creates_urgency": {
      "type": "boolean"
    },
    "has_unexpected_attachment": {
      "type": "boolean"
    },
    "asks_for_credentials": {
      "type": "boolean"
    }
  },
  "additionalProperties": false
}
⚪nis2_compliance(sector, employee_count, annual_turnover_meur, risk_management, incident_handling, ...)

NIS2 Directive (EU 2022/2555) compliance assessment. All 10 Art. 21 measures, entity classification, penalties, incident reporting.

Esquema de entrada

{
  "type": "object",
  "properties": {
    "sector": {
      "type": "string"
    },
    "employee_count": {
      "type": "integer"
    },
    "annual_turnover_meur": {
      "type": "number"
    },
    "risk_management": {
      "type": "boolean"
    },
    "incident_handling": {
      "type": "boolean"
    },
    "business_continuity": {
      "type": "boolean"
    },
    "supply_chain_security": {
      "type": "boolean"
    },
    "vulnerability_management": {
      "type": "boolean"
    },
    "cyber_hygiene_training": {
      "type": "boolean"
    },
    "cryptography_policy": {
      "type": "boolean"
    },
    "access_control": {
      "type": "boolean"
    },
    "mfa_deployed": {
      "type": "boolean"
    },
    "incident_reporting_process": {
      "type": "boolean"
    }
  },
  "additionalProperties": false
}
⚪nis2_incident_report(incident_type, severity, affected_services, affected_users_estimate, cross_border_impact)

NIS2 incident notification template. 24h early warning, 72h notification, 1-month final report templates.

Esquema de entrada

{
  "type": "object",
  "properties": {
    "incident_type": {
      "type": "string"
    },
    "severity": {
      "type": "string"
    },
    "affected_services": {
      "type": "string"
    },
    "affected_users_estimate": {
      "type": "integer"
    },
    "cross_border_impact": {
      "type": "boolean"
    }
  },
  "additionalProperties": false
}
⚪iso27001_gap(controls)

ISO 27001:2022 Annex A gap analysis. All 93 controls across 4 themes, new 2022 controls highlighted, certification process.

Esquema de entrada

{
  "type": "object",
  "properties": {
    "controls": {
      "type": "object",
      "description": "Optional: status of specific controls"
    }
  },
  "additionalProperties": false
}
⚪dora_ict_risk(ict_risk_framework, ict_asset_inventory, protection_prevention, detection_measures, response_recovery, ...)

DORA Art. 5-12 ICT risk management compliance check. 8 articles assessed with specific requirements per article.

Esquema de entrada

{
  "type": "object",
  "properties": {
    "ict_risk_framework": {
      "type": "boolean"
    },
    "ict_asset_inventory": {
      "type": "boolean"
    },
    "protection_prevention": {
      "type": "boolean"
    },
    "detection_measures": {
      "type": "boolean"
    },
    "response_recovery": {
      "type": "boolean"
    },
    "learning_evolving": {
      "type": "boolean"
    },
    "communication_plans": {
      "type": "boolean"
    }
  },
  "additionalProperties": false
}
⚪password_policy

Generate password policy per NIST SP 800-63B (2024) and BSI recommendations. Modern best practices — no forced rotation.

Esquema de entrada

{
  "type": "object",
  "properties": {},
  "additionalProperties": false
}
⚪incident_playbook(incident_type)

Incident response playbook for ransomware, data breach, phishing compromise. Phase-by-phase actions with legal obligations.

Esquema de entrada

{
  "type": "object",
  "properties": {
    "incident_type": {
      "type": "string",
      "description": "ransomware | data_breach | phishing_compromise"
    }
  },
  "additionalProperties": false
}
🟢risk_matrix(risks)

Risk assessment matrix (likelihood × impact). ISO 31000/27005 methodology. Provide risks for assessment or get template.

Esquema de entrada

{
  "type": "object",
  "properties": {
    "risks": {
      "type": "string",
      "description": "JSON array [{name, likelihood(1-5), impact(1-5)}]"
    }
  },
  "additionalProperties": false
}
🟡security_metrics

Security KPI/metrics dashboard template. MTTD, MTTR, patch compliance, phishing rate. Board-ready reporting guidance.

Esquema de entrada

{
  "type": "object",
  "properties": {},
  "additionalProperties": false
}

Comunidad

Califica este servidor

Evidencia

Observaciones recientes

verificadoversión no registrada12 herramientas
verificadoversión no registrada12 herramientas
verificadoversión no registrada12 herramientas