MCP compliance catalog

Every MCP tool in the SCOPE compliance index, grouped by server — risk posture, regulatory exposure, and the tools that warrant tighter governance.
303MCP servers
4476tools
Reset 303 of 303 servers
LILT
8 tools · footprint 15
4 med 4 low
Malwarebytes
6 tools · footprint 15
1 high 3 med 2 low
Omni Analytics
6 tools · footprint 15
2 high 4 low
Actively AI
11 tools · footprint 14
4 med 7 low
Apollo
4 tools · footprint 14
1 high 2 med 1 low
Asana
25 tools · footprint 14
5 med 20 low
ClickUp
25 tools · footprint 14
4 med 21 low
ClickUp
25 tools · footprint 14
4 med 21 low
Crossbeam
9 tools · footprint 14
4 med 5 low
Fireflies
3 tools · footprint 14
2 high 1 low
GitLab
15 tools · footprint 14
1 high 4 med 10 low COSOSOX
Google BigQuery
5 tools · footprint 14
1 high 4 low COSOSOX
Google Calendar
8 tools · footprint 14
5 med 3 low
Harmonic
7 tools · footprint 14
4 med 3 low
HubSpot CRM API
12 tools · footprint 14
4 med 8 low
HubSpot Meetings API
12 tools · footprint 14
4 med 8 low
‹ PrevPage 10 of 19Next ›
AshbyDocs ↗
1 high 8 med 8 low · 17 tools · 0 SoD-flagged
regimes APPICCPAEU_AI_ACTGDPRISO_27001LGPDNIST_AI_RMFPIPEDAPIPLPOPIASOC2UK_GDPR

Tools needing tighter control (2 of 17)

ashby-api.filter_records high conf mediumOBO
Runs criteria-based queries across candidates, applications, and jobs, returning matching records in bulk — an exfiltration path for candidate PII at scale.
ashby-api.get_interview_plan low conf lowallow
Shows the configured candidate progression stages for an interview plan; largely structural pipeline configuration.
All other tools (15)
ashby-api.add_note_to_candidate low conf mediumallow
Drafts a profile note on a candidate for later confirmation; reversible and does not commit until the user approves it.
ashby-api.change_application_stage medium conf mediumaudit
Advances a candidate's application through interview stages, effecting a consequential step in an automated hiring pipeline.
ashby-api.consider_candidate_for_job medium conf mediumaudit
Creates a new application linking a candidate to a job, entering that person into the hiring pipeline for the role.
ashby-api.create_candidate medium conf mediumaudit
Adds a new candidate record with contact information, writing applicant personal data into the ATS.
ashby-api.describe_object_fields low conf mediumallow
Returns the filterable field metadata for an object type as a backend helper; exposes schema shape, not record data.
ashby-api.get_candidate medium conf mediumaudit
Pulls a comprehensive candidate profile including resume and interview feedback — a rich single-record disclosure of applicant personal data.
ashby-api.get_interview_details medium conf mediumaudit
Provides pre-interview briefing materials for a scheduled interview, including candidate-specific context.
ashby-api.get_job_pipeline low conf mediumallow
Displays aggregate candidate counts at each pipeline stage for a job; exposes summary metrics rather than individual records.
ashby-api.get_pending_tasks low conf mediumallow
Lists the caller's own outstanding scorecards and approvals; a personal task queue read scoped to the authenticated user.
ashby-api.get_record_details medium conf mediumaudit
Retrieves full information for a job, application, or offer, including offer compensation terms and applicant details.
ashby-api.get_submitted_feedback low conf mediumallow
Retrieves the caller's own submitted scorecard feedback, scoped to the authenticated interviewer.
ashby-api.get_upcoming_interviews medium conf mediumaudit
Lists scheduled interviews with candidate and job details, surfacing identifying applicant information and schedules.
ashby-api.search_product_docs low conf mediumallow
Queries Ashby's product documentation; a read of public help content with no customer data exposure.
ashby-api.search_records_by_name medium conf mediumaudit
Locates candidates, jobs, applications, and email templates by name, surfacing identifying candidate details to the caller.
ashby-api.submit_mcp_feedback low conf mediumallow
Sends a suggestion to the Ashby team about the MCP server; a low-impact outbound feedback message.