Back to Browse

Dora Compliance MCP Server

SecurityUse Caution3.8MCP RegistryLocal
Free

Server data from the Official MCP Registry

DORA (EU Digital Operational Resilience Act) compliance for AI agents. 5-pillar audit, incident ...

About

DORA (EU Digital Operational Resilience Act) compliance for AI agents. 5-pillar audit, incident ...

Security Report

3.8
Use Caution3.8High Risk

This MCP server provides DORA compliance auditing tools with generally sound security practices, but has several concerning patterns around payment handling, external API calls, and potential data exfiltration through attestation signing. Authentication is present but inconsistently enforced across tools. The server's pay-per-call billing mechanism introduces external network dependencies that could fail or be exploited. While the code is well-structured and documented, the combination of unauthenticated tool access, external API calls for attestation signing, and environment variable handling for sensitive credentials warrants caution. Supply chain analysis found 5 known vulnerabilities in dependencies (0 critical, 5 high severity). Package verification found 1 issue.

3 files analyzed · 16 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

env_vars

Check that this permission is expected for this type of plugin.

HTTP Network Access

Connects to external APIs or services over the internet.

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-csoai-org-dora-compliance-mcp": {
      "args": [
        "dora-compliance-mcp"
      ],
      "command": "uvx"
    }
  }
}

Reviews

No reviews yet

Be the first to review this server!