MCP compliance catalog

Every MCP tool in the SCOPE compliance index, grouped by server — risk posture, regulatory exposure, and the tools that warrant tighter governance.
303MCP servers
4476tools
Reset 303 of 303 servers
n8n
25 tools · footprint 56
1 critical 7 high 13 med 4 low
PagerDuty
64 tools · footprint 55
5 high 16 med 43 low
Datadog
24 tools · footprint 52
1 critical 11 high 12 med
Attention
25 tools · footprint 51
1 critical 6 high 18 med
Box
37 tools · footprint 50
10 high 14 med 13 low COSOHIPAA+1 more
Gusto
36 tools · footprint 48
12 high 11 med 13 low COSOGLBA+1 more
ActiveCampaign
58 tools · footprint 47
4 high 15 med 39 low COSOSOX
GitHub
24 tools · footprint 47
5 high 12 med 7 low COSOSOX
Sanity
36 tools · footprint 47
1 critical 5 high 12 med 18 low
Amplitude
43 tools · footprint 44
6 high 16 med 21 low
Mem
23 tools · footprint 44
5 high 8 med 10 low
Microsoft SharePoint (Work IQ)
23 tools · footprint 44
1 critical 5 high 13 med 4 low
PagerDuty
25 tools · footprint 44
6 high 18 med 1 low
Coralogix
21 tools · footprint 43
5 high 13 med 3 low
Sentry
25 tools · footprint 43
3 high 14 med 8 low
Clarify
25 tools · footprint 42
3 high 15 med 7 low
‹ PrevPage 2 of 19Next ›
MailerLiteDocs ↗
1 critical 11 high 12 med 1 low · 25 tools · 5 SoD-flagged
regimes APPICCPAGDPRISO_27001LGPDPIPEDAPIPLPOPIASOC2UK_GDPR

Tools needing tighter control (12 of 25)

mailerlite.delete_field critical conf highhuman approval
Destroys a custom field and the values stored under it for every subscriber in the account, with no recovery path and no second approver.
mailerlite.list_subscribers high conf highhuman approval
Enumerates the account's subscriber base with email addresses, names, and status, giving an agent a direct path to pull the whole marketing list.
mailerlite.import_subscribers_to_group high conf highOBO
Loads a batch of personal records into the audience in one call, making an unvetted or purchased list immediately mailable.
mailerlite.get_segment_subscribers high conf highhuman approval
Returns every contact matching a segment's criteria, exposing a targeted slice of the audience along with its inferred attributes.
mailerlite.create_webhook high conf highOBO
Opens a standing egress channel that streams subscriber and campaign events to any external URL the caller names.
mailerlite.update_webhook high conf highOBO
Repoints or re-enables an existing webhook, which can silently redirect subscriber event data to a different destination.
mailerlite.batch_requests high conf mediumOBO
Executes an arbitrary set of API operations in one call, amplifying any write or delete and collapsing per-operation review into a single approval.
mailerlite.schedule_campaign high conf highOBO
Commits an email blast to the selected audience; once delivery starts the message cannot be recalled from recipients' inboxes, and any consent defect is already realised.
mailerlite.get_campaign_subscribers high conf highhuman approval
Returns the full recipient list for a send, exposing who was contacted along with their delivery status.
mailerlite.get_campaign_link_recipients high conf highhuman approval
Links click-tracking data back to named individuals, revealing interest signals that count as behavioural profiling under privacy law.
mailerlite.manage_ecommerce_customers high conf mediumOBO
Covers read, write, and delete on synced shop customer records, so one call can dump or destroy purchaser identity data.
mailerlite.manage_ecommerce_orders high conf mediumOBO
Reads and rewrites purchase records tied to named customers, including bulk import and deletion of order history used for revenue segmentation.
All other tools (13)
mailerlite.add_subscriber medium conf highaudit
Upserts a subscriber record, which can add contacts who never gave marketing consent and put them in scope for future sends.
mailerlite.create_automation low conf highallow
Adds a draft workflow that sends nothing until it is enabled, so the immediate effect is limited to account clutter.
mailerlite.create_campaign medium conf highaudit
Drafts a campaign with its audience, sender identity, and content, staging outbound messaging that carries the company's brand.
mailerlite.delete_automation medium conf highaudit
Tears down a live workflow, halting onboarding or nurture sequences for subscribers currently mid-journey.
mailerlite.delete_campaign medium conf highaudit
Removes a campaign along with the performance history marketers rely on for reporting and consent evidence.
mailerlite.delete_subscriber medium conf highaudit
Removes a person from the audience so they stop receiving mail; the vendor retains their record for re-subscription, so it is not a full erasure.
mailerlite.delete_webhook medium conf highaudit
Removes an event subscription, breaking downstream CRM or analytics sync without any visible failure in MailerLite itself.
mailerlite.get_subscriber medium conf highaudit
Reads one subscriber's contact details, custom fields, and subscription status.
mailerlite.get_subscriber_activity medium conf highaudit
Exposes one person's open, click, and send history — behavioural profiling data tied to an identifiable individual.
mailerlite.search medium conf mediumaudit
Queries across account resources and can surface subscriber records the caller did not know to ask for by ID.
mailerlite.update_automation_email medium conf highaudit
Changes the body of an email that fires automatically to every subscriber entering the workflow, with no per-send review.
mailerlite.update_campaign medium conf highaudit
Rewrites subject line, sender address, or body of a campaign, altering what recipients see and who it appears to come from.
mailerlite.update_subscriber medium conf highaudit
Modifies stored personal data on a subscriber record, including email, name, and custom field values used for targeting.