MCP compliance catalog

Every MCP tool in the SCOPE compliance index, grouped by server — risk posture, regulatory exposure, and the tools that warrant tighter governance.

303MCP servers

4476tools

25 tools · footprint 56

1 critical 7 high 13 med 4 low

64 tools · footprint 55

5 high 16 med 43 low

24 tools · footprint 52

1 critical 11 high 12 med

25 tools · footprint 51

1 critical 6 high 18 med

37 tools · footprint 50

10 high 14 med 13 low COSOHIPAA+1 more

36 tools · footprint 48

12 high 11 med 13 low COSOGLBA+1 more

58 tools · footprint 47

4 high 15 med 39 low COSOSOX

24 tools · footprint 47

5 high 12 med 7 low COSOSOX

36 tools · footprint 47

1 critical 5 high 12 med 18 low

43 tools · footprint 44

6 high 16 med 21 low

23 tools · footprint 44

5 high 8 med 10 low

Microsoft SharePoint (Work IQ)

23 tools · footprint 44

1 critical 5 high 13 med 4 low

25 tools · footprint 44

6 high 18 med 1 low

21 tools · footprint 43

5 high 13 med 3 low

25 tools · footprint 43

3 high 14 med 8 low

25 tools · footprint 42

3 high 15 med 7 low

Hex

3 med 1 low · 4 tools · 0 SoD-flagged

regimes APPICCPAGDPRISO_27001LGPDPIPEDAPIPLPOPIASOC2UK_GDPR

Tools needing tighter control (0 of 4)

None — every tool is low-risk, high-confidence, and outside PCI/HIPAA payload scope.

All other tools (4)

hex.continue_thread medium conf mediumaudit

Adds a follow-up question to a Hex thread, potentially executing additional warehouse queries.

hex.create_thread medium conf mediumaudit

Starts a Hex agent conversation that may execute SQL and analytic code over connected warehouses; results may include PII or financial data.

hex.get_thread medium conf mediumaudit

Reads thread messages and query results; exposes prior analytic outputs over warehouse data.

hex.search_projects low conf highallow

Finds Hex projects in the workspace by name or content.