MCP compliance catalog

Every MCP tool in the SCOPE compliance index, grouped by server — risk posture, regulatory exposure, and the tools that warrant tighter governance.
387MCP servers
5470tools
Reset 387 of 387 servers
Dropbox
23 tools · footprint 18
1 high 6 med 16 low
Felt Maps
23 tools · footprint 18
2 high 8 med 13 low
HubSpot
12 tools · footprint 18
1 high 3 med 8 low
incident.io
25 tools · footprint 18
1 high 6 med 18 low
Intapp Celeste
10 tools · footprint 18
2 high 4 med 4 low
Intercom
13 tools · footprint 18
8 med 5 low
LunarCrush
15 tools · footprint 18
8 med 7 low
Mixpanel
23 tools · footprint 18
1 high 6 med 16 low
Slack
7 tools · footprint 18
2 high 4 med 1 low
Wrike
25 tools · footprint 18
1 high 8 med 16 low
Adobe Customer Journey Analytics
25 tools · footprint 17
1 high 5 med 19 low
Campfire
12 tools · footprint 17
7 med 5 low
Canva
32 tools · footprint 17
7 med 25 low
Circleback
11 tools · footprint 17
2 high 3 med 6 low
Dremio Cloud
11 tools · footprint 17
1 critical 1 high 1 med 8 low
Firecrawl
19 tools · footprint 17
7 med 12 low
‹ PrevPage 10 of 25Next ›
Tray.aiDocs ↗
1 critical 5 high 7 med 9 low · 22 tools · 5 SoD-flagged
regimes APPICCPAGDPRISO_27001LGPDNIST_CSFPIPEDAPIPLPOPIASOC2UK_GDPR

Tools needing tighter control (7 of 22)

tray-ai.trigger_workflow critical conf mediumhuman approval
Fires a production workflow that executes every connector step against live systems — Slack posts, CRM writes and third-party webhooks all land, with no dry-run and no undo.
tray-ai.create_workflow high conf mediumhuman approval
Creates a workflow and, for agent-tool triggers, auto-registers a callable API operation under API Management — new automation reaches production without a manual review step.
tray-ai.import_workflow high conf lowhuman approval
Loads a whole workflow definition into the workspace in one call, introducing integration logic and connector wiring that never passed through the normal build-and-review path.
tray-ai.update_workflow_steps high conf mediumOBO
Overwrites step properties wholesale and can swap the operation or the auth_id a step runs under, silently repointing production automation at a different system or credential.
tray-ai.create_auth_collection high conf mediumhuman approval
Starts a new credential grant for a third-party service, expanding which external systems workspace automation can reach once the user completes sign-in.
tray-ai.call_connector high conf mediumOBO
Executes an operation directly against a connected third-party system using stored workspace credentials, reaching real records outside Tray even though the default gate favours schema-discovery calls.
tray-ai.update_workflow_metadata medium conf mediumhuman approval
Flips a workflow's enabled state, name or tags without creating a new version, so an automation can be switched on or off with no version-history trace.
All other tools (15)
tray-ai.add_workflow_steps medium conf mediumaudit
Adds steps to an existing workflow in a batch, changing what the automation does on its next run; reversible but live once the workflow fires.
tray-ai.check_auth_completion low conf mediumallow
Polls whether a pending authentication has been completed; returns status only, with no credential material exposed.
tray-ai.create_project low conf mediumallow
Creates an empty project container for workflows; no data or automation runs until workflows are added to it.
tray-ai.get_workflow low conf mediumallow
Reads a workflow's structure and step configuration, exposing how an integration is wired but not the records flowing through it.
tray-ai.get_workflow_execution medium conf mediumaudit
Opens a specific execution run and its step-level results, giving visibility into what the automation processed and where it failed.
tray-ai.get_workflow_step_detail medium conf mediumaudit
Exposes the literal input and output payload of a workflow step, which routinely contains customer records pulled from the connected CRM, support or HR system.
tray-ai.list_authentications medium conf mediumaudit
Enumerates every stored authentication in the workspace, mapping which external systems are connected and which auth ids a workflow step can be pointed at.
tray-ai.list_connector_operations low conf mediumallow
Returns a connector's operations and their input/output schemas; catalogue metadata that carries no tenant data.
tray-ai.list_connectors low conf mediumallow
Searches the catalogue of available connectors; returns product metadata only, with no workspace or customer data involved.
tray-ai.list_projects low conf mediumallow
Enumerates projects in the workspace, revealing the names and scope of the automation estate to whoever holds the token.
tray-ai.list_service_environments low conf mediumallow
Lists the auth environments available for a service; configuration metadata used to set up a credential, not the credential itself.
tray-ai.list_workflow_executions low conf mediumallow
Lists recent execution summaries for a workflow — run status and timing only, without the payloads those runs carried.
tray-ai.remove_workflow_step medium conf mediumaudit
Deletes a step from a live workflow, which can quietly drop a validation, notification or logging stage from an integration that downstream teams depend on.
tray-ai.update_workflow_structure medium conf mediumaudit
Reorders steps or moves them between error and success branches, changing execution order and failure handling for an integration already running in production.
tray-ai.validate_workflow low conf mediumallow
Runs a read-only structural audit of a workflow and returns findings; no state changes and no data leaves the workspace.