Log inSubmit server
Incidentoracle logo

Incidentoracle

IncidentOracle - 12-tool incident management MCP: triage, BaFin DORA reporting, RCA.

InstallRepositoryWebsite
Full README Compare alternatives Embed widget Claim this listing

Install Incidentoracle

Pick your client, then add it in one click or paste the config.

No confirmed install command yet

We only publish a config when the install details come from the project itself — its README, its docs, or a verified owner. We haven’t found those for incidentoracle, and we’d rather show nothing than a guess you’d paste into your client.

Open setup steps on GitHub

Overview

Tools12

What Incidentoracle lets your agent do. Expand a tool for its parameters.

Self-reported~251 tokens of context

Security & health

What it can reach and how reliably it runs — from our own checks, not the maintainer’s claims.

ActiveLast checked 1d ago

Recent health check succeeded.

6/6 checks healthy over the last 39d

Supply-chain signal

1 high-severity advisory on record for this package. Most advisories affect transitive dependencies and may not be exploitable in this server's actual usage — this is a directional signal, not a security audit.

Critical 1High 0Medium 0Low 0

Scanned 9/18/2026 via OSV.dev

Adoption & maintenance

Factual signals from GitHub, npm, and our automated checks — not a rating.

Last commit6mo agoMost recent push to the default branch.
Tools exposed12Callable tools this server registers over MCP.
Directory activity1 viewsConfig copies, upvotes, and views on AllMCPs.

From the project README

🚨 incidentOracle

DORA Execution MCP Server — 12 tools | Part of ToolOracle

Tools Status Tier Bus

Quick Connect

bash
# Claude Desktop / Cursor / Windsurf
npx -y mcp-remote https://tooloracle.io/incident/mcp/
json
// claude_desktop_config.json
{
  "mcpServers": {
    "incidentoracle": {
      "command": "npx",
      "args": ["-y", "mcp-remote", "https://tooloracle.io/incident/mcp/"]
    }
  }
}

Tools (12)

ToolDescription
log_incidentLog a new ICT-related incident. First step in the DORA incident management proce
classify_incidentClassify an incident against the 6 DORA criteria (RTS 2024/1772).
major_incident_checkQuick check: would these criteria values classify as a MAJOR incident?
initial_notificationGenerate the 4h initial notification for a MAJOR incident (ITS 2025/302 Annex I)
intermediate_reportGenerate the 72h intermediate report for a MAJOR incident (ITS 2025/302).
final_reportGenerate the 1-month final report with root cause analysis and lessons learned.
deadline_trackerTrack all active MAJOR incident reporting deadlines. Shows overdue and upcoming.
reclassifyReclassify an incident (MAJOR to NON-MAJOR or vice versa).
incident_statsDashboard: total/open/major incidents, overdue deadlines, by severity/status.
cyber_threat_notifyVoluntary notification of a significant cyber threat (Art. 19(2)).
incident_logFull incident register with filters (status, classification, severity, search).
health_checkServer status.

Pricing

TierRate LimitPrice
Free10 calls/day€0
Pro1,000 calls/day€99/month
EnterpriseUnlimitedCustom

Note: This is a compliance oracle. Full tool access requires a Pro or Enterprise subscription. Free tier includes read-only assessment tools.

Part of ToolOracle

incidentOracle is one of 42 specialized MCP servers in the ToolOracle ecosystem — the largest collection of production-ready MCP tools for AI agents.

DORA Coverage

Related Oracles:

  • FeedOracle — Evidence-grade compliance data infrastructure
  • ToolOracle — 42 Oracles, 390+ MCP Tools

Links

Built by FeedOracle — Evidence by Design

Read the full README View source on GitHub

Reviews

No reviews yet — be the first to share how it worked for you.

Frequently Asked Questions about Incidentoracle

incidentoracle is an MCP server that provides 12-tool incident management workflows for logging and classifying ICT incidents, checking major-incident status, tracking deadlines, and generating DORA notifications and reports. It also supports reclassification, cyber-threat notification, incident-log search, statistics, and health checks. Connect via mcp-remote at https://tooloracle.io/incident/mc…

Connect incidentoracle by running `npx -y mcp-remote https://tooloracle.io/incident/mcp/` or adding an MCP server entry that uses `npx` with arguments `-y`, `mcp-remote`, and the incidentoracle endpoint URL.

incidentoracle provides tools for logging, classifying, reclassifying, and searching incidents; checking whether an incident is major; generating initial, intermediate, and final DORA reports; tracking deadlines; notifying significant cyber threats; viewing statistics; and checking server health.

Yes, incidentoracle generates the 4-hour initial notification, 72-hour intermediate report, and one-month final report for major incidents, and its deadline_tracker tool shows active major-incident reporting deadlines, including overdue and upcoming deadlines.

incidentoracle offers a Free tier with 10 calls per day, a Pro tier with 1,000 calls per day at €99 per month, and an Enterprise tier with unlimited calls at custom pricing. Full tool access requires Pro or Enterprise; the Free tier includes read-only assessment tools.

Related MCP servers

All in Support & Service Management All alternatives
Add a badge to your READMEShow it’s listed — live SVG, Markdown or HTML.

AllMCPs Directory Badge

Full Badge Customizer

Showcase your server listing on GitHub or your project documentation. Embed this dynamic SVG badge to highlight official listing status and live engagement.

Badge Style:
Live Dynamic SVG PreviewIncidentoracle AllMCPs Directory Badge
Markdown (GitHub README)
[![AllMCPs](https://allmcps.com/api/badge/incidentoracle?style=directory)](https://allmcps.com/mcp/incidentoracle)
HTML Embed
<a href="https://allmcps.com/mcp/incidentoracle"><img src="https://allmcps.com/api/badge/incidentoracle?style=directory" alt="Incidentoracle on AllMCPs" /></a>