MCP compliance catalog

Every MCP tool in the SCOPE compliance index, grouped by server — risk posture, regulatory exposure, and the tools that warrant tighter governance.
303MCP servers
4476tools
Reset 303 of 303 servers
Guidepoint
5 tools · footprint 10
2 med 3 low
isolved People Cloud
6 tools · footprint 10
2 med 4 low
Lightfield
5 tools · footprint 10
2 med 3 low
Shopify
6 tools · footprint 10
1 med 5 low
Swagger (SmartBear)
25 tools · footprint 10
10 med 15 low
Benchling
4 tools · footprint 9
2 high 2 med
Boltz
11 tools · footprint 9
7 med 4 low
CargoAi
6 tools · footprint 9
1 med 5 low
ClinicalTrials.gov Connector
6 tools · footprint 9
1 med 5 low
Exa
7 tools · footprint 9
1 med 6 low
Exa
4 tools · footprint 9
1 med 3 low
FactSet AI-Ready Data
18 tools · footprint 9
1 med 17 low
HubSpot Developer MCP Server (App & CMS Development)
21 tools · footprint 9
4 med 17 low
Indeed
4 tools · footprint 9
1 med 3 low
Canary Data
14 tools · footprint 8
14 low
Google Contacts (People API MCP Server)
3 tools · footprint 8
3 low
‹ PrevPage 13 of 19Next ›
AshbyDocs ↗
1 high 8 med 8 low · 17 tools · 0 SoD-flagged
regimes APPICCPAEU_AI_ACTGDPRISO_27001LGPDNIST_AI_RMFPIPEDAPIPLPOPIASOC2UK_GDPR

Tools needing tighter control (2 of 17)

ashby-api.filter_records high conf mediumOBO
Runs criteria-based queries across candidates, applications, and jobs, returning matching records in bulk — an exfiltration path for candidate PII at scale.
ashby-api.get_interview_plan low conf lowallow
Shows the configured candidate progression stages for an interview plan; largely structural pipeline configuration.
All other tools (15)
ashby-api.add_note_to_candidate low conf mediumallow
Drafts a profile note on a candidate for later confirmation; reversible and does not commit until the user approves it.
ashby-api.change_application_stage medium conf mediumaudit
Advances a candidate's application through interview stages, effecting a consequential step in an automated hiring pipeline.
ashby-api.consider_candidate_for_job medium conf mediumaudit
Creates a new application linking a candidate to a job, entering that person into the hiring pipeline for the role.
ashby-api.create_candidate medium conf mediumaudit
Adds a new candidate record with contact information, writing applicant personal data into the ATS.
ashby-api.describe_object_fields low conf mediumallow
Returns the filterable field metadata for an object type as a backend helper; exposes schema shape, not record data.
ashby-api.get_candidate medium conf mediumaudit
Pulls a comprehensive candidate profile including resume and interview feedback — a rich single-record disclosure of applicant personal data.
ashby-api.get_interview_details medium conf mediumaudit
Provides pre-interview briefing materials for a scheduled interview, including candidate-specific context.
ashby-api.get_job_pipeline low conf mediumallow
Displays aggregate candidate counts at each pipeline stage for a job; exposes summary metrics rather than individual records.
ashby-api.get_pending_tasks low conf mediumallow
Lists the caller's own outstanding scorecards and approvals; a personal task queue read scoped to the authenticated user.
ashby-api.get_record_details medium conf mediumaudit
Retrieves full information for a job, application, or offer, including offer compensation terms and applicant details.
ashby-api.get_submitted_feedback low conf mediumallow
Retrieves the caller's own submitted scorecard feedback, scoped to the authenticated interviewer.
ashby-api.get_upcoming_interviews medium conf mediumaudit
Lists scheduled interviews with candidate and job details, surfacing identifying applicant information and schedules.
ashby-api.search_product_docs low conf mediumallow
Queries Ashby's product documentation; a read of public help content with no customer data exposure.
ashby-api.search_records_by_name medium conf mediumaudit
Locates candidates, jobs, applications, and email templates by name, surfacing identifying candidate details to the caller.
ashby-api.submit_mcp_feedback low conf mediumallow
Sends a suggestion to the Ashby team about the MCP server; a low-impact outbound feedback message.