MCP compliance catalog

Every MCP tool in the SCOPE compliance index, grouped by server — risk posture, regulatory exposure, and the tools that warrant tighter governance.
387MCP servers
5470tools
Reset 387 of 387 servers
LSEG (London Stock Exchange Group)
22 tools · footprint 3
1 med 21 low COSOSOX
Maryland Community Compass
20 tools · footprint 3
2 med 18 low
Reddit (Devvit)
2 tools · footprint 3
1 med 1 low
EDEN by Basecamp Research
2 tools · footprint 2
2 med
Figma
23 tools · footprint 2
1 med 22 low
Figma
16 tools · footprint 2
1 med 15 low
Gamma
4 tools · footprint 2
1 med 3 low
Google Shopping
13 tools · footprint 2
2 med 11 low
GraphOS Tools
13 tools · footprint 2
13 low
HyperFrames by HeyGen
6 tools · footprint 2
2 med 4 low
Synthesize Bio
4 tools · footprint 2
2 med 2 low
Tavily
5 tools · footprint 2
2 med 3 low
Thumbtack
4 tools · footprint 2
1 med 3 low
Verisk Underwriting Intelligence
4 tools · footprint 2
4 low COSOSOX
alphaXiv
11 tools · footprint 1
1 med 10 low
AWS Marketplace
11 tools · footprint 1
11 low
‹ PrevPage 19 of 25Next ›
Tray.aiDocs ↗
1 critical 5 high 7 med 9 low · 22 tools · 5 SoD-flagged
regimes APPICCPAGDPRISO_27001LGPDNIST_CSFPIPEDAPIPLPOPIASOC2UK_GDPR

Tools needing tighter control (7 of 22)

tray-ai.trigger_workflow critical conf mediumhuman approval
Fires a production workflow that executes every connector step against live systems — Slack posts, CRM writes and third-party webhooks all land, with no dry-run and no undo.
tray-ai.create_workflow high conf mediumhuman approval
Creates a workflow and, for agent-tool triggers, auto-registers a callable API operation under API Management — new automation reaches production without a manual review step.
tray-ai.import_workflow high conf lowhuman approval
Loads a whole workflow definition into the workspace in one call, introducing integration logic and connector wiring that never passed through the normal build-and-review path.
tray-ai.update_workflow_steps high conf mediumOBO
Overwrites step properties wholesale and can swap the operation or the auth_id a step runs under, silently repointing production automation at a different system or credential.
tray-ai.create_auth_collection high conf mediumhuman approval
Starts a new credential grant for a third-party service, expanding which external systems workspace automation can reach once the user completes sign-in.
tray-ai.call_connector high conf mediumOBO
Executes an operation directly against a connected third-party system using stored workspace credentials, reaching real records outside Tray even though the default gate favours schema-discovery calls.
tray-ai.update_workflow_metadata medium conf mediumhuman approval
Flips a workflow's enabled state, name or tags without creating a new version, so an automation can be switched on or off with no version-history trace.
All other tools (15)
tray-ai.add_workflow_steps medium conf mediumaudit
Adds steps to an existing workflow in a batch, changing what the automation does on its next run; reversible but live once the workflow fires.
tray-ai.check_auth_completion low conf mediumallow
Polls whether a pending authentication has been completed; returns status only, with no credential material exposed.
tray-ai.create_project low conf mediumallow
Creates an empty project container for workflows; no data or automation runs until workflows are added to it.
tray-ai.get_workflow low conf mediumallow
Reads a workflow's structure and step configuration, exposing how an integration is wired but not the records flowing through it.
tray-ai.get_workflow_execution medium conf mediumaudit
Opens a specific execution run and its step-level results, giving visibility into what the automation processed and where it failed.
tray-ai.get_workflow_step_detail medium conf mediumaudit
Exposes the literal input and output payload of a workflow step, which routinely contains customer records pulled from the connected CRM, support or HR system.
tray-ai.list_authentications medium conf mediumaudit
Enumerates every stored authentication in the workspace, mapping which external systems are connected and which auth ids a workflow step can be pointed at.
tray-ai.list_connector_operations low conf mediumallow
Returns a connector's operations and their input/output schemas; catalogue metadata that carries no tenant data.
tray-ai.list_connectors low conf mediumallow
Searches the catalogue of available connectors; returns product metadata only, with no workspace or customer data involved.
tray-ai.list_projects low conf mediumallow
Enumerates projects in the workspace, revealing the names and scope of the automation estate to whoever holds the token.
tray-ai.list_service_environments low conf mediumallow
Lists the auth environments available for a service; configuration metadata used to set up a credential, not the credential itself.
tray-ai.list_workflow_executions low conf mediumallow
Lists recent execution summaries for a workflow — run status and timing only, without the payloads those runs carried.
tray-ai.remove_workflow_step medium conf mediumaudit
Deletes a step from a live workflow, which can quietly drop a validation, notification or logging stage from an integration that downstream teams depend on.
tray-ai.update_workflow_structure medium conf mediumaudit
Reorders steps or moves them between error and success branches, changing execution order and failure handling for an integration already running in production.
tray-ai.validate_workflow low conf mediumallow
Runs a read-only structural audit of a workflow and returns findings; no state changes and no data leaves the workspace.