MCP compliance catalog

Every MCP tool in the SCOPE compliance index, grouped by server — risk posture, regulatory exposure, and the tools that warrant tighter governance.
303MCP servers
4476tools
Reset 303 of 303 servers
LILT
8 tools · footprint 15
4 med 4 low
Malwarebytes
6 tools · footprint 15
1 high 3 med 2 low
Omni Analytics
6 tools · footprint 15
2 high 4 low
Actively AI
11 tools · footprint 14
4 med 7 low
Apollo
4 tools · footprint 14
1 high 2 med 1 low
Asana
25 tools · footprint 14
5 med 20 low
ClickUp
25 tools · footprint 14
4 med 21 low
ClickUp
25 tools · footprint 14
4 med 21 low
Crossbeam
9 tools · footprint 14
4 med 5 low
Fireflies
3 tools · footprint 14
2 high 1 low
GitLab
15 tools · footprint 14
1 high 4 med 10 low COSOSOX
Google BigQuery
5 tools · footprint 14
1 high 4 low COSOSOX
Google Calendar
8 tools · footprint 14
5 med 3 low
Harmonic
7 tools · footprint 14
4 med 3 low
HubSpot CRM API
12 tools · footprint 14
4 med 8 low
HubSpot Meetings API
12 tools · footprint 14
4 med 8 low
‹ PrevPage 10 of 19Next ›
BoxDocs ↗
4 high 13 med 8 low · 25 tools · 0 SoD-flagged
regimes APPICCPAGDPRISO_27001LGPDPIPEDAPIPLPOPIASOC2UK_GDPR

Tools needing tighter control (5 of 25)

box-api.create_collaboration high conf mediumOBO
Grants a user or group access to a file, folder, or hub, widening who can read Box content that may hold confidential or personal data — bypasses access-review controls.
box-api.update_collaboration high conf mediumOBO
Changes the role on an existing file, folder, or hub collaboration, escalating or reducing a principal's access to stored content.
box-api.add_file_shared_link high conf mediumOBO
Creates or updates a shared link for a file, potentially exposing its contents to anyone with the URL outside the organization's access controls.
box-api.add_folder_shared_link high conf mediumOBO
Creates or updates a shared link for an entire folder tree, exposing every file inside it externally in a single action.
box-api.search_files_metadata medium conf lowaudit
Runs SQL-like metadata queries across files, which can surface sensitive documents matching arbitrary attribute filters.
All other tools (20)
box-api.add_items_to_hub low conf mediumallow
Adds files, folders, or web links to a hub, surfacing that content within the hub's curated collection for its members.
box-api.ai_extract_freeform medium conf mediumaudit
Reads file content through Box AI with a natural-language prompt to extract metadata, potentially pulling personal or confidential values out of documents.
box-api.ai_extract_structured medium conf mediumaudit
Uses the Box AI Enhanced Extract Agent to pull structured key-value data from files, which may include personal or regulated fields.
box-api.ai_qa_multi_file medium conf mediumaudit
Answers questions across multiple files via Box AI, synthesizing content that may span confidential or personal information from several documents at once.
box-api.ai_qa_single_file medium conf mediumaudit
Answers questions about a single file via Box AI, reading its contents which may contain personal or confidential data.
box-api.copy_file low conf mediumallow
Duplicates a file into a destination folder; reversible, though it can propagate content into a differently-permissioned location.
box-api.create_docgen_batch medium conf mediumaudit
Generates documents from a Doc Gen template by merging supplied data into placeholder tags, producing new files that may embed personal data.
box-api.create_hub low conf mediumallow
Creates a new hub container for organizing curated content; low-impact and reversible.
box-api.create_metadata_template medium conf mediumaudit
Creates an enterprise-wide metadata template, defining schema fields that govern how content is classified across the organization.
box-api.get_download_url medium conf mediumaudit
Issues a temporary URL to download a file, providing an egress path for content that may contain confidential or personal data.
box-api.get_file_content medium conf mediumaudit
Returns the raw content of a stored file, which may include personal data, credentials, or confidential business records.
box-api.get_upload_url medium conf mediumaudit
Issues a temporary URL to upload file content into Box, creating an ingress path outside normal application review.
box-api.list_item_collaborations low conf mediumallow
Enumerates who currently collaborates on a file or folder, revealing the access-control state and the identities of collaborators.
box-api.move_file medium conf mediumaudit
Relocates a file to a new folder, which changes the permissions and shared-link context the file inherits from its parent.
box-api.search_files_keyword low conf mediumallow
Locates files by keyword across the accessible corpus, a read-only discovery step that helps surface relevant content.
box-api.set_file_metadata low conf mediumallow
Creates or updates custom metadata on a file, attaching classification or business attributes used by downstream automation.
box-api.update_file_properties low conf mediumallow
Updates a file's name, description, tags, and collections; cosmetic metadata changes with no effect on file contents.
box-api.update_metadata_template medium conf mediumaudit
Alters an existing enterprise metadata template, changing schema fields that every file tagged with the template depends on.
box-api.upload_file low conf mediumallow
Uploads a new file to Box, adding content to storage; reversible and low-impact on its own.
box-api.upload_file_version medium conf mediumaudit
Replaces the current version of an existing file with new contents, changing what collaborators see while retaining prior versions in history.