MCP MeasureMCP Measure

index observed

ampel

AmpelOracle — 50-tool compliance traffic-light: Go/Caution/Stop signals for ESG, MiCA, AML.

Should I use this

Quality & Safety

A
Description quality
91%
Schema completeness
82%
Naming quality
84%
Poisoning risk
100%
Permission match
100%
Protocol compliance
100%

Findings (7)

  • LOWTool 'gap_report' description lacks action verbin gap_report
  • LOWTool 'evidence_summary' description lacks action verbin evidence_summary
  • LOWTool 'create_entity' description lacks action verbin create_entity
  • LOWTool 'bridge_report' description lacks action verbin bridge_report
  • LOWTool 'azure_ad_check' description lacks action verbin azure_ad_check
  • LOWTool 'health_check' description lacks action verbin health_check
  • LOWTool 'bus_status' description lacks action verbin bus_status

Based on automated analysis of tool definitions and protocol compliance.

Context Cost

~4,357Tokens (tool definitions)
~648 BTypical response size
Significant attention impact (3.40% of 128k context)

This is the approximate number of tokens consumed each time the server's tools are loaded into a model's context. Higher counts reduce the attention available for other tasks.

Install

One-Click Install

Add this to your `claude_desktop_config.json` file:

{
  "mcpServers": {
    "ampel": {
      "url": "https://tooloracle.io/ampel/mcp/"
    }
  }
}

Remote endpoints

https://tooloracle.io/ampel/mcp/streamable-http

What it can do

Tool inventory

Tools (50)

🟢 Read-only🟡 Write🔴 Delete⚪ Unknown
🟢readiness_check(entity_id)

Full DORA readiness score + Ampel per article. Returns GREEN/YELLOW/RED/GREY for all 26 articles, score 0-100, days until deadline.

Input Schema

{
  "type": "object",
  "properties": {
    "entity_id": {
      "type": "string",
      "description": "Entity ID (optional)"
    }
  },
  "additionalProperties": false
}
🟢article_status(article, entity_id)

Detailed Ampel for a specific DORA article. Each check with GREEN/YELLOW/RED conditions and evidence.

Input Schema

{
  "type": "object",
  "properties": {
    "article": {
      "type": "string",
      "description": "e.g. Art. 28"
    },
    "entity_id": {
      "type": "string",
      "description": "Entity ID"
    }
  },
  "additionalProperties": false
}
⚪gap_report(entity_id)

DORA compliance gaps. RED/GREY/YELLOW items with priority and required actions.

Input Schema

{
  "type": "object",
  "properties": {
    "entity_id": {
      "type": "string",
      "description": "Entity ID (optional)"
    }
  },
  "additionalProperties": false
}
⚪evidence_summary(entity_id)

All evidence artefacts for an entity with hashes and expiry dates.

Input Schema

{
  "type": "object",
  "properties": {
    "entity_id": {
      "type": "string",
      "description": "Entity ID (optional)"
    }
  },
  "additionalProperties": false
}
⚪collect_art10(entity_id)

Collect live Art. 10 evidence from NVD, CISA KEV, CERT-Bund. Auto-assesses.

Input Schema

{
  "type": "object",
  "properties": {
    "entity_id": {
      "type": "string",
      "description": "Entity ID (optional)"
    }
  },
  "additionalProperties": false
}
🟢entity_list

List all registered regulated entities.

Input Schema

{
  "type": "object",
  "properties": {},
  "additionalProperties": false
}
🟡create_entity(name, entity_type, lei, jurisdiction)

Register a new regulated entity.

Input Schema

{
  "type": "object",
  "properties": {
    "name": {
      "type": "string",
      "description": "Entity name"
    },
    "entity_type": {
      "type": "string",
      "description": "Type"
    },
    "lei": {
      "type": "string"
    },
    "jurisdiction": {
      "type": "string"
    }
  },
  "additionalProperties": false
}
⚪audit_trail(entity_id, limit)

Chain-linked audit log with integrity check.

Input Schema

{
  "type": "object",
  "properties": {
    "entity_id": {
      "type": "string"
    },
    "limit": {
      "type": "integer",
      "description": "Max entries"
    }
  },
  "additionalProperties": false
}
⚪generate_report(entity_id, format)

Generate data-driven DORA Ampel PDF report. Score, gap analysis, provider register, audit trail integrity.

Input Schema

{
  "type": "object",
  "properties": {
    "entity_id": {
      "type": "string",
      "description": "Entity ID (optional)"
    },
    "format": {
      "type": "string",
      "description": "json (meta) or pdf (download)",
      "default": "json"
    }
  },
  "additionalProperties": false
}
🟢freshness_check(entity_id)

Run freshness watchdog. Expires stale evidence, downgrades GREEN->YELLOW->GREY if evidence too old.

Input Schema

{
  "type": "object",
  "properties": {
    "entity_id": {
      "type": "string",
      "description": "Entity ID (optional, checks all)"
    }
  },
  "additionalProperties": false
}
⚪bridge_report(entity_id)

Bridge gap analysis: classifies gaps by DATA/EVIDENCE/POLICY/WORKFLOW with closure path, owner, effort level.

Input Schema

{
  "type": "object",
  "properties": {
    "entity_id": {
      "type": "string",
      "description": "Entity ID (optional)"
    }
  },
  "additionalProperties": false
}
⚪register_provider(provider_name, provider_type, criticality, headquarters, lei, ...)

Register an ICT third-party provider for DORA Art. 28 Register of Information. Stores provider data and creates evidence.

Input Schema

{
  "type": "object",
  "properties": {
    "provider_name": {
      "type": "string",
      "description": "Provider name e.g. Amazon Web Services EMEA SARL"
    },
    "provider_type": {
      "type": "string",
      "description": "cloud_infrastructure, saas_application, core_banking, cybersecurity, etc."
    },
    "criticality": {
      "type": "string",
      "description": "critical, important, standard"
    },
    "headquarters": {
      "type": "string",
      "description": "Country e.g. Luxembourg, Germany"
    },
    "lei": {
      "type": "string",
      "description": "Legal Entity Identifier"
    },
    "services": {
      "type": "string",
      "description": "Services provided"
    },
    "data_location": {
      "type": "string",
      "description": "Where data is stored e.g. EU (Frankfurt)"
    },
    "contract_start": {
      "type": "string"
    },
    "contract_end": {
      "type": "string"
    },
    "annual_cost_eur": {
      "type": "number"
    },
    "substitutability": {
      "type": "string"
    },
    "certifications": {
      "type": "string"
    },
    "entity_id": {
      "type": "string"
    }
  },
  "additionalProperties": false
}
🟢check_contract(provider_id, standard_clauses, cif_clauses, is_cif, exit_strategy, ...)

Check DORA Art. 30 contract clauses for a provider. Returns PASS/WARN/BLOCK with missing clauses and bridge classification.

Input Schema

{
  "type": "object",
  "properties": {
    "provider_id": {
      "type": "string",
      "description": "Provider ID"
    },
    "standard_clauses": {
      "type": "array",
      "items": {
        "type": "string"
      },
      "description": "Present standard clauses: service_description, data_location, data_protection, service_availability_sla, incident_notification, audit_right, termination_notice, cooperation_with_authorities"
    },
    "cif_clauses": {
      "type": "array",
      "items": {
        "type": "string"
      },
      "description": "CIF clauses if applicable"
    },
    "is_cif": {
      "type": "boolean",
      "description": "Is this a CIF (Critical/Important Function) provider?"
    },
    "exit_strategy": {
      "type": "boolean",
      "description": "Exit strategy documented?"
    },
    "entity_id": {
      "type": "string"
    }
  },
  "additionalProperties": false
}
⚪assess_all(entity_id)

Re-run full assessment for an entity. Recomputes Ampel statuses from all available evidence.

Input Schema

{
  "type": "object",
  "properties": {
    "entity_id": {
      "type": "string",
      "description": "Entity ID (optional)"
    }
  },
  "additionalProperties": false
}
⚪onboard_entity(entity_id)

Full entity onboarding: creates initial RED assessments for all 39 checks, collects auto-evidence from live sources, re-assesses, and returns readiness score.

Input Schema

{
  "type": "object",
  "properties": {
    "entity_id": {
      "type": "string",
      "description": "Entity ID to onboard"
    }
  },
  "additionalProperties": false
}
⚪bridge_resolve(check_id, entity_id, expiry_days)

Start bridge resolution workflow. Generates templates (Risk Acceptance, Contract Renegotiation, Concentration Policy, Exit Strategy), tracks approval process. Call bridge_approve to sign off.

Input Schema

{
  "type": "object",
  "properties": {
    "check_id": {
      "type": "string",
      "description": "Check to resolve: art30_c1, art30_c2, art30_c3, art8_c3, art31_c1"
    },
    "entity_id": {
      "type": "string",
      "description": "Entity ID (optional)"
    },
    "expiry_days": {
      "type": "integer",
      "description": "Days until resolution expires (default 30)"
    }
  },
  "additionalProperties": false
}
⚪bridge_approve(resolution_id, approved_by, reject, rejection_reason)

Approve or reject a bridge resolution. On approval: creates signed evidence, upgrades Ampel to GREEN, logs to audit chain.

Input Schema

{
  "type": "object",
  "properties": {
    "resolution_id": {
      "type": "string",
      "description": "Resolution ID from bridge_resolve"
    },
    "approved_by": {
      "type": "string",
      "description": "Name + role of approver (e.g. Dr. Mueller, CISO)"
    },
    "reject": {
      "type": "boolean",
      "description": "Set true to reject instead of approve"
    },
    "rejection_reason": {
      "type": "string",
      "description": "Reason for rejection (if rejecting)"
    }
  },
  "additionalProperties": false
}
🟢bridge_status(entity_id)

Check status of all bridge resolution workflows for an entity. Shows open, pending, closed, rejected.

Input Schema

{
  "type": "object",
  "properties": {
    "entity_id": {
      "type": "string",
      "description": "Entity ID (optional)"
    }
  },
  "additionalProperties": false
}
⚪reg_watchdog(days_back)

AI Regulatory Watchdog: scrapes EBA/ESMA/BaFin/CERT-Bund for DORA updates. Returns alerts with affected articles and severity. Run daily via cron or on-demand.

Input Schema

{
  "type": "object",
  "properties": {
    "days_back": {
      "type": "integer",
      "description": "Check items from last N days (default: 7)"
    }
  },
  "additionalProperties": false
}
🟢azure_ad_check(force_refresh)

Live Azure AD integration: MFA registration %, risky users, conditional access policies. DORA Art. 9 evidence. Requires Azure AD config in integrations_config.json.

Input Schema

{
  "type": "object",
  "properties": {
    "force_refresh": {
      "type": "boolean",
      "description": "Force fresh API call (default true)"
    }
  },
  "additionalProperties": false
}
🟡servicenow_sync(days_back)

ServiceNow incident + change management sync. DORA Art. 17/21 evidence. Returns 30-day incident stats, classification, resolution rates.

Input Schema

{
  "type": "object",
  "properties": {
    "days_back": {
      "type": "integer",
      "description": "Days to look back (default 30)"
    }
  },
  "additionalProperties": false
}
🟢llm_clause_check(contract_text, provider_name)

LLM-based DORA Art. 30 contract analysis. Paste contract text, get clause-by-clause PRESENT/PARTIAL/MISSING for all 15 mandatory clauses. Uses Claude API.

Input Schema

{
  "type": "object",
  "properties": {
    "contract_text": {
      "type": "string",
      "description": "Contract text (plain text from PDF). Paste key sections."
    },
    "provider_name": {
      "type": "string",
      "description": "Provider name e.g. Salesforce"
    }
  },
  "additionalProperties": false
}
⚪cross_oracle_assess(entity_id, checks)

Enterprise cross-oracle assessment. Runs 18 checks across CyberShield (NIS2/ISO 27001), SupplyChainOracle (LkSG/CSRD), HealthGuard (MDR/GDPR), CFOCoPilot (XRechnung), TaxOracle (DAC6), LegalTechOracle (DORA contracts). Auto-stores evidence and updates Ampel status.

Input Schema

{
  "type": "object",
  "properties": {
    "entity_id": {
      "type": "string",
      "description": "Entity to assess"
    },
    "checks": {
      "type": "string",
      "description": "Comma-separated check IDs or omit for all"
    }
  },
  "additionalProperties": false
}
🟢health_check

Server + DB status.

Input Schema

{
  "type": "object",
  "properties": {},
  "additionalProperties": false
}
⚪ping

Quick connectivity test.

Input Schema

{
  "type": "object",
  "properties": {},
  "additionalProperties": false
}
⚪bus_status(entity_id)

Oracle Event Bus status: events, cross-refs, connected oracles.

Input Schema

{
  "type": "object",
  "properties": {
    "entity_id": {
      "type": "string",
      "description": "Entity ID for cross-refs"
    }
  },
  "additionalProperties": false
}
🟢escalation_status(entity_id)

Get findings, SLA breaches, escalation status per entity.

Input Schema

{
  "type": "object",
  "properties": {
    "entity_id": {
      "type": "string",
      "description": "Entity ID (empty=all)"
    }
  },
  "additionalProperties": false
}
🟡run_escalation

Trigger escalation engine: auto-create findings, check SLA, escalate.

Input Schema

{
  "type": "object",
  "properties": {},
  "additionalProperties": false
}
⚪whatif_provider(entity_id, provider_name)

Simulate provider failure: which articles/checks are affected, score impact, risk level.

Input Schema

{
  "type": "object",
  "properties": {
    "entity_id": {
      "type": "string",
      "description": "Entity ID"
    },
    "provider_name": {
      "type": "string",
      "description": "Provider name (e.g. AWS, Finastra)"
    }
  },
  "additionalProperties": false
}
🟢whatif_stale(entity_id, check_id, days)

Simulate stale evidence: what happens if a check stays stale for N days.

Input Schema

{
  "type": "object",
  "properties": {
    "entity_id": {
      "type": "string",
      "description": "Entity ID"
    },
    "check_id": {
      "type": "string",
      "description": "Check ID"
    },
    "days": {
      "type": "integer",
      "description": "Days stale (default 30)"
    }
  },
  "additionalProperties": false
}
⚪board_summary(entity_id)

Executive board summary: overall score, top 5 risks, overdue findings, SLA breaches, concentration risk, evidence health, owner workload. Designed for management/board reporting.

Input Schema

{
  "type": "object",
  "properties": {
    "entity_id": {
      "type": "string",
      "description": "Entity ID"
    }
  },
  "additionalProperties": false
}
🟡update_finding(finding_id, action, owner, remediation_plan, accepted_by, ...)

Update finding lifecycle: claim, set remediation plan, request re-test, close, or accept risk. Status flow: open -> in_progress -> retest_pending -> closed | risk_accepted.

Input Schema

{
  "type": "object",
  "properties": {
    "finding_id": {
      "type": "string",
      "description": "Finding ID"
    },
    "action": {
      "type": "string",
      "description": "claim | plan | request_retest | close | accept_risk"
    },
    "owner": {
      "type": "string",
      "description": "New owner (for claim)"
    },
    "remediation_plan": {
      "type": "string",
      "description": "Remediation plan text (for plan)"
    },
    "accepted_by": {
      "type": "string",
      "description": "Name (for accept_risk)"
    },
    "expiry_days": {
      "type": "integer",
      "description": "Risk acceptance expiry days (default 90)"
    },
    "reason": {
      "type": "string",
      "description": "Close reason (for close)"
    },
    "actor": {
      "type": "string",
      "description": "Who is performing this action"
    }
  },
  "additionalProperties": false
}
⚪retest_finding(finding_id)

Re-test a finding: collect fresh evidence, reassess check, auto-close if GREEN. Full closed-loop.

Input Schema

{
  "type": "object",
  "properties": {
    "finding_id": {
      "type": "string",
      "description": "Finding ID to re-test"
    }
  },
  "additionalProperties": false
}
⚪score_trend(entity_id)

Score trend over time: weekly deltas, trajectory, peer benchmark. Shows improvement or decline.

Input Schema

{
  "type": "object",
  "properties": {
    "entity_id": {
      "type": "string",
      "description": "Entity ID"
    }
  },
  "additionalProperties": false
}
⚪dependency_graph(entity_id)

Full provider dependency graph: providers, systems, checks, blast radius, SPOF detection.

Input Schema

{
  "type": "object",
  "properties": {
    "entity_id": {
      "type": "string",
      "description": "Entity ID"
    }
  },
  "additionalProperties": false
}
⚪incident_flow(entity_id, action, title, description, severity, ...)

DORA incident lifecycle: log, classify, notify (BaFin), close. Each step creates signed evidence.

Input Schema

{
  "type": "object",
  "properties": {
    "entity_id": {
      "type": "string",
      "description": "Entity ID"
    },
    "action": {
      "type": "string",
      "description": "log | classify | notify | close"
    },
    "title": {
      "type": "string"
    },
    "description": {
      "type": "string"
    },
    "severity": {
      "type": "string"
    },
    "incident_id": {
      "type": "string"
    },
    "classification": {
      "type": "string"
    },
    "report_type": {
      "type": "string"
    },
    "root_cause": {
      "type": "string"
    },
    "lessons_learned": {
      "type": "string"
    }
  },
  "additionalProperties": false
}
⚪evidence_pack(entity_id, article, check_id)

Export evidence pack for article/check/entity. Pruefer-ready: evidence, assessments, findings, audit trail, signatures.

Input Schema

{
  "type": "object",
  "properties": {
    "entity_id": {
      "type": "string",
      "description": "Entity ID"
    },
    "article": {
      "type": "string",
      "description": "DORA article e.g. Art. 10"
    },
    "check_id": {
      "type": "string",
      "description": "Specific check ID"
    }
  },
  "additionalProperties": false
}
⚪provider_country_risk(entity_id)

Enrich provider dependencies with OECD economic risk: GDP, unemployment, CLI per provider country. DORA Art. 28-31 relevant.

Input Schema

{
  "type": "object",
  "properties": {
    "entity_id": {
      "type": "string",
      "description": "Entity ID"
    }
  },
  "additionalProperties": false
}
🟡contract_upload(entity_id, provider_name, contract_text, file_name, document_type)

Upload contract text for DORA Art. 30 analysis. Creates document record with SHA-256 hash, version tracking, audit trail.

Input Schema

{
  "type": "object",
  "properties": {
    "entity_id": {
      "type": "string",
      "description": "Entity ID"
    },
    "provider_name": {
      "type": "string",
      "description": "Provider name"
    },
    "contract_text": {
      "type": "string",
      "description": "Contract text (extracted from PDF)"
    },
    "file_name": {
      "type": "string",
      "description": "Original file name"
    },
    "document_type": {
      "type": "string",
      "description": "ict_outsourcing_agreement | dpa | sla | master_service_agreement"
    }
  },
  "additionalProperties": false
}
🟢contract_analyze(document_id)

Analyze contract against 15 DORA Art. 30 mandatory clauses. Returns compliance status per clause with confidence score, extracted text, gap reasoning, suggested fix.

Input Schema

{
  "type": "object",
  "properties": {
    "document_id": {
      "type": "string",
      "description": "Document ID from contract_upload"
    }
  },
  "additionalProperties": false
}
⚪contract_status(entity_id)

Overview of all analyzed contracts per entity. Shows clause gaps, review status, document versions.

Input Schema

{
  "type": "object",
  "properties": {
    "entity_id": {
      "type": "string",
      "description": "Entity ID"
    }
  },
  "additionalProperties": false
}
🟢cross_regulation_check(entity_id)

Tag findings with cross-regulation impact (DORA + MiCA + AMLR). Shows which DORA findings also affect MiCA insider info or AMLR screening.

Input Schema

{
  "type": "object",
  "properties": {
    "entity_id": {
      "type": "string",
      "description": "Entity ID"
    }
  },
  "additionalProperties": false
}
🟢regulation_impact(dora_article)

Show cross-regulation impacts for a specific DORA article. Maps DORA → MiCA + AMLR.

Input Schema

{
  "type": "object",
  "properties": {
    "dora_article": {
      "type": "string",
      "description": "DORA article ID (e.g. dora_art28)"
    }
  },
  "additionalProperties": false
}
⚪bafin_report_draft(entity_id, incident_id, report_type, title, description, ...)

Generate ITS 2024/1772 compliant BaFin incident report draft. All mandatory fields per DORA Art. 19/20. Preview mode — requires board approval.

Input Schema

{
  "type": "object",
  "properties": {
    "entity_id": {
      "type": "string"
    },
    "incident_id": {
      "type": "string"
    },
    "report_type": {
      "type": "string",
      "description": "initial | intermediate | final"
    },
    "title": {
      "type": "string"
    },
    "description": {
      "type": "string"
    },
    "classification": {
      "type": "string",
      "description": "major | significant | minor"
    },
    "affected_services": {
      "type": "string"
    },
    "affected_clients": {
      "type": "string"
    },
    "root_cause": {
      "type": "string"
    },
    "remediation": {
      "type": "string"
    }
  },
  "additionalProperties": false
}
🟡bafin_approve_send(entity_id, report_id, approver_name, approver_role)

Approve BaFin report for submission (4-eyes principle). Creates signed approval evidence.

Input Schema

{
  "type": "object",
  "properties": {
    "entity_id": {
      "type": "string"
    },
    "report_id": {
      "type": "string"
    },
    "approver_name": {
      "type": "string"
    },
    "approver_role": {
      "type": "string"
    }
  },
  "additionalProperties": false
}
⚪cve_asset_map(entity_id, cve_id, vendor)

Map CVE/vulnerability to internal ICT providers and systems. Auto-creates findings for critical matches. DORA Art. 10.

Input Schema

{
  "type": "object",
  "properties": {
    "entity_id": {
      "type": "string"
    },
    "cve_id": {
      "type": "string",
      "description": "CVE identifier"
    },
    "vendor": {
      "type": "string",
      "description": "Vendor/software name to check"
    }
  },
  "additionalProperties": false
}
⚪policy_draft(entity_id, dora_article)

Generate DORA policy/framework document draft for a specific article. 8 templates available (Art. 5,6,8,10,11,17,28,30). Uses entity data for customization.

Input Schema

{
  "type": "object",
  "properties": {
    "entity_id": {
      "type": "string"
    },
    "dora_article": {
      "type": "string",
      "description": "dora_art5|dora_art6|dora_art8|dora_art10|dora_art11|dora_art17|dora_art28|dora_art30"
    }
  },
  "additionalProperties": false
}
🟡create_trial(entity_name, entity_type, jurisdiction, providers)

Create temporary trial entity (48h) for self-service DORA assessment. No login needed.

Input Schema

{
  "type": "object",
  "properties": {
    "entity_name": {
      "type": "string",
      "description": "Institute name"
    },
    "entity_type": {
      "type": "string",
      "description": "credit_institution|payment_institution|insurance_undertaking|asset_management|credit_institution_casp"
    },
    "jurisdiction": {
      "type": "string",
      "description": "DE|AT|FR|etc"
    },
    "providers": {
      "type": "string",
      "description": "Comma-separated provider names: AWS,SWIFT,Finastra",
      "enum": [
        "AWS",
        "SWIFT"
      ]
    }
  },
  "additionalProperties": false
}
⚪run_trial_assessment(trial_id, entity_id)

Run complete DORA+MiCA assessment for trial entity. Returns score, gaps, automation potential.

Input Schema

{
  "type": "object",
  "properties": {
    "trial_id": {
      "type": "string"
    },
    "entity_id": {
      "type": "string"
    }
  },
  "additionalProperties": false
}
⚪generate_trial_report(trial_id, entity_id)

Generate watermarked trial report with score, gaps, and CTA.

Input Schema

{
  "type": "object",
  "properties": {
    "trial_id": {
      "type": "string"
    },
    "entity_id": {
      "type": "string"
    }
  },
  "additionalProperties": false
}

Community

Rate this Server

Evidence

Recent observations

verifiedversion not recorded50 tools
verifiedversion not recorded50 tools
verifiedversion not recorded50 tools
verifiedversion not recorded50 tools
verifiedversion not recorded50 tools
verifiedversion not recorded50 tools