Cybershield

Working · 13 ms

io.tooloracle/cybershieldv1.0.0 Domain verified

CyberShield - 12 cybersecurity tools: NIS2 mapping, MITRE ATT&CK, vulns, threat intel.

Security Legal & Government

Source Registry entry

Maintain this server? Claim it

Try it

Call this server's tools from your browser. Nothing to install.

https://tooloracle.io/cybershield/mcp/

Requests go through mcptry because browsers can't call most MCP servers directly. Header values are sent to the server for that request only and are never stored or logged.

Tool list from our last check. Connect live to refresh it.

attack_surface_check

Attack surface assessment checklist. Web apps, remote access, cloud, IoT, email. Prioritized security checks.

iot_devicesboolean

cloud_servicesboolean

employee_countinteger

web_applicationsboolean

remote_access_vpnboolean

This tool isn't marked read-only, so it may change something on the server or in an account you connected.

I understand, run it anyway

Tools (12)

attack_surface_check

Attack surface assessment checklist. Web apps, remote access, cloud, IoT, email. Prioritized security checks.

Argument	Type	Description
iot_devices	boolean
cloud_services	boolean
employee_count	integer
web_applications	boolean
remote_access_vpn	boolean

Input schema (JSON)

{
  "type": "object",
  "properties": {
    "iot_devices": {
      "type": "boolean"
    },
    "cloud_services": {
      "type": "boolean"
    },
    "employee_count": {
      "type": "integer"
    },
    "web_applications": {
      "type": "boolean"
    },
    "remote_access_vpn": {
      "type": "boolean"
    }
  },
  "additionalProperties": false
}

cve_risk_score

CVE risk prioritization combining CVSS, EPSS, KEV catalog, exploit availability. Returns weighted priority score with patching SLA.

Argument	Type	Description
cve_id	string
cvss_score	number
epss_score	number	0-1 EPSS probability
in_kev_catalog	boolean
public_exploit	boolean
internet_facing	boolean
affected_systems	integer

Input schema (JSON)

{
  "type": "object",
  "properties": {
    "cve_id": {
      "type": "string"
    },
    "cvss_score": {
      "type": "number"
    },
    "epss_score": {
      "type": "number",
      "description": "0-1 EPSS probability"
    },
    "in_kev_catalog": {
      "type": "boolean"
    },
    "public_exploit": {
      "type": "boolean"
    },
    "internet_facing": {
      "type": "boolean"
    },
    "affected_systems": {
      "type": "integer"
    }
  },
  "additionalProperties": false
}

dora_ict_risk

DORA Art. 5-12 ICT risk management compliance check. 8 articles assessed with specific requirements per article.

Argument	Type	Description
learning_evolving	boolean
response_recovery	boolean
detection_measures	boolean
ict_risk_framework	boolean
communication_plans	boolean
ict_asset_inventory	boolean
protection_prevention	boolean

Input schema (JSON)

{
  "type": "object",
  "properties": {
    "learning_evolving": {
      "type": "boolean"
    },
    "response_recovery": {
      "type": "boolean"
    },
    "detection_measures": {
      "type": "boolean"
    },
    "ict_risk_framework": {
      "type": "boolean"
    },
    "communication_plans": {
      "type": "boolean"
    },
    "ict_asset_inventory": {
      "type": "boolean"
    },
    "protection_prevention": {
      "type": "boolean"
    }
  },
  "additionalProperties": false
}

incident_playbook

Incident response playbook for ransomware, data breach, phishing compromise. Phase-by-phase actions with legal obligations.

Argument	Type	Description
incident_type	string	ransomware \| data_breach \| phishing_compromise

Input schema (JSON)

{
  "type": "object",
  "properties": {
    "incident_type": {
      "type": "string",
      "description": "ransomware | data_breach | phishing_compromise"
    }
  },
  "additionalProperties": false
}

iso27001_gap

ISO 27001:2022 Annex A gap analysis. All 93 controls across 4 themes, new 2022 controls highlighted, certification process.

Argument	Type	Description
controls	object	Optional: status of specific controls

Input schema (JSON)

{
  "type": "object",
  "properties": {
    "controls": {
      "type": "object",
      "description": "Optional: status of specific controls"
    }
  },
  "additionalProperties": false
}

nis2_compliance

NIS2 Directive (EU 2022/2555) compliance assessment. All 10 Art. 21 measures, entity classification, penalties, incident reporting.

Argument	Type	Description
sector	string
mfa_deployed	boolean
access_control	boolean
employee_count	integer
risk_management	boolean
incident_handling	boolean
business_continuity	boolean
cryptography_policy	boolean
annual_turnover_meur	number
supply_chain_security	boolean
cyber_hygiene_training	boolean

nis2_incident_report

NIS2 incident notification template. 24h early warning, 72h notification, 1-month final report templates.

Argument	Type	Description
severity	string
incident_type	string
affected_services	string
cross_border_impact	boolean
affected_users_estimate	integer

Input schema (JSON)

{
  "type": "object",
  "properties": {
    "severity": {
      "type": "string"
    },
    "incident_type": {
      "type": "string"
    },
    "affected_services": {
      "type": "string"
    },
    "cross_border_impact": {
      "type": "boolean"
    },
    "affected_users_estimate": {
      "type": "integer"
    }
  },
  "additionalProperties": false
}

password_policy

Generate password policy per NIST SP 800-63B (2024) and BSI recommendations. Modern best practices — no forced rotation.

No arguments.

Input schema (JSON)

{
  "type": "object",
  "properties": {},
  "additionalProperties": false
}

phishing_indicators

Analyze email/URL for phishing indicators. Scores sender, urgency, attachments, URL patterns. Returns verdict and recommended actions.

Argument	Type	Description
subject	string
sender_email	string
suspicious_url	string
creates_urgency	boolean
asks_for_credentials	boolean
has_unexpected_attachment	boolean

Input schema (JSON)

{
  "type": "object",
  "properties": {
    "subject": {
      "type": "string"
    },
    "sender_email": {
      "type": "string"
    },
    "suspicious_url": {
      "type": "string"
    },
    "creates_urgency": {
      "type": "boolean"
    },
    "asks_for_credentials": {
      "type": "boolean"
    },
    "has_unexpected_attachment": {
      "type": "boolean"
    }
  },
  "additionalProperties": false
}

risk_matrix

Risk assessment matrix (likelihood × impact). ISO 31000/27005 methodology. Provide risks for assessment or get template.

Argument	Type	Description
risks	string	JSON array [{name, likelihood(1-5), impact(1-5)}]

Input schema (JSON)

{
  "type": "object",
  "properties": {
    "risks": {
      "type": "string",
      "description": "JSON array [{name, likelihood(1-5), impact(1-5)}]"
    }
  },
  "additionalProperties": false
}

security_metrics

Security KPI/metrics dashboard template. MTTD, MTTR, patch compliance, phishing rate. Board-ready reporting guidance.

No arguments.

Input schema (JSON)

{
  "type": "object",
  "properties": {},
  "additionalProperties": false
}

threat_landscape

Current cyber threat landscape overview per ENISA categories. Top 8 threats with sector relevance and mitigations.

Argument	Type	Description
sector	string	energy\|finance\|healthcare\|manufacturing\|public_admin\|general

Input schema (JSON)

{
  "type": "object",
  "properties": {
    "sector": {
      "type": "string",
      "description": "energy|finance|healthcare|manufacturing|public_admin|general"
    }
  },
  "additionalProperties": false
}