{"$schema":"https://wellknown.network/schemas/agent-record-v1.json","schemaVersion":"1","id":"ag_wmv2yww7un7n","handle":"mcp-dora","url":"https://wellknown.network/agents/mcp-dora","links":{"self":"https://wellknown.network/agents/mcp-dora/record.json","html":"https://wellknown.network/agents/mcp-dora","markdown":"https://wellknown.network/agents/mcp-dora/record.md","api":"https://wellknown.network/api/v1/agents/mcp-dora","status":"https://wellknown.network/api/v1/agents/mcp-dora/status","claim":"https://wellknown.network/agents/mcp-dora/claim","claimApi":"https://wellknown.network/api/v1/claims","claimDescriptor":"https://wellknown.network/agents/mcp-dora/claim.json","badge":"https://wellknown.network/agents/mcp-dora/badge.svg","openapi":"https://wellknown.network/openapi.json","history":"https://wellknown.network/api/v1/agents/mcp-dora/history","tools":"https://wellknown.network/api/v1/agents/mcp-dora/tools"},"ard":{"identifier":"urn:air::server:mcp-dora","type":"application/mcp-server-card+json"},"kind":"mcp_server","declared":{"name":"mcp-dora","summary":"DORA compliance scanner as an MCP server — scans projects for Digital Operational Resilience Act gaps","description":"# mcp-dora — DORA Compliance Scanner\n\n**Digital Operational Resilience Act (EU) 2022/2554** compliance scanner as an MCP server.\n\nDORA has been in force since **January 17, 2025**. It applies to banks, payment institutions, investment firms, crypto CASPs, insurers, and ICT service providers operating in the EU.\n\n[![PyPI version](https://img.shields.io/pypi/v/mcp-dora)](https://pypi.org/project/mcp-dora/)\n[![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](LICENSE)\n\n---\n\n## Quick Install\n\n```bash\npip install mcp-dora\n```\n\nAdd to your Claude Desktop config (`~/.claude/claude_desktop_config.json`):\n\n```json\n{\n  \"mcpServers\": {\n    \"dora\": {\n      \"command\": \"python3\",\n      \"args\": [\"-m\", \"mcp_dora\"],\n      \"env\": {}\n    }\n  }\n}\n```\n\nOr use the CLI:\n\n```bash\ndora-scanner /path/to/project --entity credit_institution\n```\n\n---\n\n## 7 Tools\n\n| Tool | DORA Articles | Plan |\n|------|--------------|------|\n| `scan_project` | Art.9, 10, 11, 17, 24, 25, 28, 31 | Free |\n| `classify_entity` | All | Free |\n| `assess_organization` | Art.5, 6, 11, 17, 18, 19, 26, 28, 30, 31 | Free |\n| `generate_report` | Combined | Free |\n| `generate_ict_register` | **Art.31** | Pro |\n| `generate_incident_template` | **Art.17-18** | Pro |\n| `certify_report` | All | Certified |\n\n### `scan_project`\n\nScans source code for DORA compliance gaps:\n\n- **Art. 9** — Hardcoded credentials, missing secrets management\n- **Art. 10 + 17** — Mutable logging files (tamper-prone incident records)\n- **Art. 11** — Missing retry logic and circuit breakers for external calls\n- **Art. 24 + 25** — Missing security testing tooling (bandit, semgrep, safety)\n- **Art. 28 + 31** — ICT third-party dependencies (AWS, Stripe, Kafka, etc.)\n\n### `classify_entity`\n\nReturns all DORA articles applicable to your entity type:\n\n```\ncredit_institution | payment_institution | e_money_institution\ninvestment_firm | crypto_casp | insurance_undertaking\nict_provider | trading_venue | central_counterparty\n```\n\n### `assess_organ…","publisher":null,"homepage":"https://mcp.arkforge.tech/en/mcp-dora.html?utm_source=pypi","repository":"https://github.com/ark-forge/mcp-dora","version":"1.0.0","license":null,"protocols":["mcp"],"tags":["dora","digital","operational","resilience","act","ict","risk","mcp","banking","compliance","eu-regulation","financial-regulation","fintech","trust-layer"],"pricing":null,"endpoints":[{"url":"pypi:mcp-dora","type":"package_pypi","auth":null,"probeable":false}],"skills":null,"tools":null,"extra":null,"attribution":{"kind":"pypi","name":"pypi","repoUrl":"pypi","summary":"pypi","version":"pypi","description":"pypi","homepageUrl":"pypi"}},"derived":{"capabilities":[{"slug":"finance.banking","name":"Banking","confidence":1,"provenance":"declared"},{"slug":"security.secrets","name":"Secrets Management","confidence":0.848,"provenance":"derived"},{"slug":"dev.package-management","name":"Packages & Dependencies","confidence":0.825,"provenance":"derived"},{"slug":"security.scanning","name":"Security Scanning","confidence":0.802,"provenance":"derived"},{"slug":"commerce.payments","name":"Payments","confidence":0.791,"provenance":"derived"},{"slug":"finance.markets","name":"Markets & Trading","confidence":0.791,"provenance":"derived"}],"categories":["commerce","dev","finance","security"],"language":"en"},"observed":{"status":"unknown","statusReason":"Distributed as a package to run locally; no network endpoint to check.","lastOkAt":null,"lastProbedAt":null,"statusComputedAt":null,"reliability30d":null,"latestObservations":[],"tools":null,"package":{"name":"mcp-dora","registry":"pypi","observedAt":"2026-11-03T13:26:33.139Z","publishedAt":"2026-04-08T20:19:26.225108Z","latestVersion":"1.0.0"},"toolSurface":null,"endpointFacts":[]},"verification":{"claimed":false,"claimedAt":null,"proofs":[]},"provenance":{"sources":[{"source":"pypi","key":"mcp-dora","url":"https://pypi.org/project/mcp-dora/","firstSeenAt":"2026-09-10T01:20:13.572Z","fetchedAt":"2026-11-03T13:24:43.672Z","normalizedAt":"2026-11-03T13:24:43.672Z"}]},"firstSeenAt":"2026-09-10T01:20:13.572Z","updatedAt":"2026-11-03T13:26:33.139Z"}