MCP compliance catalog

Every MCP tool in the SCOPE compliance index, grouped by server — risk posture, regulatory exposure, and the tools that warrant tighter governance.
303MCP servers
4476tools
Reset 303 of 303 servers
Definely
7 tools · footprint 3
1 med 6 low
Excalidraw App Demo
5 tools · footprint 3
1 med 4 low
Hugging Face
4 tools · footprint 3
1 med 3 low
LSEG (London Stock Exchange Group)
22 tools · footprint 3
1 med 21 low COSOSOX
EDEN by Basecamp Research
2 tools · footprint 2
2 med
Figma
23 tools · footprint 2
1 med 22 low
Figma
16 tools · footprint 2
1 med 15 low
Gamma
4 tools · footprint 2
1 med 3 low
Google Shopping
13 tools · footprint 2
2 med 11 low
GraphOS Tools
13 tools · footprint 2
13 low
HyperFrames by HeyGen
6 tools · footprint 2
2 med 4 low
Synthesize Bio
4 tools · footprint 2
2 med 2 low
Tavily
5 tools · footprint 2
2 med 3 low
alphaXiv
11 tools · footprint 1
1 med 10 low
AWS Marketplace
11 tools · footprint 1
11 low
Blockscout
16 tools · footprint 1
1 med 15 low
‹ PrevPage 15 of 19Next ›
NetlifyDocs ↗
2 critical 4 high 4 med 13 low · 23 tools · 3 SoD-flagged
regimes APPICCPAGDPRISO_27001LGPDNIST_CSFPIPEDAPIPLPOPIASOC2UK_GDPR

Tools needing tighter control (6 of 23)

netlify.manage-env-vars critical conf mediumhuman approval
Reads out and rewrites a site's environment variables, which routinely hold API keys, database URLs and third-party credentials for the running production build.
netlify.manage-form-submissions critical conf mediumhuman approval
Reads every visitor-submitted form record for a site — names, emails, free-text messages — and can permanently delete those submissions with no undo path.
netlify.update-visitor-access-controls high conf mediumOBO
Changes who can view a deployed site; removing password protection or the SSO team-login requirement exposes a previously gated site to the open internet.
netlify.deploy-site high conf mediumhuman approval
Builds and publishes code to a live Netlify site in one call, putting unreviewed changes in front of real traffic without passing through any human release gate.
netlify.import-claude-design-from-url high conf mediumOBO
Publishes an externally fetched HTML bundle to a Netlify site; when an existing site is targeted the imported content replaces what visitors currently see.
netlify.change-extension-installation high conf mediumOBO
Installs or removes a third-party extension across a team or site, granting or revoking that vendor's access to build pipelines and project data.
All other tools (17)
netlify.create-new-project medium conf mediumaudit
Provisions a new publicly addressable site under a team, consuming plan entitlements and adding an internet-facing property to the org's footprint.
netlify.get-deploy low conf mediumallow
Returns metadata and status for one deploy, including its build state and commit reference.
netlify.get-deploy-for-site low conf mediumallow
Returns deploy details scoped to one site, used to inspect what is currently published.
netlify.get-design-import-job-status low conf mediumallow
Reports progress and outcome of an in-flight design import job.
netlify.get-extensions low conf mediumallow
Lists the extensions available to a team and which are installed.
netlify.get-forms-for-project low conf mediumallow
Lists the form definitions configured on a site along with their submission counts.
netlify.get-full-extension-details low conf mediumallow
Returns the full configuration of one installed extension, revealing how a third-party integration is wired into the team.
netlify.get-netlify-coding-context low conf mediumallow
Returns Netlify's own coding guidance for a creation type; no customer data is read or changed.
netlify.get-project low conf mediumallow
Returns configuration and status for one site, including its domains and build settings.
netlify.get-projects low conf mediumallow
Enumerates the sites visible to the authenticated account, exposing the org's full web-property inventory.
netlify.get-team low conf mediumallow
Returns one team's details, including its slug, plan and account identifiers.
netlify.get-teams low conf mediumallow
Enumerates the teams the caller belongs to, exposing the org's account structure.
netlify.get-user low conf mediumallow
Returns the calling user's own Netlify account profile, including name, email and account identifiers.
netlify.initialize-database medium conf mediumaudit
Sets up the Netlify database extension for a project, provisioning a new data store and its connection configuration.
netlify.netlify-coding-rules low conf mediumallow
Returns Netlify's documented coding rules over the local stdio transport; no customer data is read or changed.
netlify.update-forms medium conf mediumaudit
Turns form capture on or off for a site; disabling it silently drops incoming lead and contact submissions, enabling it starts collecting visitor-supplied personal data.
netlify.update-project-name medium conf mediumaudit
Renames a site, which also changes its default netlify.app subdomain and breaks any inbound links or integrations bound to the old name.