Indian cyber regulation register and incident-reporting deadlines (India, US, EU), read at source.
Maintain this server? Claim it
Call this server's tools from your browser. Nothing to install.
Requests go through mcptry because browsers can't call most MCP servers directly. Header values are sent to the server for that request only and are never stored or logged.
Tool list from our last check. Connect live to refresh it.
Today’s global cyber threat condition (Clear, Cloudy, Showers, Storm or Severe) from BitScore’s Cyber Weather, refreshed daily at 07:30 IST: points per instrument, CISA KEV additions, EPSS risers, outlook, patch calendar, outages and three actions. Each field names its source and licence. Indicative, not a measure of any organisation’s risk.
This tool takes no arguments.
Today’s global cyber threat condition (Clear, Cloudy, Showers, Storm or Severe) from BitScore’s Cyber Weather, refreshed daily at 07:30 IST: points per instrument, CISA KEV additions, EPSS risers, outlook, patch calendar, outages and three actions. Each field names its source and licence. Indicative, not a measure of any organisation’s risk.
No arguments.
{
"type": "object",
"properties": {},
"additionalProperties": false
}Given an Indian entity class, whether it is listed and whether it handles personal data, returns the cyber and data-protection instruments that bind it, why each applies, a caution where one is commonly misapplied, and its next dated deadline. RBI classes each map to their own 2026 Directions; RRBs and LABs have none, and the result says so.
| Argument | Type | Description |
|---|---|---|
| listed* | boolean | Listed on an Indian stock exchange (brings SEBI LODR disclosure). |
| entity_class* | string | The entity’s class. |
| handles_personal_data* | boolean | Processes digital personal data of individuals in India (brings DPDP). |
{
"type": "object",
"required": [
"entity_class",
"listed",
"handles_personal_data"
],
"properties": {
"listed": {
"type": "boolean",
"description": "Listed on an Indian stock exchange (brings SEBI LODR disclosure)."
},
"entity_class": {
"enum": [
"commercial-bank",
"sfb",
"payments-bank",
"ucb",
"aifi",
"nbfc",
"cic",
"rrb",
"lab",
"sebi-re",
"insurer",
"ifsca-re",
"other"
],
"type": "string",
"description": "The entity’s class."
},
"handles_personal_data": {
"type": "boolean",
"description": "Processes digital personal data of individuals in India (brings DPDP)."
}
},
"additionalProperties": false
}For an organisation operating across India, the US and the EU, lists the cyber and data-protection regimes that apply, may apply (check) or are pending, with why and a caution for each. All flags default to false and sizes/sectors to none.
| Argument | Type | Description |
|---|---|---|
| sec | string | SEC status. |
| size | string | Enterprise size. |
| hipaa | boolean | Covered entity or business associate under HIPAA. |
| nydfs | boolean | Regulated by the New York DFS. |
| us_bank | boolean | US banking organisation. |
| nis2_sector | string | NIS2 sector annex. |
| india_listed | boolean | Listed on an Indian stock exchange. |
| ftc_safeguards | boolean | Non-bank financial institution under the FTC Safeguards Rule. |
| cra_manufacturer | boolean | Manufacturer of products with digital elements sold in the EU. |
Full register entry for one instrument by its id (from search_instruments): formal name, reference, issue date, status, who it binds, every dated deadline it sets, the regulator’s own URL and the date it was last re-read there.
| Argument | Type | Description |
|---|---|---|
| id* | string | Register id, e.g. "rbi-cyber-2026-nbfc" or "sebi-cscrf". |
{
"type": "object",
"required": [
"id"
],
"properties": {
"id": {
"type": "string",
"maxLength": 100,
"description": "Register id, e.g. \"rbi-cyber-2026-nbfc\" or \"sebi-cscrf\"."
}
},
"additionalProperties": false
}Every incident-reporting clock an Indian entity owes — CERT-In six hours, the sectoral regulator (RBI, SEBI, IRDAI, IFSCA), SEBI LODR, NCIIPC, DPDP — each with its trigger, recipient, channel and source clause. Give noticed_at to get wall-clock IST due times. Clocks run in parallel; none discharges another.
| Argument | Type | Description |
|---|---|---|
| listed* | boolean | Listed on an Indian stock exchange. |
| sector* | string | Sectoral regulator, or "none". |
| ifsca_mii | boolean | IFSC market infrastructure institution (stock exchange, clearing corporation, depository). |
| rbi_class | string | Required when sector is "rbi". |
| nbfc_layer | string | For an NBFC: its layer under Scale-Based Regulation. |
| noticed_at | string | Optional. When the incident was noticed or brought to notice, ISO 8601 with offset, e.g. 2026-10-01T14:30:00+05:30. |
| ifsca_exempt | boolean | IFSCA RE inside either exemption tier of the 2025 Guidelines. |
Aggregate counts of publicly observed cyber threat activity affecting Indian organisations, by industry vertical and category, for one edition (latest by default). Aggregate only: no organisation is named. A vertical the source did not cover is unmeasured, not zero.
| Argument | Type | Description |
|---|---|---|
| edition | string | Edition slug, YYYY-MM. Omit for the latest. |
{
"type": "object",
"properties": {
"edition": {
"enum": [
"2026-09",
"2026-08"
],
"type": "string",
"description": "Edition slug, YYYY-MM. Omit for the latest."
}
},
"additionalProperties": false
}Search every cyber and data-protection instrument binding Indian regulated entities (RBI, SEBI, IRDAI, IFSCA, CERT-In, MeitY/DPDP): reference number, issue date, status, who it binds and the deadlines it sets. Filter by free text, issuer or status. Returns summaries; use get_instrument for one entry in full.
| Argument | Type | Description |
|---|---|---|
| limit | integer | Maximum results, 1–50. Default 20. |
| query | string | Words to match against the name, reference number and who it binds, e.g. "outsourcing", "NBFC", "2024/113". |
| issuer | string | Only instruments from this issuer. |
| status | string | Only instruments with this status. |
{
"type": "object",
"properties": {
"limit": {
"type": "integer",
"maximum": 50,
"minimum": 1,
"description": "Maximum results, 1–50. Default 20."
},
"query": {
"type": "string",
"maxLength": 200,
"description": "Words to match against the name, reference number and who it binds, e.g. \"outsourcing\", \"NBFC\", \"2024/113\"."
},
"issuer": {
"enum": [
"RBI",
"SEBI",
"IRDAI",
"IFSCA",
"CERT-In",
"MeitY"
],
"type": "string",
"description": "Only instruments from this issuer."
},
"status": {
"enum": [
"in-force",
"partly-in-force",
"superseded"
],
"type": "string",
"description": "Only instruments with this status."
}
},
"additionalProperties": false
}Works out a SEBI regulated entity’s CSCRF category (MII, Qualified, Mid-size, Small-size, Self-certification or Exempt) from the current thresholds, and the obligations that category carries. Call with only entity_type to see which figures it needs. Boundary values the circulars leave uncategorised are reported as such, not guessed.
| Argument | Type | Description |
|---|---|---|
| auc | number | Figure for the "auc" criterion (see entity_type's required figures). ₹ crore values in crore; counts as plain numbers. |
| aum | number | Figure for the "aum" criterion (see entity_type's required figures). ₹ crore values in crore; counts as plain numbers. |
| corpus | number | Figure for the "corpus" criterion (see entity_type's required figures). ₹ crore values in crore; counts as plain numbers. |
| folios | number | Figure for the "folios" criterion (see entity_type's required figures). ₹ crore values in crore; counts as plain numbers. |
| entity_type* | string | The SEBI entity type. |
| registered_clients | number | Figure for the "registered-clients" criterion (see entity_type's required figures). ₹ crore values in crore; counts as plain numbers. |
| collateral_with_ccs |
Incident-reporting clocks under SEC Form 8-K/6-K, NYDFS Part 500, the US bank 36-hour rule, HIPAA, the FTC Safeguards Rule, NIS2, DORA, GDPR and the EU Cyber Resilience Act, each from its own trigger. Give aware_at (and decided_at for materiality/classification clocks) for wall-clock due times.
| Argument | Type | Description |
|---|---|---|
| sec* | string | SEC status. |
| dora* | string | DORA status. |
| gdpr* | string | GDPR role for the personal data involved. |
| nis2* | boolean | An essential or important entity under NIS2. |
| hipaa* | string | HIPAA role. |
| nydfs* | boolean | Regulated by the New York DFS (23 NYCRR 500). |
| us_bank* | boolean | A US banking organisation under the 36-hour computer-security incident rule. |
| aware_at | string |
| eu_personal_data | boolean | Processes personal data of people in the EU. |
| india_operations | boolean | Operates in India. |
| us_personal_data | boolean | Holds personal data of US residents. |
| india_personal_data | boolean | Processes digital personal data of individuals in India. |
| dora_financial_entity | boolean | EU financial entity under DORA. |
| india_financial_regulated | boolean | Regulated by RBI, SEBI, IRDAI or IFSCA. |
| ict_provider_to_eu_finance | boolean | ICT third-party provider to EU financial entities. |
| us_critical_infrastructure | boolean | US critical-infrastructure sector. |
{
"type": "object",
"properties": {
"sec": {
"enum": [
"none",
"domestic",
"fpi"
],
"type": "string",
"description": "SEC status."
},
"size": {
"enum": [
"small",
"medium",
"large"
],
"type": "string",
"description": "Enterprise size."
},
"hipaa": {
"type": "boolean",
"description": "Covered entity or business associate under HIPAA."
},
"nydfs": {
"type": "boolean",
"description": "Regulated by the New York DFS."
},
"us_bank": {
"type": "boolean",
"description": "US banking organisation."
},
"nis2_sector": {
"enum": [
"none",
"annex-i",
"annex-ii"
],
"type": "string",
"description": "NIS2 sector annex."
},
"india_listed": {
"type": "boolean",
"description": "Listed on an Indian stock exchange."
},
"ftc_safeguards": {
"type": "boolean",
"description": "Non-bank financial institution under the FTC Safeguards Rule."
},
"cra_manufacturer": {
"type": "boolean",
"description": "Manufacturer of products with digital elements sold in the EU."
},
"eu_personal_data": {
"type": "boolean",
"description": "Processes personal data of people in the EU."
},
"india_operations": {
"type": "boolean",
"description": "Operates in India."
},
"us_personal_data": {
"type": "boolean",
"description": "Holds personal data of US residents."
},
"india_personal_data": {
"type": "boolean",
"description": "Processes digital personal data of individuals in India."
},
"dora_financial_entity": {
"type": "boolean",
"description": "EU financial entity under DORA."
},
"india_financial_regulated": {
"type": "boolean",
"description": "Regulated by RBI, SEBI, IRDAI or IFSCA."
},
"ict_provider_to_eu_finance": {
"type": "boolean",
"description": "ICT third-party provider to EU financial entities."
},
"us_critical_infrastructure": {
"type": "boolean",
"description": "US critical-infrastructure sector."
}
},
"additionalProperties": false
}| personal_data* |
| boolean |
| The incident involves digital personal data. |
| protected_system* | boolean | Operates a notified Protected System (brings NCIIPC). |
| sebi_broker_or_dp | boolean | SEBI stock broker or depository participant (adds a six-hour leg to the exchanges/depositories). |
{
"type": "object",
"required": [
"sector",
"listed",
"protected_system",
"personal_data"
],
"properties": {
"listed": {
"type": "boolean",
"description": "Listed on an Indian stock exchange."
},
"sector": {
"enum": [
"rbi",
"sebi",
"irdai",
"ifsca",
"none"
],
"type": "string",
"description": "Sectoral regulator, or \"none\"."
},
"ifsca_mii": {
"type": "boolean",
"description": "IFSC market infrastructure institution (stock exchange, clearing corporation, depository)."
},
"rbi_class": {
"enum": [
"commercial-bank",
"sfb",
"payments-bank",
"ucb",
"aifi",
"nbfc",
"cic"
],
"type": "string",
"description": "Required when sector is \"rbi\"."
},
"nbfc_layer": {
"enum": [
"base-below-500",
"base-500-plus",
"middle-upper-top"
],
"type": "string",
"description": "For an NBFC: its layer under Scale-Based Regulation."
},
"noticed_at": {
"type": "string",
"maxLength": 40,
"description": "Optional. When the incident was noticed or brought to notice, ISO 8601 with offset, e.g. 2026-10-01T14:30:00+05:30."
},
"ifsca_exempt": {
"type": "boolean",
"description": "IFSCA RE inside either exemption tier of the 2025 Guidelines."
},
"personal_data": {
"type": "boolean",
"description": "The incident involves digital personal data."
},
"protected_system": {
"type": "boolean",
"description": "Operates a notified Protected System (brings NCIIPC)."
},
"sebi_broker_or_dp": {
"type": "boolean",
"description": "SEBI stock broker or depository participant (adds a six-hour leg to the exchanges/depositories)."
}
},
"additionalProperties": false
}| number |
| Figure for the "collateral-with-ccs" criterion (see entity_type's required figures). ₹ crore values in crore; counts as plain numbers. |
| clientele_trading_volume | number | Figure for the "clientele-trading-volume" criterion (see entity_type's required figures). ₹ crore values in crore; counts as plain numbers. |
{
"type": "object",
"required": [
"entity_type"
],
"properties": {
"auc": {
"type": "number",
"minimum": 0,
"description": "Figure for the \"auc\" criterion (see entity_type's required figures). ₹ crore values in crore; counts as plain numbers."
},
"aum": {
"type": "number",
"minimum": 0,
"description": "Figure for the \"aum\" criterion (see entity_type's required figures). ₹ crore values in crore; counts as plain numbers."
},
"corpus": {
"type": "number",
"minimum": 0,
"description": "Figure for the \"corpus\" criterion (see entity_type's required figures). ₹ crore values in crore; counts as plain numbers."
},
"folios": {
"type": "number",
"minimum": 0,
"description": "Figure for the \"folios\" criterion (see entity_type's required figures). ₹ crore values in crore; counts as plain numbers."
},
"entity_type": {
"enum": [
"mii",
"stock-broker",
"proprietary-stock-broker",
"depository-participant",
"portfolio-manager",
"merchant-banker",
"aif-vcf-manager",
"mutual-fund-amc",
"custodian",
"rta",
"kra",
"investment-adviser",
"research-analyst",
"ddp",
"debenture-trustee",
"credit-rating-agency",
"collective-investment-scheme",
"banker-to-issue",
"excluded"
],
"type": "string",
"description": "The SEBI entity type."
},
"registered_clients": {
"type": "number",
"minimum": 0,
"description": "Figure for the \"registered-clients\" criterion (see entity_type's required figures). ₹ crore values in crore; counts as plain numbers."
},
"collateral_with_ccs": {
"type": "number",
"minimum": 0,
"description": "Figure for the \"collateral-with-ccs\" criterion (see entity_type's required figures). ₹ crore values in crore; counts as plain numbers."
},
"clientele_trading_volume": {
"type": "number",
"minimum": 0,
"description": "Figure for the \"clientele-trading-volume\" criterion (see entity_type's required figures). ₹ crore values in crore; counts as plain numbers."
}
},
"additionalProperties": false
}| Optional. When the entity became aware, ISO 8601 with offset. |
| decided_at | string | Optional. When materiality/reportability/major classification was determined, ISO 8601 with offset. |
| ftc_safeguards* | boolean | A non-bank financial institution under the FTC Safeguards Rule. |
| cra_manufacturer* | boolean | A manufacturer of products with digital elements under the EU CRA. |
| bank_service_provider* | boolean | A bank service provider under the same rule. |
{
"type": "object",
"required": [
"sec",
"nydfs",
"us_bank",
"bank_service_provider",
"hipaa",
"ftc_safeguards",
"nis2",
"dora",
"gdpr",
"cra_manufacturer"
],
"properties": {
"sec": {
"enum": [
"none",
"domestic",
"fpi"
],
"type": "string",
"description": "SEC status."
},
"dora": {
"enum": [
"none",
"financial-entity",
"no-weekend-relief"
],
"type": "string",
"description": "DORA status."
},
"gdpr": {
"enum": [
"none",
"controller",
"processor"
],
"type": "string",
"description": "GDPR role for the personal data involved."
},
"nis2": {
"type": "boolean",
"description": "An essential or important entity under NIS2."
},
"hipaa": {
"enum": [
"none",
"covered-entity",
"business-associate"
],
"type": "string",
"description": "HIPAA role."
},
"nydfs": {
"type": "boolean",
"description": "Regulated by the New York DFS (23 NYCRR 500)."
},
"us_bank": {
"type": "boolean",
"description": "A US banking organisation under the 36-hour computer-security incident rule."
},
"aware_at": {
"type": "string",
"maxLength": 40,
"description": "Optional. When the entity became aware, ISO 8601 with offset."
},
"decided_at": {
"type": "string",
"maxLength": 40,
"description": "Optional. When materiality/reportability/major classification was determined, ISO 8601 with offset."
},
"ftc_safeguards": {
"type": "boolean",
"description": "A non-bank financial institution under the FTC Safeguards Rule."
},
"cra_manufacturer": {
"type": "boolean",
"description": "A manufacturer of products with digital elements under the EU CRA."
},
"bank_service_provider": {
"type": "boolean",
"description": "A bank service provider under the same rule."
}
},
"additionalProperties": false
}