EventFabric

From polling to real-time. Receives compliance events (CVE, cloud outage, breach, regulation change) and auto-dispatches to the right oracles via Conductor.

14
MCP Tools
12
Routing Rules
4
Priority Levels
∞
Events/day
P1: CVE/Breach/CloudP2: Regulation/SanctionsP3: Daily/WeeklyAll Free
MCP Endpoint: https://tooloracle.io/eventfabric/mcp
Health: https://tooloracle.io/eventfabric/health
Transport: StreamableHTTP + SSE
Routes to: Conductor.react_to_event, Conductor.plan_remediation, Conductor.sync_all, Conductor.daily_check, Conductor.full_drift_scan

Tools (14)

emit_event
Emit event → auto-routes to Conductor based on 12 rules.
Core
active_rules
Show all routing rules (event → Conductor action).
Reference
test_webhook
Simulate a webhook event to test routing.
Testing
event_log
Query event history with filters.
Audit
event_stats
Event statistics: by type, source, status.
Analytics
create_rule
Create custom routing rule.
Config
subscribe
Subscribe an oracle to an event type.
Pub/Sub
unsubscribe
Remove a subscription.
Pub/Sub
list_subscriptions
Show all active subscriptions.
Reference
schedule_scan
Schedule periodic drift/compliance scans.
Cron
list_schedules
View scheduled scans.
Reference
webhook_status
Webhook health: events processed, rules active.
System
health_check
Server status.
System
ping
Connectivity test.
System

12 Default routing rules

P1 — Critical (immediate):
cve_critical → react_to_event · cloud_outage → react_to_event · security_breach → react_to_event · audit_notice → react_to_event

P2 — High (within hours):
regulation_change → react_to_event · sanctions_update → react_to_event · drift_detected → react_to_event · sla_breach → react_to_event · finding_overdue → plan_remediation

P3 — Scheduled:
evidence_expired → sync_all · daily_check → daily_check · weekly_drift_scan → full_drift_scan