The free tier is enough to see whether the classification and the pillar audits match how your firm reads DORA. What the paid tier adds is not more tools but evidence: an HMAC-signed attestation on each result with a public verify URL an auditor can check without an account.
A Python server for DORA — Regulation EU 2022/2554 — aimed at financial entities: ICT risk, incident classification and reporting workflows.
- An entity classified under the regulation — `classify_entity`
- The regulation's pillars listed, and one audited at a time — `list_pillars`, `audit_pillar`
- A free tier of 50 calls per day
- Optional metering: with `MEOK_PAYG_KEY` set, each call draws on a prepaid balance and returns a top-up URL when it empties
`pip install dora_compliance_mcp`, or have the client launch `uvx` with the `dora-compliance-mcp` package over stdio. Nothing is deducted while `MEOK_PAYG_KEY` is unset. With it set, calls cost £0.05 by default and `MEOK_PAYG_RATE_GBP` changes that; `MEOK_X402_RECEIVER` enables USDC on Base L2. The PyPI package is `dora-compliance-mcp` 1.4.14. Signed attestations with a public verify URL are a Pro feature at £199/mo.
One command — pip install dora-compliance-mcp
