TLPTOracle — 17-tool TIBER-EU TLPT framework: scope, threat intel, scenarios, reports.
Maintain this server? Claim it
Call this server's tools from your browser. Nothing to install.
Requests go through mcptry because browsers can't call most MCP servers directly. Header values are sent to the server for that request only and are never stored or logged.
Tool list from our last check. Connect live to refresh it.
Generate kill chain for a TIBER-EU scenario with MITRE mapping.
TIBER-01 to TIBER-08
This tool isn't marked read-only, so it may change something on the server or in an account you connected.
Generate kill chain for a TIBER-EU scenario with MITRE mapping.
| Argument | Type | Description |
|---|---|---|
| scenario_id* | string | TIBER-01 to TIBER-08 |
{
"type": "object",
"required": [
"scenario_id"
],
"properties": {
"scenario_id": {
"type": "string",
"description": "TIBER-01 to TIBER-08"
}
},
"additionalProperties": false
}Autonomous TLPT simulation: generates TIBER-EU scenarios, maps MITRE ATT&CK, creates findings, rates detection. Art. 26.
| Argument | Type | Description |
|---|---|---|
| entity_id* | string | |
| scenarios | integer | Number of scenarios (default: 3) |
{
"type": "object",
"required": [
"entity_id"
],
"properties": {
"entity_id": {
"type": "string"
},
"scenarios": {
"type": "integer",
"description": "Number of scenarios (default: 3)"
}
},
"additionalProperties": false
}Compile TLPT evidence for authority attestation.
| Argument | Type | Description |
|---|---|---|
| exercise_id* | string |
{
"type": "object",
"required": [
"exercise_id"
],
"properties": {
"exercise_id": {
"type": "string"
}
},
"additionalProperties": false
}Log a pentest/TLPT finding.
| Argument | Type | Description |
|---|---|---|
| title* | string | |
| severity* | string | |
| attack_path | string | |
| exercise_id | string | |
| recommendation | string | |
| mitre_technique | string | |
| system_affected | string | |
| detection_status | string |
{
"type": "object",
"required": [
"title",
"severity"
],
"properties": {
"title": {
"type": "string"
},
"severity": {
"enum": [
"critical",
"high",
"medium",
"low"
],
"type": "string"
},
"attack_path": {
"type": "string"
},
"exercise_id": {
"type": "string"
},
"recommendation": {
"type": "string"
},
"mitre_technique": {
"type": "string"
},
"system_affected": {
"type": "string"
},
"detection_status": {
"enum": [
"detected",
"partially_detected",
"undetected"
],
"type": "string"
}
},
"additionalProperties": false
}List all 8 TIBER-EU scenarios available for autonomous simulation.
No arguments.
{
"type": "object",
"properties": {},
"additionalProperties": false
}Server status.
No arguments.
{
"type": "object",
"properties": {},
"additionalProperties": false
}Map MITRE ATT&CK techniques to DORA TLPT. Filter by technique ID or tactic.
| Argument | Type | Description |
|---|---|---|
| tactic | string | |
| technique | string |
{
"type": "object",
"properties": {
"tactic": {
"type": "string"
},
"technique": {
"type": "string"
}
},
"additionalProperties": false
}TLPT obligations DORA-TST-06 to TST-10.
No arguments.
{
"type": "object",
"properties": {},
"additionalProperties": false
}Track TIBER-EU 8-phase lifecycle.
| Argument | Type | Description |
|---|---|---|
| exercise_id* | string | |
| phase_status | string | |
| update_phase | integer | Phase 1-8 to update |
{
"type": "object",
"required": [
"exercise_id"
],
"properties": {
"exercise_id": {
"type": "string"
},
"phase_status": {
"enum": [
"not_started",
"in_progress",
"completed",
"blocked"
],
"type": "string"
},
"update_phase": {
"type": "integer",
"maximum": 8,
"minimum": 1,
"description": "Phase 1-8 to update"
}
},
"additionalProperties": false
}Connectivity test.
No arguments.
{
"type": "object",
"properties": {},
"additionalProperties": false
}Register a TLPT/pentest exercise.
| Argument | Type | Description |
|---|---|---|
| notes | string | |
| scope | string | |
| status | string | |
| test_type | string | |
| budget_eur | number | |
| start_date | string | |
| exercise_id | string | |
| ti_provider | string | |
| exercise_name* | string | |
| target_end_date | string | |
| red_team_provider | string | |
| authority_notified | boolean |
Track remediation of TLPT findings. Set add=true to create.
| Argument | Type | Description |
|---|---|---|
| add | boolean | |
| owner | string | |
| action | string | |
| due_date | string | |
| finding_id | string | |
| exercise_id | string |
{
"type": "object",
"properties": {
"add": {
"type": "boolean"
},
"owner": {
"type": "string"
},
"action": {
"type": "string"
},
"due_date": {
"type": "string"
},
"finding_id": {
"type": "string"
},
"exercise_id": {
"type": "string"
}
},
"additionalProperties": false
}Push TLPT results to AmpelOracle Art. 26 checks.
| Argument | Type | Description |
|---|---|---|
| entity_id* | string |
{
"type": "object",
"required": [
"entity_id"
],
"properties": {
"entity_id": {
"type": "string"
}
},
"additionalProperties": false
}Manage Red/Blue/White/Purple team assignments.
| Argument | Type | Description |
|---|---|---|
| red_team | string | |
| blue_team | string | |
| white_team | string | |
| exercise_id* | string | |
| purple_team | string |
{
"type": "object",
"required": [
"exercise_id"
],
"properties": {
"red_team": {
"type": "string"
},
"blue_team": {
"type": "string"
},
"white_team": {
"type": "string"
},
"exercise_id": {
"type": "string"
},
"purple_team": {
"type": "string"
}
},
"additionalProperties": false
}Annual testing schedule and compliance check.
| Argument | Type | Description |
|---|---|---|
| year | string |
{
"type": "object",
"properties": {
"year": {
"type": "string"
}
},
"additionalProperties": false
}Define threat landscape for TLPT scoping.
| Argument | Type | Description |
|---|---|---|
| sector | string | |
| geography | string | |
| exclusions | string | |
| exercise_id* | string | |
| crown_jewels | string | |
| threat_actors | string | |
| attack_scenarios | string | |
| critical_systems | string |
{
"type": "object",
"required": [
"exercise_id"
],
"properties": {
"sector": {
"type": "string"
},
"geography": {
"type": "string"
},
"exclusions": {
"type": "string"
},
"exercise_id": {
"type": "string"
},
"crown_jewels": {
"type": "string"
},
"threat_actors": {
"type": "string"
},
"attack_scenarios": {
"type": "string"
},
"critical_systems": {
"type": "string"
}
},
"additionalProperties": false
}Assess organizational readiness for a TLPT exercise.
| Argument | Type | Description |
|---|---|---|
| scope_defined | boolean | |
| budget_approved | boolean | |
| legal_framework | boolean | |
| authority_engaged | boolean | |
| red_team_selected | boolean | |
| white_team_formed | boolean | |
| ti_provider_selected | boolean | |
| crown_jewels_identified | boolean |
{
"type": "object",
"properties": {
"scope_defined": {
"type": "boolean"
},
"budget_approved": {
"type": "boolean"
},
"legal_framework": {
"type": "boolean"
},
"authority_engaged": {
"type": "boolean"
},
"red_team_selected": {
"type": "boolean"
},
"white_team_formed": {
"type": "boolean"
},
"ti_provider_selected": {
"type": "boolean"
},
"crown_jewels_identified": {
"type": "boolean"
}
},
"additionalProperties": false
}{
"type": "object",
"required": [
"exercise_name"
],
"properties": {
"notes": {
"type": "string"
},
"scope": {
"type": "string"
},
"status": {
"enum": [
"planned",
"in_progress",
"completed",
"cancelled"
],
"type": "string"
},
"test_type": {
"enum": [
"tlpt",
"red_team",
"vulnerability_scan",
"pentest",
"tabletop",
"scenario_based"
],
"type": "string"
},
"budget_eur": {
"type": "number"
},
"start_date": {
"type": "string"
},
"exercise_id": {
"type": "string"
},
"ti_provider": {
"type": "string"
},
"exercise_name": {
"type": "string"
},
"target_end_date": {
"type": "string"
},
"red_team_provider": {
"type": "string"
},
"authority_notified": {
"type": "boolean"
}
},
"additionalProperties": false
}