Every MCP tool in the SCOPE compliance index, grouped by server — risk posture, regulatory exposure, and the tools that warrant tighter governance.
3 critical 12 high 10 med · 25 tools · 3 SoD-flagged
regimes APPICCPAGDPRISO_27001LGPDNIST_CSFPIPEDAPIPLPOPIASOC2UK_GDPR
Tools needing tighter control (15 of 25)
posthog-api.external-data-schemas-delete-data critical conf mediumhuman approval
Purges the synced data of a warehouse table irreversibly, destroying materialized records with no recovery path.
posthog-api.persons-bulk-delete critical conf mediumhuman approval
Deletes person profiles in bulk irreversibly, wiping identifiable customer records and their associated event history at scale.
posthog-api.session-recording-bulk-delete critical conf mediumhuman approval
Deletes session recordings in bulk irreversibly, destroying screen-capture records of user activity at scale.
posthog-api.organization-enforce-2fa-execute high conf mediumOBO
Enforces two-factor authentication org-wide, changing the authentication policy for every member and locking out accounts that have not enrolled.
posthog-api.data-warehouse-stored-credentials-list high conf mediumOBO
Enumerates stored data-source credentials awaiting setup, exposing which external systems the workspace can connect to and their pending secret material.
posthog-api.external-data-sources-create high conf mediumOBO
Registers a new data-warehouse source with connection credentials, opening an ongoing sync path between an external database and the analytics workspace.
posthog-api.external-data-sources-update-webhook-inputs-create high conf mediumOBO
Rewrites a source's webhook inputs including the signing secret, which can silently redirect or forge inbound data-ingestion traffic.
posthog-api.external-data-sources-destroy high conf mediumOBO
Deletes a data-warehouse source connection, severing an integration and halting every sync that depends on it.
posthog-api.execute-sql high conf mediumOBO
Runs an arbitrary SQL query across the full analytics dataset, capable of reading person-level PII and event history in bulk.
posthog-api.batch-export-create high conf mediumOBO
Configures a recurring batch export that streams event and person data to an external destination, an ongoing exfiltration channel for analytics PII.
posthog-api.file-download-batch-exports-create high conf mediumOBO
Starts a file-download export, producing a bulk downloadable extract of analytics data that can carry person-level PII off-platform.
posthog-api.persons-property-delete high conf mediumOBO
Removes a property from a person profile, altering identifiable customer data and any segmentation or targeting that depends on it.
posthog-api.session-recording-delete high conf mediumOBO
Deletes a session recording, removing a screen-capture record of an individual user's activity.
posthog-api.surveys-responses-list high conf mediumOBO
Lists individual survey responses with resolved question text, surfacing user-submitted free-form answers that can contain personal data.
posthog-api.feature-flags-bulk-delete-create high conf mediumOBO
Deletes feature flags in bulk, potentially changing application behavior for many users at once and removing rollout gates.
All other tools (10)
posthog-api.cohorts-create medium conf mediumaudit
Creates a cohort definition that segments identifiable users for targeting, reporting, and feature-flag rollout.
posthog-api.create-feature-flag medium conf mediumaudit
Creates a feature flag that can gate or expose functionality to end users in production.
posthog-api.dashboard-delete medium conf mediumaudit
Deletes a dashboard, removing shared reporting views that teams may depend on for monitoring.
posthog-api.delete-feature-flag medium conf mediumaudit
Deletes a feature flag, removing its rollout gate and reverting the gated behavior for all users.
posthog-api.integration-delete medium conf mediumaudit
Removes a configured integration, breaking downstream automations and destinations that rely on the connected service.
posthog-api.persons-property-set medium conf mediumaudit
Writes a property onto a person profile, modifying identifiable customer data used in cohorts, flags, and analytics.
posthog-api.project-settings-update medium conf mediumaudit
Changes project-wide settings, altering ingestion, access, and data-handling configuration for the entire project.
posthog-api.proxy-create medium conf mediumaudit
Provisions a managed reverse proxy that routes production event-ingestion traffic through PostHog-controlled infrastructure.
posthog-api.survey-launch medium conf mediumaudit
Launches a survey immediately, beginning collection of responses from live end users.
posthog-api.update-feature-flag medium conf mediumaudit
Updates a feature flag's targeting or rollout, changing which users receive a given behavior in production.