io. tooloracle/ cloudoracle
by tooloracle.io · remote · no sign-in to list tools · v1.0.0 · published by io.tooloracle
CloudOracle - 14-tool multi-cloud compliance MCP: AWS, Azure, GCP posture, IAM, configs.
14 tools: 10 change things and 4 only read.
Scanned Oct 21, 2026
- Deletes or cancels0Claude Code: deny
- Can't be undone0Claude Code: ask
- Changes things10Claude Code: ask: see these tools
- Only reads4Claude Code: allow: see these tools
No check matched anything in the tool definitions. No finding is not a safety guarantee. How the checks work.
claude mcp add --transport http cloudoracle https://tooloracle.io/cloud/mcp/Tools
Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.
14 tools
Changes things 10Claude Code: ask
cloud_incidentsActive + recent cloud incidents with timeline.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Active + recent cloud incidents with timeline.
concentration_riskConcentration risk: which providers host critical functions?No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Concentration risk: which providers host critical functions? SPOF analysis.
ctpp_checkIs provider a Critical Third-Party Provider under Art.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Is provider a Critical Third-Party Provider under Art. 31?
health_checkServer status.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Server status.
notification_checkCheck Art.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Check Art. 30 contract clause compliance per provider.
obligation_mapCloud monitoring obligations with cross-jurisdiction equivalents.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Cloud monitoring obligations with cross-jurisdiction equivalents.
outage_impactSimulate: what happens if provider X goes down?No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Simulate: what happens if provider X goes down? Affected services + DORA actions.
provider_dashboardAll providers for an entity with live cloud status + risk assessment.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it All providers for an entity with live cloud status + risk assessment.
sla_checkSLA compliance per provider — Art.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it SLA compliance per provider — Art. 30 contract clause verification.
sync_to_ampelPush cloud risk to AmpelOracle Art.No findings
Why it is in this group
- The name "sync_to_ampel" says "sync": a word for a change.
Description, as the server wrote it Push cloud risk to AmpelOracle Art. 28 checks.
Only reads 4Claude Code: allow
cloud_statusLive status of AWS, GCP, Azure — active incidents, recent events, EU regions.No findings
Why it is in this group
- The name "cloud_status" says "status": a word for reading.
Description, as the server wrote it Live status of AWS, GCP, Azure — active incidents, recent events, EU regions.
pingConnectivity test.No findings
Why it is in this group
- The name "ping" says "ping": a word for reading.
Description, as the server wrote it Connectivity test.
region_statusCloud region status — EU regions for DORA data residency.No findings
Why it is in this group
- The name "region_status" says "status": a word for reading.
Description, as the server wrote it Cloud region status — EU regions for DORA data residency.
saas_statusSaaS provider status: Cloudflare, GitHub, Datadog.No findings
Why it is in this group
- The name "saas_status" says "status": a word for reading.
Description, as the server wrote it SaaS provider status: Cloudflare, GitHub, Datadog.
This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.
Install
Pinned to version 1.0.0. Values in angle brackets are yours to fill in.
claude mcp add --transport http cloudoracle https://tooloracle.io/cloud/mcp/Run in a terminal.
Claude Code permissions
Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.
{
"permissions": {
"allow": [
"mcp__cloudoracle__cloud_status",
"mcp__cloudoracle__region_status",
"mcp__cloudoracle__saas_status",
"mcp__cloudoracle__ping"
],
"ask": [
"mcp__cloudoracle__cloud_incidents",
"mcp__cloudoracle__concentration_risk",
"mcp__cloudoracle__sla_check",
"mcp__cloudoracle__provider_dashboard",
"mcp__cloudoracle__outage_impact",
"mcp__cloudoracle__ctpp_check",
"mcp__cloudoracle__notification_check",
"mcp__cloudoracle__obligation_map",
"mcp__cloudoracle__sync_to_ampel",
"mcp__cloudoracle__health_check"
],
"deny": []
}
}Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as cloudoracle. Review it before you use it.