dora-compliance-mcp 1.2.9

DORA (EU Digital Operational Resilience Act) compliance for AI agents. 5-pillar audit, incident classification, Article 28 Register of Information, TLPT readiness. Regulation (EU) 2022/2554. By MEOK AI Labs.

DORA Compliance MCP

EU Digital Operational Resilience Act (DORA) Compliance — 5-Pillar Audit, Incident Classification, TLPT

Overview

Full compliance automation for the EU Digital Operational Resilience Act (Regulation 2022/2554). Covers all 5 pillars: ICT Risk Management, Incident Reporting, Digital Operational Resilience Testing, ICT Third-Party Risk, and Information Sharing.

Tools

Tool	Description	Parameters
audit_dora	Full 5-pillar DORA compliance audit	pillar, controls, entity_type
classify_ict_incident	Classify ICT incidents per Article 19 criteria	incident_type, impact, severity
assess_third_party_risk	Assess ICT third-party risk per Articles 28-30	provider_name, service_criticality, contract_type
generate_register_of_info	Generate Article 28 Register of Information entry	third_party_name, service_category, contract_ref
tlpt_readiness	Assess TLPT (Threat-Led Penetration Testing) readiness	entity_type, current_testing, scope
digital_resilience_score	Calculate overall digital resilience score	findings, pillar_scores
incident_reporting_timeline	Get incident reporting deadlines by severity	severity, entity_type
contract_clause_checker	Check third-party contracts for DORA compliance	contract_clauses
gap_analysis	Full DORA gap analysis with remediation plan	current_state, entity_type

Installation

pip install mcp

Claude Desktop

{
  "mcpServers": {
    "dora-compliance": {
      "command": "python",
      "args": ["path/to/server.py"]
    }
  }
}

Cursor / VS Code / Windsurf

{
  "mcpServers": {
    "dora-compliance": {
      "command": "python",
      "args": ["path/to/server.py"]
    }
  }
}

Usage Examples

<<<<<<< Updated upstream MIT © MEOK AI Labs

=======

Run a full DORA audit

{
  "pillar": "ict_risk_management",
  "controls": ["incident response plan exists", "backups configured", "no formal testing"],
  "entity_type": "financial"
}

Assess third-party risk

{
  "provider_name": "AWS",
  "service_criticality": "critical",
  "contract_type": "cloud_infrastructure"
}

Pricing

• Free: 10 audits/day
• Pro: $99/mo — unlimited audits + reports
• Enterprise: $499/mo — full TLPT + third-party register

---

Built by MEOK AI Labs | meok.ai

Stashed changes