← Back to search

io.github.CSOAI-ORG/dora-nis2-crosswalk-mcp

CSOAI-ORG Scanned 25d ago

DORA × NIS2 Crosswalk MCP — map Regulation (EU) 2022/2554 obligations to Directive (EU) 2022/255...

MCP Registry ↗
B
79.9 / 100

Versions

1.0.2latest
first seen May 19, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 4

list_overlapping_obligations
annotations: none low

Return the full DORA → NIS2 crosswalk table with shared evidence.

api_key str
compare_reporting_clocks
annotations: none low

Show side-by-side DORA vs NIS2 incident-reporting clocks.

api_key str
check_dual_compliance
annotations: none low

Score dual DORA + NIS2 compliance given current controls.

api_key str entity_name str controls_csv str
sign_dual_compliance_attestation
annotations: none low

Generate a cryptographically signed DORA × NIS2 dual-compliance attestation (Pro+).

api_key str entity_name str findings_csv str overall_score float include_pdf_base64 bool

Permissions 3

network medium
Server uses network capabilities via: urllib
filesystem low
Server uses filesystem capabilities via: open(), os
env_vars low
Server uses env_vars capabilities via: os.environ

Scan Findings 27

low
Tool 'list_overlapping_obligations' has no annotations annotation_checker · 100%
low
Tool 'compare_reporting_clocks' has no annotations annotation_checker · 100%
low
Tool 'check_dual_compliance' has no annotations annotation_checker · 100%
low
Tool 'sign_dual_compliance_attestation' has no annotations annotation_checker · 100%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: mcp@1.0.0 (GHSA-3qhf-m339-9g5v) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (GHSA-9h52-p55h-vw2f) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (GHSA-j975-95f5-7wqh) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (GHSA-jpw9-pfvf-9f58) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (GHSA-vj7q-gjh5-988w) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (PYSEC-2026-1616) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (PYSEC-2026-1617) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (PYSEC-2026-1618) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (PYSEC-2026-3482) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (PYSEC-2026-3483) dependency_analyzer · 95%
info
pyproject.toml metadata manifest_parser · 100%
info
Tool: list_overlapping_obligations manifest_parser · 90%
info
Tool: compare_reporting_clocks manifest_parser · 90%
info
Tool: check_dual_compliance manifest_parser · 90%
info
Tool: sign_dual_compliance_attestation manifest_parser · 90%
info
Required env vars (5) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 80%
low
Permission: filesystem access detected permission_analyzer · 80%
low
Permission: env_vars access detected permission_analyzer · 90%
info
No dependency files found for SBOM generation sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%