MCP compliance catalog
Every MCP tool in the SCOPE compliance index, grouped by server — risk posture, regulatory exposure, and the tools that warrant tighter governance.
80
MCP servers
1695
tools
All risk
Has critical
High & up
Medium & up
All regimes
APPI
CCPA
COSO
FDA_PART_11
GDPR
GLBA
HIPAA
ISO_27001
LGPD
NIST_CSF
NY_DFS_500
PCI
PIPEDA
PIPL
POPIA
PSD2
SOC2
SOX
UK_GDPR
Sort: footprint
Sort: tools
Sort: regimes
Sort: name
SoD only
Filter
Reset
80 of 80 servers
Vercel
20 tools · footprint 41
2 critical
3 high
2 med
13 low
COSO
SOX
Zapier
14 tools · footprint 39
1 critical
3 high
3 med
7 low
COSO
PCI
+1 more
GitHub
83 tools · footprint 38
1 high
20 med
62 low
COSO
SOX
Snowflake
6 tools · footprint 37
2 critical
3 high
1 med
COSO
SOX
Calendly
35 tools · footprint 34
2 high
13 med
20 low
Smartsheet
42 tools · footprint 34
2 high
9 med
31 low
COSO
SOX
Ramp
17 tools · footprint 33
5 high
5 med
7 low
COSO
GLBA
+2 more
Attio
37 tools · footprint 32
4 high
14 med
19 low
Egnyte
21 tools · footprint 31
3 high
9 med
9 low
Stytch
7 tools · footprint 31
1 critical
2 high
2 med
2 low
Wix
16 tools · footprint 29
1 critical
1 high
1 med
13 low
COSO
PCI
+1 more
WordPress.com
19 tools · footprint 28
3 high
6 med
10 low
COSO
SOX
Oracle NetSuite
11 tools · footprint 27
3 high
3 med
5 low
COSO
SOX
Atlassian Rovo
54 tools · footprint 24
13 med
41 low
ZoomInfo
15 tools · footprint 24
5 high
4 med
6 low
Braze
40 tools · footprint 23
1 high
5 med
34 low
COSO
SOX
‹ Prev
Page 2 of 5
Next ›
Gamma
1 med
3 low
· 4 tools · 0 SoD-flagged
regimes
SOC2
Tools needing tighter control
(0 of 4)
None — every tool is low-risk, high-confidence, and outside PCI/HIPAA payload scope.
All other tools (4)
gamma.generate
medium
conf high
audit
Generates a presentation, document, or webpage; output may be auto-published with sharing settings the agent controls.
gamma.get_folders
low
conf high
allow
Lists workspace folders for organizing gammas.
gamma.get_themes
low
conf high
allow
Browses Gamma's theme library.
gamma.read_gamma
low
conf high
allow
Retrieves the contents of an existing gamma by ID or URL.