Contractoracle

What the contractoracle MCP server does

The contractoracle MCP server helps assess ICT third-party contracts under the Digital Operational Resilience Act (DORA). It stores contract records, checks required provisions, evaluates outsourcing risks, and highlights deadlines or missing information. The scope covers standard DORA Article 30 requirements as well as enhanced checks for contracts supporting Critical or Important Functions (CIFs).

The server is intended for contract and compliance workflows where an agent needs structured answers about a portfolio of ICT provider agreements. It does not replace legal review; its documented purpose is compliance assessment and risk identification.

How it works

Clients connect to the live MCP endpoint at https://tooloracle.io/contract/mcp/.

A contract can first be added or updated with its DORA-related details. Other tools then inspect one contract or the wider contract set. Clause checks compare a contract with mandatory Article 30 clauses, while CIF analysis applies the enhanced Article 30(3) review. Separate assessments cover subcontracting chains and exit strategies under Article 28(8).

Setup and configuration

The documented setup uses a remote MCP connection rather than a local repository build. In Claude Desktop, Cursor, or Windsurf, configure the server with npx and mcp-remote:

{
  "mcpServers": {
    "contractoracle": {
      "command": "npx",
      "args": ["-y", "mcp-remote", "https://tooloracle.io/contract/mcp/"]
    }
  }
}

The service has Free, Pro, and Enterprise tiers. Free access allows 10 calls per day and includes read-only assessment tools; Pro provides 1,000 calls per day for €99 per month, while Enterprise pricing is custom with unlimited calls.

Tools and capabilities

The contractoracle MCP server exposes these ten tools:

• register_contract adds or updates an ICT third-party contract and tracks DORA Article 30 requirements.
• list_contracts returns contracts with optional filters.
• clause_check checks standard and CIF contracts for mandatory Article 30 clauses.
• subcontracting_chain maps and assesses a contract’s subcontracting chain using the relevant RTS context.
• exit_readiness evaluates readiness of an Article 28(8) exit strategy.
• cif_analysis reviews contracts supporting Critical or Important Functions against enhanced Article 30(3) requirements.
• contract_gaps finds missing mandatory clauses across the contract portfolio.
• contract_scoring produces red-flag scores for exit risk, provider lock-in, jurisdiction, and subcontracting gaps.
• contract_expiry identifies upcoming expirations and renewal deadlines.
• health_check reports server status.

Limitations and notes

Free access is restricted to read-only assessment tools, so contract registration or other write operations may require a paid tier.

The service focuses on DORA contract controls, including Article 30, Article 28(8), CIF-related requirements, and subcontracting assessments. Use it for those documented checks rather than assuming it covers general contract law or every regulatory framework.