io.tooloracle/accessoracle

Measured conclusion: Deep-tested. L2 outcome: tools_ok.

AccessOracle - 10 access control tools: IAM, PAM, recertification, segregation of duties.

Add to your agent

Copy this into your MCP client config:

{
  "mcpServers": {
    "accessoracle": {
      "url": "https://tooloracle.io/access/mcp/",
      "transport": "streamable-http"
    }
  }
}

Measured tools (10)

• register_account

  Register a privileged/service/shared account for IAM tracking.

  Parameters:

  • username (required) — string
  • account_type (required) — string
  • notes — string
  • owner — string
  • system — string
  • is_shared — boolean
  • account_id — string
  • cif_access — boolean
  • department — string
  • mfa_method — string
  • criticality — string
  • mfa_enabled — boolean
  • remote_access — boolean

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• list_accounts

  List accounts with filters.

  Parameters:

  • no_mfa — boolean
  • system — string
  • account_type — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• mfa_compliance

  Check MFA coverage against DORA Art. 9(4)(d) requirements.

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• access_review

  Track access recertification reviews. Set add=true to log a review.

  Parameters:

  • add — boolean
  • notes — string
  • decision — string
  • reviewer — string
  • account_id — string
  • review_date — string
  • overdue_days — integer

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• sod_matrix

  Detect Segregation of Duties conflicts across accounts.

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• privileged_audit

  Privileged account audit — MFA, shared, review status.

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• jml_process

  Joiner/Mover/Leaver process tracking. Set log_event=true to log.

  Parameters:

  • date — string
  • username — string
  • log_event — boolean
  • event_type — string
  • verified_by — string
  • actions_taken — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• break_glass_log

  Emergency access logging. Set log=true to record usage.

  Parameters:

  • log — boolean
  • reason — string
  • used_by — string
  • account_id — string
  • approved_by — string
  • duration_minutes — integer

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• access_gap_analysis

  Gap analysis against RTS Art. 21 requirements.

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• health_check

  Server status.

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

Repository

Measured by MCPYP probing. Untested fields are omitted, never estimated. Listing is always free; MCPYP never proxies calls or stores user tokens.