Skip to content

io.tooloracle/governanceoracle

by tooloracle.io · remote · no sign-in to list tools · v1.0.0 · published by io.tooloracle

GovernanceOracle - 10 governance tools: board packs, policies, attestations, evidence.

Changes · 8
CompareRegistry entry

11 tools: 8 change things and 3 only read.

Scanned Oct 21, 2026

No check matched anything in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http governanceoracle https://tooloracle.io/governance/mcp/

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

11 tools

Changes things 8Claude Code: ask
  • action_trackerTrack remediation actions with deadlines and ownership.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Track remediation actions with deadlines and ownership.
  • annual_reviewAnnual framework review evidence bundle — checklist, stats, Art.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Annual framework review evidence bundle — checklist, stats, Art. 6(5) compliance.
  • board_reportGenerate Management Body review pack — executive summary, open findings, risk posture, overdue items.No findings

    Why it is in this group

    • The description's first verb is "generate": a word for a change.
    Description, as the server wrote it
    Generate Management Body review pack — executive summary, open findings, risk posture, overdue items.
  • board_report_llmAI-powered board executive summary using local Gemma 4 LLM.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    AI-powered board executive summary using local Gemma 4 LLM. Generates narrative summary from current findings in German or English.
  • framework_reviewICT Risk Management Framework annual review — effectiveness assessment per DORA area.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    ICT Risk Management Framework annual review — effectiveness assessment per DORA area.
  • health_checkServer status.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Server status.
  • kpi_dashboardICT Risk KPIs — open findings, overdue rate, remediation rate, exception count.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    ICT Risk KPIs — open findings, overdue rate, remediation rate, exception count.
  • register_findingRegister an audit finding, risk, or control gap.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Register an audit finding, risk, or control gap.
Only reads 3Claude Code: allow
  • control_statusControl effectiveness dashboard across all DORA control domains.No findings

    Why it is in this group

    • The name "control_status" says "status": a word for reading.
    Description, as the server wrote it
    Control effectiveness dashboard across all DORA control domains.
  • exception_registerView or add risk acceptances / exceptions with expiry tracking.No findings

    Why it is in this group

    • The description's first verb is "view": a word for reading.
    Description, as the server wrote it
    View or add risk acceptances / exceptions with expiry tracking.
  • list_findingsList findings with optional filters.No findings

    Why it is in this group

    • The name "list_findings" says "list": a word for reading.
    Description, as the server wrote it
    List findings with optional filters.

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 1.0.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http governanceoracle https://tooloracle.io/governance/mcp/

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__governanceoracle__list_findings",
      "mcp__governanceoracle__control_status",
      "mcp__governanceoracle__exception_register"
    ],
    "ask": [
      "mcp__governanceoracle__register_finding",
      "mcp__governanceoracle__board_report",
      "mcp__governanceoracle__framework_review",
      "mcp__governanceoracle__action_tracker",
      "mcp__governanceoracle__kpi_dashboard",
      "mcp__governanceoracle__annual_review",
      "mcp__governanceoracle__board_report_llm",
      "mcp__governanceoracle__health_check"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as governanceoracle. Review it before you use it.