MCP compliance catalog

Every MCP tool in the SCOPE compliance index, grouped by server — risk posture, regulatory exposure, and the tools that warrant tighter governance.
387MCP servers
5470tools
Reset 387 of 387 servers
HubSpot Developer MCP Server (App & CMS Development)
21 tools · footprint 9
4 med 17 low
Indeed
4 tools · footprint 9
1 med 3 low
Canary Data
14 tools · footprint 8
14 low
Google Contacts (People API MCP Server)
3 tools · footprint 8
3 low
Legal Data Hunter
7 tools · footprint 8
7 low
Melon
18 tools · footprint 8
6 med 12 low
Jentic
3 tools · footprint 7
1 critical 2 low
Polar Analytics
11 tools · footprint 7
1 high 3 med 7 low
Profound
25 tools · footprint 7
2 med 23 low
TickTick
23 tools · footprint 7
7 med 16 low
Uber Eats
2 tools · footprint 7
2 low
AirOps
40 tools · footprint 6
5 med 35 low
Blackbaud
6 tools · footprint 6
2 med 4 low
Eraser
20 tools · footprint 6
1 high 1 med 18 low
LegalZoom
24 tools · footprint 6
5 med 19 low
Wolfram
3 tools · footprint 6
1 critical 2 low
‹ PrevPage 17 of 25Next ›
UpworkDocs ↗
1 critical 5 high 9 med 4 low · 19 tools · 1 SoD-flagged
regimes APPICCPACOSOCO_AI_ACTEU_AI_ACTGDPRISO_27001LGPDNIST_AI_RMFPIPEDAPIPLPOPIASOC2SOXUK_GDPR

Tools needing tighter control (6 of 19)

upwork.milestones_and_payments critical conf mediumhuman approval
Approving or rejecting a contract milestone authorizes release of escrowed funds to a freelancer, moving money and changing recognized project cost in a single step.
upwork.financials_and_time_reports high conf mediumOBO
Pulls timesheets, work-diary activity records, and transaction history across every active contract, exposing worker-monitoring data and spend history in bulk.
upwork.offers_and_contracts high conf mediumOBO
Prepares a contract offer carrying scope and rate, committing the client to spend once confirmed on upwork.com, and reads terms of every active contract.
upwork.respond_to_invitations_and_offers high conf mediumOBO
Accepts or declines direct offers and invitations, which starts or forfeits a revenue-bearing contract at the stated rate once confirmed on upwork.com.
upwork.messaging high conf mediumOBO
Reads private message threads with freelancers and applicants and sends messages under the account holder's identity, exposing and impersonating confidential correspondence.
upwork.agency_dashboard high conf mediumOBO
Returns one aggregated view of every agency member's invitations, offers, messages, and contracts, concentrating the whole organization's client data into a single response.
All other tools (13)
upwork.account_and_access low conf mediumallow
Enumerates which Upwork accounts the connected credential can act as — freelancer, client, or agency — plus company details, revealing the agent's effective reach.
upwork.contracts_and_work_delivery medium conf mediumaudit
Submits milestone deliverables and reports logged time against active contracts, which is the billing input a client reviews before funds are released.
upwork.dashboard_overview low conf mediumallow
Summarizes new proposals, pending offers, messages, and contract updates in one read; a status roll-up that changes nothing but reveals current pipeline state.
upwork.draft_and_submit_proposals medium conf mediumaudit
Submits a proposal to a job posting, spending Connects credits and putting a binding rate and pitch in front of a prospective client.
upwork.earnings_and_profile medium conf mediumaudit
Reads earnings and available balance, and rewrites profile fields including employment history, education, and languages — personal data that drives marketplace matching.
upwork.file_attachments medium conf mediumaudit
Uploads and downloads attachments bound to proposals, offers, jobs, and messages — files that routinely carry resumes, identity documents, and client deliverables.
upwork.find_and_shortlist_talent medium conf mediumaudit
Searches freelancers by skill, rate, and location and returns ranked profiles with full work history, producing an automated shortlist that shapes who gets hired.
upwork.find_the_right_jobs low conf mediumallow
Searches and saves marketplace job listings by skill, budget, or type; read-only discovery over publicly posted jobs with no state change beyond favorites.
upwork.invitations_and_proposals medium conf mediumaudit
Invites specific freelancers to apply and declines received proposals off ranked summaries, an adverse hiring decision recorded against a named applicant.
upwork.post_and_manage_jobs medium conf mediumaudit
Publishes and edits live job postings on the public Upwork marketplace, so drafted scope, budget, and requirements become externally visible under the company's name.
upwork.profile_visibility medium conf mediumaudit
Toggles the availability badge and manages profile boost ads, which are paid placements — changes here incur marketplace ad spend and alter inbound lead volume.
upwork.talent_lists low conf mediumallow
Creates talent lists and saves freelancers into them for later consideration; a reversible bookmarking write over already-published marketplace profiles.
upwork.teams_and_members medium conf mediumaudit
Returns the agency's team structure and full member roster, exposing the identities and affiliations of everyone working under the organization.