Connect Tlpt and your agent gets 17 tools, among them attack_chain, auto_simulate, evidence_bundle. It answers at https://tooloracle.io/tlpt/mcp/ over streamable HTTP, and it listed its tools to an anonymous client, so no sign-in was needed for that. Our probes reached it 3 of 6 times since 11 September 2026; the last check, on 24 October 2026, succeeded.
TLPTOracle — 17-tool TIBER-EU TLPT framework: scope, threat intel, scenarios, reports.
Description as the publisher wrote it.
| Tool | What it does |
|---|---|
attack_chain | Generate kill chain for a TIBER-EU scenario with MITRE mapping. Inputs: scenario_id |
auto_simulate | Autonomous TLPT simulation: generates TIBER-EU scenarios, maps MITRE ATT&CK, creates findings, rates detection. Art. 26. Inputs: entity_id, scenarios |
evidence_bundle | Compile TLPT evidence for authority attestation. Inputs: exercise_id |
finding_register | Log a pentest/TLPT finding. Inputs: exercise_id, title, severity, attack_path, mitre_technique, system_affected |
generate_scenarios | List all 8 TIBER-EU scenarios available for autonomous simulation. |
health_check | Server status. |
mitre_map | Map MITRE ATT&CK techniques to DORA TLPT. Filter by technique ID or tactic. Inputs: technique, tactic |
obligation_map | TLPT obligations DORA-TST-06 to TST-10. |
phase_tracker | Track TIBER-EU 8-phase lifecycle. Inputs: exercise_id, update_phase, phase_status |
ping | Connectivity test. |
register_exercise | Register a TLPT/pentest exercise. Inputs: exercise_id, exercise_name, test_type, scope, start_date, target_end_date |
remediation_plan | Track remediation of TLPT findings. Set add=true to create. Inputs: add, finding_id, action, owner, due_date, exercise_id |
sync_to_ampel | Push TLPT results to AmpelOracle Art. 26 checks. Inputs: entity_id |
team_assignment | Manage Red/Blue/White/Purple team assignments. Inputs: exercise_id, white_team, red_team, blue_team, purple_team |
test_calendar | Annual testing schedule and compliance check. Inputs: year |
threat_profile | Define threat landscape for TLPT scoping. Inputs: exercise_id, sector, geography, threat_actors, attack_scenarios, crown_jewels |
tlpt_readiness | Assess organizational readiness for a TLPT exercise. Inputs: authority_engaged, ti_provider_selected, red_team_selected, scope_defined, white_team_formed, crown_jewels_identified |
Every block below points at https://tooloracle.io/tlpt/mcp/. Pick your client and copy.
claude mcp add --transport http tlpt https://tooloracle.io/tlpt/mcp/
{
"mcpServers": {
"tlpt": {
"command": "npx",
"args": ["-y", "mcp-remote", "https://tooloracle.io/tlpt/mcp/"]
}
}
}{
"mcpServers": {
"tlpt": {
"url": "https://tooloracle.io/tlpt/mcp/"
}
}
}{
"servers": {
"tlpt": {
"type": "http",
"url": "https://tooloracle.io/tlpt/mcp/"
}
}
}{
"context_servers": {
"tlpt": {
"url": "https://tooloracle.io/tlpt/mcp/"
}
}
}{
"mcpServers": {
"tlpt": {
"serverUrl": "https://tooloracle.io/tlpt/mcp/"
}
}
}{
"mcpServers": {
"tlpt": {
"url": "https://tooloracle.io/tlpt/mcp/"
}
}
}name: Tlpt
version: 0.0.1
schema: v1
mcpServers:
- name: Tlpt
type: streamable-http
url: https://tooloracle.io/tlpt/mcp/{
"mcpServers": {
"tlpt": {
"httpUrl": "https://tooloracle.io/tlpt/mcp/"
}
}
}{
"mcpServers": {
"tlpt": {
"type": "http",
"url": "https://tooloracle.io/tlpt/mcp/"
}
}
}{
"mcpServers": {
"tlpt": {
"url": "https://tooloracle.io/tlpt/mcp/"
}
}
}goose://extension?url=https%3A%2F%2Ftooloracle.io%2Ftlpt%2Fmcp%2F&type=streamable_http&id=tlpt&name=Tlpt
It answered our last check on 24 October 2026 in 76 ms. Over 6 checks since 11 September 2026 it answered 3. Status here comes from Neuronto's own probes, not from the publisher.
Yes. It is published by tooloracle.io and served from tooloracle.io, the vendor's own domain: https://tooloracle.io/tlpt/mcp/.
17, as returned by the server's own tools/list on 25 October 2026: attack_chain, auto_simulate, evidence_bundle, finding_register, generate_scenarios, health_check, mitre_map, obligation_map, and 9 more.
It answered our last check on 24 October 2026 in 76 ms. Over 6 checks since 11 September 2026 it answered 3.
Put the server under mcpServers in ~/.cursor/mcp.json with the URL https://tooloracle.io/tlpt/mcp/. The exact JSON is above, with the same setup for Claude Code, Claude Desktop, VS Code, Windsurf, Zed, Gemini CLI and the rest.
It listed its tools to an anonymous client, so reading the tool list needs no key. Individual tools can still ask for credentials in their own inputs.
Publisher: io.tooloracle. Endpoint host: tooloracle.io. ARD identifier: urn:air:io.tooloracle:mcp:tlpt.
First indexed 10 September 2026. The tools are exactly what the server returned; nothing on this page
is inferred from its name. Ranking in Neuronto search is never for sale.