MCP compliance catalog

Every MCP tool in the SCOPE compliance index, grouped by server — risk posture, regulatory exposure, and the tools that warrant tighter governance.
387MCP servers
5470tools
Reset 387 of 387 servers
Granola
6 tools · footprint 17
3 high 1 med 2 low
iManage Work
14 tools · footprint 17
1 high 5 med 8 low
Jotform
5 tools · footprint 17
1 high 2 med 2 low
Mermaid Chart
25 tools · footprint 17
1 high 2 med 22 low
Quartr
25 tools · footprint 17
1 high 7 med 17 low
SS&C Black Diamond
6 tools · footprint 17
2 critical 4 low COSOGLBA+1 more
Todoist
25 tools · footprint 17
7 med 18 low
Unthread
14 tools · footprint 17
7 med 7 low
Ashby
17 tools · footprint 16
6 med 11 low
CData Connect AI
8 tools · footprint 16
1 critical 1 high 6 low
DataHub
24 tools · footprint 16
8 med 16 low
Google Compute Engine
25 tools · footprint 16
1 critical 6 med 18 low
Google Drive
7 tools · footprint 16
2 high 2 med 3 low
Guru
5 tools · footprint 16
3 med 2 low
HealthEx
15 tools · footprint 16
1 high 11 med 3 low HIPAA
Lumin PDF
7 tools · footprint 16
2 high 2 med 3 low
‹ PrevPage 11 of 25Next ›
UpworkDocs ↗
1 critical 5 high 9 med 4 low · 19 tools · 1 SoD-flagged
regimes APPICCPACOSOCO_AI_ACTEU_AI_ACTGDPRISO_27001LGPDNIST_AI_RMFPIPEDAPIPLPOPIASOC2SOXUK_GDPR

Tools needing tighter control (6 of 19)

upwork.milestones_and_payments critical conf mediumhuman approval
Approving or rejecting a contract milestone authorizes release of escrowed funds to a freelancer, moving money and changing recognized project cost in a single step.
upwork.financials_and_time_reports high conf mediumOBO
Pulls timesheets, work-diary activity records, and transaction history across every active contract, exposing worker-monitoring data and spend history in bulk.
upwork.offers_and_contracts high conf mediumOBO
Prepares a contract offer carrying scope and rate, committing the client to spend once confirmed on upwork.com, and reads terms of every active contract.
upwork.respond_to_invitations_and_offers high conf mediumOBO
Accepts or declines direct offers and invitations, which starts or forfeits a revenue-bearing contract at the stated rate once confirmed on upwork.com.
upwork.messaging high conf mediumOBO
Reads private message threads with freelancers and applicants and sends messages under the account holder's identity, exposing and impersonating confidential correspondence.
upwork.agency_dashboard high conf mediumOBO
Returns one aggregated view of every agency member's invitations, offers, messages, and contracts, concentrating the whole organization's client data into a single response.
All other tools (13)
upwork.account_and_access low conf mediumallow
Enumerates which Upwork accounts the connected credential can act as — freelancer, client, or agency — plus company details, revealing the agent's effective reach.
upwork.contracts_and_work_delivery medium conf mediumaudit
Submits milestone deliverables and reports logged time against active contracts, which is the billing input a client reviews before funds are released.
upwork.dashboard_overview low conf mediumallow
Summarizes new proposals, pending offers, messages, and contract updates in one read; a status roll-up that changes nothing but reveals current pipeline state.
upwork.draft_and_submit_proposals medium conf mediumaudit
Submits a proposal to a job posting, spending Connects credits and putting a binding rate and pitch in front of a prospective client.
upwork.earnings_and_profile medium conf mediumaudit
Reads earnings and available balance, and rewrites profile fields including employment history, education, and languages — personal data that drives marketplace matching.
upwork.file_attachments medium conf mediumaudit
Uploads and downloads attachments bound to proposals, offers, jobs, and messages — files that routinely carry resumes, identity documents, and client deliverables.
upwork.find_and_shortlist_talent medium conf mediumaudit
Searches freelancers by skill, rate, and location and returns ranked profiles with full work history, producing an automated shortlist that shapes who gets hired.
upwork.find_the_right_jobs low conf mediumallow
Searches and saves marketplace job listings by skill, budget, or type; read-only discovery over publicly posted jobs with no state change beyond favorites.
upwork.invitations_and_proposals medium conf mediumaudit
Invites specific freelancers to apply and declines received proposals off ranked summaries, an adverse hiring decision recorded against a named applicant.
upwork.post_and_manage_jobs medium conf mediumaudit
Publishes and edits live job postings on the public Upwork marketplace, so drafted scope, budget, and requirements become externally visible under the company's name.
upwork.profile_visibility medium conf mediumaudit
Toggles the availability badge and manages profile boost ads, which are paid placements — changes here incur marketplace ad spend and alter inbound lead volume.
upwork.talent_lists low conf mediumallow
Creates talent lists and saves freelancers into them for later consideration; a reversible bookmarking write over already-published marketplace profiles.
upwork.teams_and_members medium conf mediumaudit
Returns the agency's team structure and full member roster, exposing the identities and affiliations of everyone working under the organization.