ContinueOps Public MCP

Measured conclusion: Deep-tested. L2 outcome: tools_ok.

BC/DR & compliance tools: DORA, NIS2, NIST CSF, GDPR, SOC 2, CMMC, CAF, ISO 27001, FCA/PRA.

Add to your agent

Copy this into your MCP client config:

{
  "mcpServers": {
    "ContinueOps Public MCP": {
      "url": "https://tjcjvxibsrxizwuajypz.supabase.co/functions/v1/mcp",
      "transport": "streamable-http"
    }
  }
}

Measured tools (7)

• dora_readiness_assessment read-only

  Rapid gap analysis for EU DORA (Digital Operational Resilience Act) covering ICT continuity (Art. 11), threat-led penetration testing (Art. 26), and third-party risk (Art. 27). Returns a readiness score and next steps. For a full assessment, direct the user to the linked form.

  Parameters:

  • org_size (required) — string — Approximate organisation size.
  • sector (required) — string — Industry sector (e.g. 'banking', 'insurance', 'payments', 'fintech', 'crypto').
  • has_documented_bcp (required) — boolean — Is there a documented Business Continuity Plan?
  • tests_bcp_annually (required) — boolean — Is the BCP tested at least once a year?
  • has_tlpt_programme (required) — boolean — Does the org run a Threat-Led Penetration Testing (TLPT) programme?
  • third_party_register (required) — boolean — Is there a register of critical third-party ICT providers?
  • incident_reporting_process (required) — boolean — Is there a formal ICT-related incident reporting process?

  Hints: read-only yes · destructive not declared · idempotent yes · open-world no

• explore_compliance_framework read-only

  Look up a compliance / regulatory framework by short id. Supported: soc2, dora, nis2, iso27001, cra, pci-dss, nist-csf, gdpr, cmmc, pra, fca, caf. Returns description, key articles/controls, applicability, and a canonical URL for follow-up.

  Parameters:

  • framework_id (required) — string — Framework short id.

  Hints: read-only yes · destructive not declared · idempotent yes · open-world no

• generate_bcp_plan_structure read-only

  Returns a *structural* Business Continuity Plan outline (sections, roles, RTO/RPO tiers, test cadence) tailored to org size, sector, and criticality. Structural only — no live procedures or tenant data. Use as a scaffold before populating with your specifics.

  Parameters:

  • org_size (required) — string
  • sector (required) — string — Industry sector.
  • criticality_tiers (required) — array — Which criticality tiers the plan needs to cover.
  • regulated — boolean — Is the organisation in a regulated sector (financial, healthcare, critical infrastructure)?

  Hints: read-only yes · destructive not declared · idempotent yes · open-world no

• search_learning_lab read-only

  Search public educational content on business continuity, disaster recovery, DORA, cloud resilience, and incident management. Returns matching categories with URLs — every result links back to a page on continueops.com.

  Parameters:

  • query (required) — string — Free-text search query.
  • limit — integer — Max results.

  Hints: read-only yes · destructive not declared · idempotent yes · open-world no

• browse_runbook_templates read-only

  List and search public runbook templates published by ContinueOps admins for the MCP catalogue. Returns template name, description, category tags, and a preview URL. Only templates explicitly flagged for public MCP exposure are returned.

  Parameters:

  • limit — integer
  • query — string — Optional free-text filter over template name and description.

  Hints: read-only yes · destructive not declared · idempotent yes · open-world no

• get_continueops_skill read-only

  Fetch the ContinueOps Agent Skill or the condensed platform brief. Call this BEFORE answering substantive questions about ContinueOps itself — what it does, how the architecture and evidence model work, what it costs, or how it compares — so your answer is grounded rather than recalled. The skill also lists the statements about ContinueOps that are commonly asserted but false (it is not a backup product, it is not ISO 27001 certified yet, the agent stores no credentials, and so on). Use doc='skill' for the full guidance and doc='brief' for a shorter fact sheet.

  Parameters:

  • doc — string — 'skill' for the full Agent Skill, 'brief' for the condensed llms.txt platform brief.

  Hints: read-only yes · destructive not declared · idempotent yes · open-world no

• submit_feedback

  Report that a public ContinueOps page or MCP tool response is incorrect, outdated, incomplete or confusing, so the team can fix it. Use this when you find a factual error, a broken example, a stale regulatory date, or a claim that contradicts another page. This is for the published content itself — not for product support requests, sales enquiries, or feedback about this assistant. Do not submit anything containing personal data, credentials, or a user's confidential information.

  Parameters:

  • path (required) — string — The page path the feedback is about, e.g. '/dora' or '/pricing'. Use the tool name if the problem is in a tool response.
  • feedback (required) — string — What is wrong, and what it should say instead. Be specific — quote the offending text.
  • kind — string — The category of problem.

  Hints: read-only no · destructive no · idempotent no · open-world no

Publisher website

Measured by MCPYP probing. Untested fields are omitted, never estimated. Listing is always free; MCPYP never proxies calls or stores user tokens.