{"serverId":"mcp-registry/io.tooloracle/cybershield","tools":[{"name":"attack_surface_check","fixed":{"name":"attack_surface_check","description":"Attack surface assessment checklist. Web apps, remote access, cloud, IoT, email. Prioritized security checks.","inputSchema":{"type":"object","properties":{"iot_devices":{"type":"boolean"},"cloud_services":{"type":"boolean"},"employee_count":{"type":"integer"},"web_applications":{"type":"boolean"},"remote_access_vpn":{"type":"boolean"}},"additionalProperties":false},"annotations":{"readOnlyHint":true}},"changes":[{"kind":"annotations","detail":"Added readOnlyHint: true (inferred from the name).","verify":true}],"tokensBefore":116,"tokensAfter":116}],"toolsChanged":1,"tokensSaved":0,"todo":[{"tool":"attack_surface_check","params":["iot_devices","cloud_services","employee_count","web_applications","remote_access_vpn"]},{"tool":"cve_risk_score","params":["cve_id","cvss_score","in_kev_catalog","public_exploit","internet_facing","affected_systems"]},{"tool":"dora_ict_risk","params":["learning_evolving","response_recovery","detection_measures","ict_risk_framework","communication_plans","ict_asset_inventory","protection_prevention"]},{"tool":"nis2_compliance","params":["sector","mfa_deployed","access_control","employee_count","risk_management","incident_handling","business_continuity","cryptography_policy","annual_turnover_meur","supply_chain_security","cyber_hygiene_training","vulnerability_management","incident_reporting_process"]},{"tool":"nis2_incident_report","params":["severity","incident_type","affected_services","cross_border_impact","affected_users_estimate"]},{"tool":"phishing_indicators","params":["subject","sender_email","suspicious_url","creates_urgency","asks_for_credentials","has_unexpected_attachment"]}],"note":"Deterministic fixes. Changes marked verify need a human look before shipping (renames, inferred annotations, inferred types, removed text). Parameter descriptions in `todo` need to be written by someone who knows the API."}