MCP compliance catalog

Every MCP tool in the SCOPE compliance index, grouped by server — risk posture, regulatory exposure, and the tools that warrant tighter governance.
80MCP servers
1695tools
Reset 80 of 80 servers
Vercel
20 tools · footprint 41
2 critical 3 high 2 med 13 low COSOSOX
Zapier
14 tools · footprint 39
1 critical 3 high 3 med 7 low COSOPCI+1 more
GitHub
83 tools · footprint 38
1 high 20 med 62 low COSOSOX
Snowflake
6 tools · footprint 37
2 critical 3 high 1 med COSOSOX
Calendly
35 tools · footprint 34
2 high 13 med 20 low
Smartsheet
42 tools · footprint 34
2 high 9 med 31 low COSOSOX
Ramp
17 tools · footprint 33
5 high 5 med 7 low COSOGLBA+2 more
Attio
37 tools · footprint 32
4 high 14 med 19 low
Egnyte
21 tools · footprint 31
3 high 9 med 9 low
Stytch
7 tools · footprint 31
1 critical 2 high 2 med 2 low
Wix
16 tools · footprint 29
1 critical 1 high 1 med 13 low COSOPCI+1 more
WordPress.com
19 tools · footprint 28
3 high 6 med 10 low COSOSOX
Oracle NetSuite
11 tools · footprint 27
3 high 3 med 5 low COSOSOX
Atlassian Rovo
54 tools · footprint 24
13 med 41 low
ZoomInfo
15 tools · footprint 24
5 high 4 med 6 low
Braze
40 tools · footprint 23
1 high 5 med 34 low COSOSOX
‹ PrevPage 2 of 5Next ›
Atlassian RovoDocs ↗
13 med 41 low · 54 tools · 0 SoD-flagged
regimes APPICCPAGDPRISO_27001LGPDNIST_CSFPIPEDAPIPLPOPIASOC2UK_GDPR

Tools needing tighter control (0 of 54)

None — every tool is low-risk, high-confidence, and outside PCI/HIPAA payload scope.
All other tools (54)
atlassian.addCommentToJiraIssue low conf highallow
Posts a comment on a Jira issue under the authenticated user's identity.
atlassian.addWorklogToJiraIssue low conf highallow
Logs time against a Jira issue; affects time-tracking reports.
atlassian.atlassianUserInfo low conf highallow
Reads the authenticated Atlassian user's profile.
atlassian.bitbucketDeployment low conf mediumallow
Reads deployment information from Bitbucket Pipelines.
atlassian.bitbucketEnvironment low conf mediumallow
Reads deployment environment configuration.
atlassian.bitbucketPipeline low conf mediumallow
Reads pipeline run metadata and status.
atlassian.bitbucketPullRequest low conf mediumallow
Reads pull request metadata, comments, and review state.
atlassian.bitbucketRepoContent medium conf mediumaudit
Reads repository file content; source code may contain secrets or proprietary IP.
atlassian.bitbucketRepository low conf mediumallow
Reads Bitbucket repository metadata.
atlassian.bitbucketUser low conf mediumallow
Reads a Bitbucket user record.
atlassian.bitbucketWorkspace low conf mediumallow
Reads Bitbucket workspace metadata.
atlassian.createCompassComponent low conf mediumallow
Registers a new component in the Compass catalog.
atlassian.createCompassComponentRelationship low conf mediumallow
Creates a dependency or other relationship between Compass components.
atlassian.createCompassCustomFieldDefinition medium conf mediumaudit
Defines a new custom field in Compass; schema change applied workspace-wide.
atlassian.createConfluenceFooterComment low conf highallow
Posts a footer comment on a Confluence page.
atlassian.createConfluenceInlineComment low conf highallow
Posts an inline comment anchored to page content.
atlassian.createConfluencePage low conf highallow
Creates a new Confluence page in a space.
atlassian.createJiraIssue low conf highallow
Creates a new Jira issue.
atlassian.editJiraIssue medium conf highaudit
Modifies fields on a Jira issue including assignee, priority, or custom fields.
atlassian.fetchAtlassian medium conf highaudit
Generic fetch of an Atlassian resource by URL or id; PII exposure depends on target.
atlassian.getAccessibleAtlassianResources low conf highallow
Lists Atlassian sites/resources the authenticated user can access.
atlassian.getCompassComponent low conf mediumallow
Reads a Compass software component record.
atlassian.getCompassComponentActivityEvents low conf mediumallow
Reads activity event stream for a Compass component.
atlassian.getCompassComponentLabels low conf mediumallow
Reads labels attached to a Compass component.
atlassian.getCompassComponents low conf mediumallow
Lists Compass components.
atlassian.getCompassComponentsOwnedByMyTeams low conf mediumallow
Lists Compass components owned by the user's teams.
atlassian.getCompassComponentTypes low conf mediumallow
Reads available Compass component types.
atlassian.getCompassCustomFieldDefinitions low conf mediumallow
Reads Compass custom field schema.
atlassian.getConfluenceCommentChildren low conf highallow
Reads replies to a Confluence comment.
atlassian.getConfluencePage low conf highallow
Reads a single Confluence page's content.
atlassian.getConfluencePageDescendants medium conf highaudit
Reads all descendant pages under a parent; can pull a whole subtree of documentation.
atlassian.getConfluencePageFooterComments low conf highallow
Reads footer comments on a Confluence page.
atlassian.getConfluencePageInlineComments low conf highallow
Reads inline comments on a Confluence page.
atlassian.getConfluenceSpaces low conf highallow
Lists Confluence spaces accessible to the user.
atlassian.getIssueLinkTypes low conf highallow
Reads configured issue-link types in the instance.
atlassian.getJiraIssue low conf highallow
Reads a single Jira issue's fields, comments, and attachments.
atlassian.getJiraIssueRemoteIssueLinks low conf highallow
Reads remote links attached to a Jira issue.
atlassian.getJiraIssueTypeMetaWithFields low conf highallow
Reads issue-type schema metadata; configuration introspection.
atlassian.getJiraProjectIssueTypesMetadata low conf highallow
Reads available issue types for a Jira project.
atlassian.getJsmOpsAlerts low conf highallow
Reads JSM Ops on-call alerts.
atlassian.getJsmOpsScheduleInfo low conf highallow
Reads on-call schedule configuration.
atlassian.getJsmOpsTeamInfo low conf highallow
Reads JSM Ops team metadata.
atlassian.getPagesInConfluenceSpace medium conf highaudit
Lists all pages in a space; enables bulk traversal of internal docs.
atlassian.getTeamworkGraphContext medium conf mediumaudit
Reads contextual graph relationships across Atlassian work objects.
atlassian.getTeamworkGraphObject low conf mediumallow
Reads a single object from the Atlassian Teamwork Graph.
atlassian.getTransitionsForJiraIssue low conf highallow
Reads workflow transitions available for a specific issue.
atlassian.getVisibleJiraProjects low conf highallow
Lists Jira projects visible to the authenticated user.
atlassian.lookupJiraAccountId low conf highallow
Resolves a username or email to a Jira accountId.
atlassian.searchAtlassian medium conf highaudit
Cross-product search across Jira, Confluence, and Bitbucket; can surface confidential content.
atlassian.searchConfluenceUsingCql medium conf highaudit
Runs arbitrary CQL searches; can return large volumes of internal documentation.
atlassian.searchJiraIssuesUsingJql medium conf highaudit
Runs arbitrary JQL queries; can return large volumes of issue data.
atlassian.transitionJiraIssue medium conf highaudit
Moves an issue through workflow states; can close tickets or bypass review gates.
atlassian.updateConfluencePage medium conf highaudit
Edits an existing Confluence page; can overwrite knowledge-base content.
atlassian.updateJsmOpsAlert medium conf highaudit
Acknowledges, closes, or modifies an on-call alert; affects incident response state.