MCP compliance catalog

Every MCP tool in the SCOPE compliance index, grouped by server — risk posture, regulatory exposure, and the tools that warrant tighter governance.
387MCP servers
5470tools
Reset 387 of 387 servers
Granola
6 tools · footprint 17
3 high 1 med 2 low
iManage Work
14 tools · footprint 17
1 high 5 med 8 low
Jotform
5 tools · footprint 17
1 high 2 med 2 low
Mermaid Chart
25 tools · footprint 17
1 high 2 med 22 low
Quartr
25 tools · footprint 17
1 high 7 med 17 low
SS&C Black Diamond
6 tools · footprint 17
2 critical 4 low COSOGLBA+1 more
Todoist
25 tools · footprint 17
7 med 18 low
Unthread
14 tools · footprint 17
7 med 7 low
Ashby
17 tools · footprint 16
6 med 11 low
CData Connect AI
8 tools · footprint 16
1 critical 1 high 6 low
DataHub
24 tools · footprint 16
8 med 16 low
Google Compute Engine
25 tools · footprint 16
1 critical 6 med 18 low
Google Drive
7 tools · footprint 16
2 high 2 med 3 low
Guru
5 tools · footprint 16
3 med 2 low
HealthEx
15 tools · footprint 16
1 high 11 med 3 low HIPAA
Lumin PDF
7 tools · footprint 16
2 high 2 med 3 low
‹ PrevPage 11 of 25Next ›
Tray.aiDocs ↗
1 critical 5 high 7 med 9 low · 22 tools · 5 SoD-flagged
regimes APPICCPAGDPRISO_27001LGPDNIST_CSFPIPEDAPIPLPOPIASOC2UK_GDPR

Tools needing tighter control (7 of 22)

tray-ai.trigger_workflow critical conf mediumhuman approval
Fires a production workflow that executes every connector step against live systems — Slack posts, CRM writes and third-party webhooks all land, with no dry-run and no undo.
tray-ai.create_workflow high conf mediumhuman approval
Creates a workflow and, for agent-tool triggers, auto-registers a callable API operation under API Management — new automation reaches production without a manual review step.
tray-ai.import_workflow high conf lowhuman approval
Loads a whole workflow definition into the workspace in one call, introducing integration logic and connector wiring that never passed through the normal build-and-review path.
tray-ai.update_workflow_steps high conf mediumOBO
Overwrites step properties wholesale and can swap the operation or the auth_id a step runs under, silently repointing production automation at a different system or credential.
tray-ai.create_auth_collection high conf mediumhuman approval
Starts a new credential grant for a third-party service, expanding which external systems workspace automation can reach once the user completes sign-in.
tray-ai.call_connector high conf mediumOBO
Executes an operation directly against a connected third-party system using stored workspace credentials, reaching real records outside Tray even though the default gate favours schema-discovery calls.
tray-ai.update_workflow_metadata medium conf mediumhuman approval
Flips a workflow's enabled state, name or tags without creating a new version, so an automation can be switched on or off with no version-history trace.
All other tools (15)
tray-ai.add_workflow_steps medium conf mediumaudit
Adds steps to an existing workflow in a batch, changing what the automation does on its next run; reversible but live once the workflow fires.
tray-ai.check_auth_completion low conf mediumallow
Polls whether a pending authentication has been completed; returns status only, with no credential material exposed.
tray-ai.create_project low conf mediumallow
Creates an empty project container for workflows; no data or automation runs until workflows are added to it.
tray-ai.get_workflow low conf mediumallow
Reads a workflow's structure and step configuration, exposing how an integration is wired but not the records flowing through it.
tray-ai.get_workflow_execution medium conf mediumaudit
Opens a specific execution run and its step-level results, giving visibility into what the automation processed and where it failed.
tray-ai.get_workflow_step_detail medium conf mediumaudit
Exposes the literal input and output payload of a workflow step, which routinely contains customer records pulled from the connected CRM, support or HR system.
tray-ai.list_authentications medium conf mediumaudit
Enumerates every stored authentication in the workspace, mapping which external systems are connected and which auth ids a workflow step can be pointed at.
tray-ai.list_connector_operations low conf mediumallow
Returns a connector's operations and their input/output schemas; catalogue metadata that carries no tenant data.
tray-ai.list_connectors low conf mediumallow
Searches the catalogue of available connectors; returns product metadata only, with no workspace or customer data involved.
tray-ai.list_projects low conf mediumallow
Enumerates projects in the workspace, revealing the names and scope of the automation estate to whoever holds the token.
tray-ai.list_service_environments low conf mediumallow
Lists the auth environments available for a service; configuration metadata used to set up a credential, not the credential itself.
tray-ai.list_workflow_executions low conf mediumallow
Lists recent execution summaries for a workflow — run status and timing only, without the payloads those runs carried.
tray-ai.remove_workflow_step medium conf mediumaudit
Deletes a step from a live workflow, which can quietly drop a validation, notification or logging stage from an integration that downstream teams depend on.
tray-ai.update_workflow_structure medium conf mediumaudit
Reorders steps or moves them between error and success branches, changing execution order and failure handling for an integration already running in production.
tray-ai.validate_workflow low conf mediumallow
Runs a read-only structural audit of a workflow and returns findings; no state changes and no data leaves the workspace.