governanceoracle
Server Details
GovernanceOracle - 10 governance tools: board packs, policies, attestations, evidence.
- Status
- Healthy
- Last Tested
- Transport
- Streamable HTTP
- URL
- Repository
- ToolOracle/governanceoracle
- GitHub Stars
- 0
Glama MCP Gateway
Connect through Glama MCP Gateway for full control over tool access and complete visibility into every call.
Full call logging
Every tool call is logged with complete inputs and outputs, so you can debug issues and audit what your agents are doing.
Tool access control
Enable or disable individual tools per connector, so you decide what your agents can and cannot do.
Managed credentials
Glama handles OAuth flows, token storage, and automatic rotation, so credentials never expire on your clients.
Usage analytics
See which tools your agents call, how often, and when, so you can understand usage patterns and catch anomalies.
Tool Definition Quality
Average 3/5 across 11 of 11 tools scored. Lowest: 2.4/5.
Most tools have distinct purposes, but board_report and board_report_llm overlap, and annual_review/framework_review could be confused. Descriptions help differentiate them.
Names follow a mix of noun_verb and verb_noun patterns, with one tool using an _llm suffix. While readable, the pattern is not uniform.
11 tools cover the GRC domain well without being overwhelming. Each tool serves a clear function within DORA-related governance.
The tool set covers finding lifecycle, action tracking, exceptions, reviews, and reporting. Minor gaps exist (e.g., no explicit update/delete for findings), but core workflows are supported.
Available Tools
11 toolsaction_trackerInspect
Track remediation actions with deadlines and ownership.
| Name | Required | Description | Default |
|---|---|---|---|
| add | No | Set true to add a new action | |
| owner | No | ||
| title | No | ||
| due_date | No | ||
| priority | No | ||
| finding_id | No |
annual_reviewInspect
Annual framework review evidence bundle — checklist, stats, Art. 6(5) compliance.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
board_reportInspect
Generate Management Body review pack — executive summary, open findings, risk posture, overdue items.
| Name | Required | Description | Default |
|---|---|---|---|
| period | No | Reporting period (e.g., 'Q1 2026') |
board_report_llmInspect
AI-powered board executive summary using local Gemma 4 LLM. Generates narrative summary from current findings in German or English.
| Name | Required | Description | Default |
|---|---|---|---|
| language | No | Language: de or en | en |
| additional_context | No | Extra context to include (deadlines, events) |
control_statusInspect
Control effectiveness dashboard across all DORA control domains.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
exception_registerInspect
View or add risk acceptances / exceptions with expiry tracking.
| Name | Required | Description | Default |
|---|---|---|---|
| add | No | Set true to add a new exception | |
| title | No | ||
| finding_id | No | ||
| accepted_by | No | ||
| expiry_date | No | ||
| acceptance_date | No | ||
| risk_description | No | ||
| compensating_controls | No |
framework_reviewInspect
ICT Risk Management Framework annual review — effectiveness assessment per DORA area.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
health_checkInspect
Server status.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
kpi_dashboardInspect
ICT Risk KPIs — open findings, overdue rate, remediation rate, exception count.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
list_findingsInspect
List findings with optional filters.
| Name | Required | Description | Default |
|---|---|---|---|
| owner | No | ||
| domain | No | ||
| status | No | ||
| severity | No |
register_findingInspect
Register an audit finding, risk, or control gap.
| Name | Required | Description | Default |
|---|---|---|---|
| notes | No | ||
| owner | No | ||
| title | Yes | ||
| domain | No | ||
| source | No | audit, pentest, incident, self-assessment | |
| status | No | ||
| due_date | No | ||
| severity | Yes | ||
| finding_id | No | ||
| description | No | ||
| evidence_ref | No | ||
| related_article | No | ||
| remediation_plan | No |
Claim this connector by publishing a /.well-known/glama.json file on your server's domain with the following structure:
{
"$schema": "https://glama.ai/mcp/schemas/connector.json",
"maintainers": [{ "email": "your-email@example.com" }]
}The email address must match the email associated with your Glama account. Once published, Glama will automatically detect and verify the file within a few minutes.
Control your server's listing on Glama, including description and metadata
Access analytics and receive server usage reports
Get monitoring and health status updates for your server
Feature your server to boost visibility and reach more users
For users:
Full audit trail – every tool call is logged with inputs and outputs for compliance and debugging
Granular tool control – enable or disable individual tools per connector to limit what your AI agents can do
Centralized credential management – store and rotate API keys and OAuth tokens in one place
Change alerts – get notified when a connector changes its schema, adds or removes tools, or updates tool definitions, so nothing breaks silently
For server owners:
Proven adoption – public usage metrics on your listing show real-world traction and build trust with prospective users
Tool-level analytics – see which tools are being used most, helping you prioritize development and documentation
Direct user feedback – users can report issues and suggest improvements through the listing, giving you a channel you would not have otherwise
The connector status is unhealthy when Glama is unable to successfully connect to the server. This can happen for several reasons:
The server is experiencing an outage
The URL of the server is wrong
Credentials required to access the server are missing or invalid
If you are the owner of this MCP connector and would like to make modifications to the listing, including providing test credentials for accessing the server, please contact support@glama.ai.
Discussions
No comments yet. Be the first to start the discussion!
Related MCP Servers
- Alicense-qualityAmaintenanceCryptographic AI governance and audit. 18 tools, 28 frameworks. EU AI Act, NIST AI RMF, OWASP Agentic Top 10, CMMC, SR 11-7, ISO 42001. Tool policy gates, trust mesh, inference attestation, audit sessions. Zero-config demo mode.Last updated228Apache 2.0
- Alicense-quality-maintenanceGovernance primitives for autonomous agents. Verify actions against policy, record signed provenance, and bind intents cryptographically. Free tier available.Last updated
- Alicense-qualityBmaintenanceProvides 62 AI governance tools for compliance with regulations like the EU AI Act, enabling risk management, transparency, bias detection, and more.Last updatedMIT
- AlicenseBqualityAmaintenanceA governance proxy for AI tools — every MCP/agent tool call is policy-gated, secret-redacted, and written to a hash-chained, offline-verifiable audit trail.Last updated13MIT