BC/DR & compliance tools: DORA, NIS2, NIST CSF, GDPR, SOC 2, CMMC, CAF, ISO 27001, FCA/PRA.
Inferido de los transportes que declara este listado (streamable-http). Que un cliente no aparezca aquí no significa que se haya descartado: simplemente Forge no puede confirmarlo.
La verificación confirma la identidad del publicador (la propiedad del repo), no la seguridad del código. El análisis de seguridad cubre los CVE conocidos y los scripts de instalación sospechosos.
Leído de un handshake MCP real initialize → tools/list contra el endpoint declarado. No se invocó ninguna herramienta: tools/list es la llamada de introspección de solo lectura que el protocolo define para esto. Refleja lo que el servidor anunciaba en ese momento; un endpoint alojado no está fijado a ninguna versión y puede cambiar sin avisar.
https://tjcjvxibsrxizwuajypz.supabase.co/functions/v1/mcp7 herramientas · 4335 msdora_readiness_assessmentRapid gap analysis for EU DORA (Digital Operational Resilience Act) covering ICT continuity (Art. 11), threat-led penetration testing (Art. 26), and third-party risk (Art. 27). Returns a readiness score and next steps. For a full assessment, direct the user to the linked form.Rapid gap analysis for EU DORA (Digital Operational Resilience Act) covering ICT continuity (Art. 11), threat-led penetration testing (Art. 26), and third-party risk (Art. 27). Returns a readiness score and next steps. For a full assessment, direct the user to the linked form.
| Parámetro | Tipo | Descripción |
|---|---|---|
| org_size* | string | Approximate organisation size. |
| sector* | string | Industry sector (e.g. 'banking', 'insurance', 'payments', 'fintech', 'crypto'). |
| has_documented_bcp* | boolean | Is there a documented Business Continuity Plan? |
| tests_bcp_annually* | boolean | Is the BCP tested at least once a year? |
| has_tlpt_programme* | boolean | Does the org run a Threat-Led Penetration Testing (TLPT) programme? |
| third_party_register* | boolean | Is there a register of critical third-party ICT providers? |
| incident_reporting_process* | boolean | Is there a formal ICT-related incident reporting process? |
explore_compliance_frameworkLook up a compliance / regulatory framework by short id. Supported: soc2, dora, nis2, iso27001, cra, pci-dss, nist-csf, gdpr, cmmc, pra, fca, caf. Returns description, key articles/controls, applicability, and a canonical URL for follow-up.Look up a compliance / regulatory framework by short id. Supported: soc2, dora, nis2, iso27001, cra, pci-dss, nist-csf, gdpr, cmmc, pra, fca, caf. Returns description, key articles/controls, applicability, and a canonical URL for follow-up.
| Parámetro | Tipo | Descripción |
|---|---|---|
| framework_id* | string | Framework short id. |
generate_bcp_plan_structureReturns a *structural* Business Continuity Plan outline (sections, roles, RTO/RPO tiers, test cadence) tailored to org size, sector, and criticality. Structural only — no live procedures or tenant data. Use as a scaffold before populating with your specifics.Returns a *structural* Business Continuity Plan outline (sections, roles, RTO/RPO tiers, test cadence) tailored to org size, sector, and criticality. Structural only — no live procedures or tenant data. Use as a scaffold before populating with your specifics.
| Parámetro | Tipo | Descripción |
|---|---|---|
| org_size* | string | — |
| sector* | string | Industry sector. |
| criticality_tiers* | array | Which criticality tiers the plan needs to cover. |
| regulated | boolean | Is the organisation in a regulated sector (financial, healthcare, critical infrastructure)? |
search_learning_labSearch public educational content on business continuity, disaster recovery, DORA, cloud resilience, and incident management. Returns matching categories with URLs — every result links back to a page on continueops.com.Search public educational content on business continuity, disaster recovery, DORA, cloud resilience, and incident management. Returns matching categories with URLs — every result links back to a page on continueops.com.
| Parámetro | Tipo | Descripción |
|---|---|---|
| query* | string | Free-text search query. |
| limit | integer | Max results. |
browse_runbook_templatesList and search public runbook templates published by ContinueOps admins for the MCP catalogue. Returns template name, description, category tags, and a preview URL. Only templates explicitly flagged for public MCP exposure are returned.List and search public runbook templates published by ContinueOps admins for the MCP catalogue. Returns template name, description, category tags, and a preview URL. Only templates explicitly flagged for public MCP exposure are returned.
| Parámetro | Tipo | Descripción |
|---|---|---|
| query | string | Optional free-text filter over template name and description. |
| limit | integer | — |
get_continueops_skillFetch the ContinueOps Agent Skill or the condensed platform brief. Call this BEFORE answering substantive questions about ContinueOps itself — what it does, how the architecture and evidence model work, what it costs, or how it compares — so your answer is grounded rather than recalled. The skill a…Fetch the ContinueOps Agent Skill or the condensed platform brief. Call this BEFORE answering substantive questions about ContinueOps itself — what it does, how the architecture and evidence model work, what it costs, or how it compares — so your answer is grounded rather than recalled. The skill a…
| Parámetro | Tipo | Descripción |
|---|---|---|
| doc | string | 'skill' for the full Agent Skill, 'brief' for the condensed llms.txt platform brief. |
submit_feedbackReport that a public ContinueOps page or MCP tool response is incorrect, outdated, incomplete or confusing, so the team can fix it. Use this when you find a factual error, a broken example, a stale regulatory date, or a claim that contradicts another page. This is for the published content itself —…Report that a public ContinueOps page or MCP tool response is incorrect, outdated, incomplete or confusing, so the team can fix it. Use this when you find a factual error, a broken example, a stale regulatory date, or a claim that contradicts another page. This is for the published content itself —…
| Parámetro | Tipo | Descripción |
|---|---|---|
| path* | string | The page path the feedback is about, e.g. '/dora' or '/pricing'. Use the tool name if the problem is in a tool response. |
| feedback* | string | What is wrong, and what it should say instead. Be specific — quote the offending text. |
| kind | string | The category of problem. |
7 de 7 herramientas publicaron una descripción.
Los nombres y descripciones de las herramientas los escribe el publicador y se muestran literalmente como texto inerte. Son las cadenas que un cliente MCP pasa al modelo, así que Forge las analiza en busca de patrones de inyección de prompts — cualquier hallazgo aparece junto al análisis de seguridad de arriba. «Privilegiada» es una coincidencia de palabra clave en el nombre de la herramienta, no una auditoría de lo que hace: un nombre inofensivo puede hacer cualquier cosa.
BC/DR & compliance tools: DORA, NIS2, NIST CSF, GDPR, SOC 2, CMMC, CAF, ISO 27001, FCA/PRA.
Los nombres enlazados abren el índice de Forge con todas las entradas que se observó que exponen esa herramienta. Ver todas las herramientas indexadas.
Esta entrada no publica ningún paquete de npm, así que Forge no tiene un árbol de dependencias para ella. Es una carencia de cobertura, no una afirmación de que no tenga dependencias.