MCP compliance catalog

Every MCP tool in the SCOPE compliance index, grouped by server — risk posture, regulatory exposure, and the tools that warrant tighter governance.
303MCP servers
4476tools
Reset 303 of 303 servers
n8n
25 tools · footprint 56
1 critical 7 high 13 med 4 low
PagerDuty
64 tools · footprint 55
5 high 16 med 43 low
Datadog
24 tools · footprint 52
1 critical 11 high 12 med
Attention
25 tools · footprint 51
1 critical 6 high 18 med
Box
37 tools · footprint 50
10 high 14 med 13 low COSOHIPAA+1 more
Gusto
36 tools · footprint 48
12 high 11 med 13 low COSOGLBA+1 more
ActiveCampaign
58 tools · footprint 47
4 high 15 med 39 low COSOSOX
GitHub
24 tools · footprint 47
5 high 12 med 7 low COSOSOX
Sanity
36 tools · footprint 47
1 critical 5 high 12 med 18 low
Amplitude
43 tools · footprint 44
6 high 16 med 21 low
Mem
23 tools · footprint 44
5 high 8 med 10 low
Microsoft SharePoint (Work IQ)
23 tools · footprint 44
1 critical 5 high 13 med 4 low
PagerDuty
25 tools · footprint 44
6 high 18 med 1 low
Coralogix
21 tools · footprint 43
5 high 13 med 3 low
Sentry
25 tools · footprint 43
3 high 14 med 8 low
Clarify
25 tools · footprint 42
3 high 15 med 7 low
‹ PrevPage 2 of 19Next ›
Malwarebytes
1 high 3 med 2 low · 6 tools · 0 SoD-flagged
regimes APPICCPAGDPRISO_27001LGPDPIPEDAPIPLPOPIASOC2UK_GDPR

Tools needing tighter control (1 of 6)

malwarebytes.reputation-scan_all high conf highOBO
Submits a batch of links, email addresses, and phone numbers to Malwarebytes in one call, sending personal identifiers for many individuals to an external threat service at once.
All other tools (5)
malwarebytes.reputation-check_email medium conf highaudit
Sends an email address to Malwarebytes for phishing and scam reputation lookup, disclosing a personal identifier to a third-party processor.
malwarebytes.reputation-check_link low conf highallow
Checks a URL against Malwarebytes reputation data; read-only, though the submitted link is shared with an external service.
malwarebytes.reputation-check_phone medium conf highaudit
Sends a phone number to Malwarebytes to test it against scam reputation data, disclosing a personal identifier to a third-party processor.
malwarebytes.reputation-report medium conf highaudit
Files a suspicious-content report with Malwarebytes, creating a durable third-party abuse record against the reported address, number, or domain that may affect its deliverability and reputation.
malwarebytes.reputation-whois low conf highallow
Retrieves public domain registration records to judge a site's legitimacy; results may include registrant contact details where the registry does not redact them.