Skip to content

io.tooloracle/reporting

by tooloracle.io · remote · no sign-in to list tools · v1.0.0 · published by io.tooloracle

ReportingOracle — 16 regulatory reporting tools: BaFin, ESMA, FINREP, COREP, ICAAP, ILAAP.

Changes · 11
CompareRegistry entry

16 tools: 11 change things and 5 only read.

Scanned Oct 21, 2026

No check matched anything in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http reporting https://tooloracle.io/reporting/mcp/

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

16 tools

Changes things 11Claude Code: ask
  • annual_reportAnnual ICT risk management report for board + NCA (Art.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Annual ICT risk management report for board + NCA (Art. 6(5)). Auto-fills from AmpelOracle.
  • approve_reportApprove a draft report (4-eyes).No findings

    Why it is in this group

    • The name "approve_report" says "approve": a word for a change.
    Description, as the server wrote it
    Approve a draft report (4-eyes). Status: draft → approved.
  • deadline_trackerAll DORA reporting deadlines per entity with days-until countdown.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    All DORA reporting deadlines per entity with days-until countdown.
  • health_checkServer status.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Server status.
  • incident_reportGenerate ITS 2024/1772 incident report for BaFin (initial/intermediate/final).No findings

    Why it is in this group

    • The description's first verb is "generate": a word for a change.
    Description, as the server wrote it
    Generate ITS 2024/1772 incident report for BaFin (initial/intermediate/final). Art. 19-20. Deadlines: 4h/72h/30d.
  • management_letterGenerate management response letter to findings.No findings

    Why it is in this group

    • The description's first verb is "generate": a word for a change.
    Description, as the server wrote it
    Generate management response letter to findings. 4-eyes principle.
  • obligation_mapReporting obligations DORA-RPT-01 to RPT-08 with deadlines and cross-jurisdiction.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Reporting obligations DORA-RPT-01 to RPT-08 with deadlines and cross-jurisdiction.
  • report_templatesAvailable ITS/RTS report templates with mandatory fields count.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Available ITS/RTS report templates with mandatory fields count.
  • roi_exportGenerate Register of Information ITS export (Art.No findings

    Why it is in this group

    • The description's first verb is "generate": a word for a change.
    Description, as the server wrote it
    Generate Register of Information ITS export (Art. 28(3)). Pulls providers from AmpelOracle, checks ITS mandatory fields.
  • sync_from_ampelPull latest entity data from AmpelOracle for report population.No findings

    Why it is in this group

    • The name "sync_from_ampel" says "sync": a word for a change.
    Description, as the server wrote it
    Pull latest entity data from AmpelOracle for report population.
  • tlpt_reportGenerate TLPT results summary for NCA submission (Art.No findings

    Why it is in this group

    • The description's first verb is "generate": a word for a change.
    Description, as the server wrote it
    Generate TLPT results summary for NCA submission (Art. 26(8)). Pulls from TestOracle.
Only reads 5Claude Code: allow
  • get_reportGet full report content by report_id.No findings

    Why it is in this group

    • The name "get_report" says "get": a word for reading.
    Description, as the server wrote it
    Get full report content by report_id.
  • incident_statusTrack all incident reports per entity with deadlines and overdue status.No findings

    Why it is in this group

    • The name "incident_status" says "status": a word for reading.
    Description, as the server wrote it
    Track all incident reports per entity with deadlines and overdue status.
  • nca_submission_statusTrack all NCA submissions with deadlines, status, overdue alerts.No findings

    Why it is in this group

    • The name "nca_submission_status" says "status": a word for reading.
    Description, as the server wrote it
    Track all NCA submissions with deadlines, status, overdue alerts.
  • pingConnectivity test.No findings

    Why it is in this group

    • The name "ping" says "ping": a word for reading.
    Description, as the server wrote it
    Connectivity test.
  • roi_validateValidate Register of Information against ITS mandatory fields per provider.No findings

    Why it is in this group

    • The name "roi_validate" says "validate": a word for reading.
    Description, as the server wrote it
    Validate Register of Information against ITS mandatory fields per provider.

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 1.0.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http reporting https://tooloracle.io/reporting/mcp/

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__reporting__incident_status",
      "mcp__reporting__roi_validate",
      "mcp__reporting__nca_submission_status",
      "mcp__reporting__get_report",
      "mcp__reporting__ping"
    ],
    "ask": [
      "mcp__reporting__incident_report",
      "mcp__reporting__roi_export",
      "mcp__reporting__tlpt_report",
      "mcp__reporting__annual_report",
      "mcp__reporting__management_letter",
      "mcp__reporting__deadline_tracker",
      "mcp__reporting__report_templates",
      "mcp__reporting__obligation_map",
      "mcp__reporting__sync_from_ampel",
      "mcp__reporting__approve_report",
      "mcp__reporting__health_check"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as reporting. Review it before you use it.