MCP compliance catalog

Every MCP tool in the SCOPE compliance index, grouped by server — risk posture, regulatory exposure, and the tools that warrant tighter governance.
303MCP servers
4476tools
Reset 303 of 303 servers
n8n
25 tools · footprint 56
1 critical 7 high 13 med 4 low
PagerDuty
64 tools · footprint 55
5 high 16 med 43 low
Datadog
24 tools · footprint 52
1 critical 11 high 12 med
Attention
25 tools · footprint 51
1 critical 6 high 18 med
Box
37 tools · footprint 50
10 high 14 med 13 low COSOHIPAA+1 more
Gusto
36 tools · footprint 48
12 high 11 med 13 low COSOGLBA+1 more
ActiveCampaign
58 tools · footprint 47
4 high 15 med 39 low COSOSOX
GitHub
24 tools · footprint 47
5 high 12 med 7 low COSOSOX
Sanity
36 tools · footprint 47
1 critical 5 high 12 med 18 low
Amplitude
43 tools · footprint 44
6 high 16 med 21 low
Mem
23 tools · footprint 44
5 high 8 med 10 low
Microsoft SharePoint (Work IQ)
23 tools · footprint 44
1 critical 5 high 13 med 4 low
PagerDuty
25 tools · footprint 44
6 high 18 med 1 low
Coralogix
21 tools · footprint 43
5 high 13 med 3 low
Sentry
25 tools · footprint 43
3 high 14 med 8 low
Clarify
25 tools · footprint 42
3 high 15 med 7 low
‹ PrevPage 2 of 19Next ›
MongoDBDocs ↗
2 critical 7 high 12 med 4 low · 25 tools · 6 SoD-flagged
regimes APPICCPAGDPRISO_27001LGPDNIST_CSFPIPEDAPIPLPOPIASOC2UK_GDPR

Tools needing tighter control (9 of 25)

mongodb.drop-database critical conf mediumhuman approval
Permanently deletes an entire database and every collection it holds, an irreversible loss of all stored records.
mongodb.drop-collection critical conf mediumhuman approval
Permanently deletes a collection and all of its documents, destroying customer data with no undo.
mongodb.atlas-create-db-user high conf mediumhuman approval
Creates an Atlas database user, provisioning new credentials and access to cluster data without a second approver.
mongodb.atlas-create-access-list high conf mediumhuman approval
Opens an Atlas cluster to additional IP or CIDR ranges, widening the network attack surface that can reach the database.
mongodb.atlas-connect-cluster high conf mediumhuman approval
Connects to an Atlas cluster and, when no connection string is set, mints a temporary database user with a random password.
mongodb.delete-many high conf mediumhuman approval
Removes every document matching a filter in one call, capable of wiping large swaths of a collection at once.
mongodb.update-many high conf mediumOBO
Modifies every document matching a filter in a single call, rewriting business data across a collection at scale.
mongodb.export high conf mediumOBO
Saves query or aggregation results as a JSON file on the MCP host, a channel for exfiltrating collection data.
mongodb.atlas-streams-teardown high conf mediumOBO
Deletes an Atlas Stream Processing workspace, processor, or connection, tearing down live data pipelines.
All other tools (16)
mongodb.aggregate medium conf mediumaudit
Runs an arbitrary aggregation pipeline over a collection, capable of reading and transforming sensitive data at scale.
mongodb.atlas-create-cluster medium conf mediumaudit
Provisions a dedicated M10-M80 Atlas cluster with autoscaling enabled, incurring ongoing compute and storage costs.
mongodb.atlas-create-free-cluster low conf mediumallow
Creates a free-tier Atlas cluster for development, adding a new deployment to the project.
mongodb.atlas-create-project low conf mediumallow
Creates a new Atlas project, a container that scopes clusters, users, and access rules.
mongodb.atlas-list-db-users low conf mediumallow
Enumerates all Atlas database users, exposing the roster of principals with credentialed access to the cluster.
mongodb.atlas-local-delete-deployment medium conf mediumaudit
Deletes a local Atlas deployment, discarding its data and configuration.
mongodb.atlas-pause-resume-cluster medium conf mediumaudit
Pauses or resumes a dedicated Atlas cluster, making it unavailable for connections or restoring service.
mongodb.atlas-upgrade-cluster medium conf mediumaudit
Upgrades an Atlas cluster tier (Free to Flex, Flex to M10, and similar), changing capacity and billing.
mongodb.create-collection low conf mediumallow
Creates a new empty collection in a database, establishing a new store for documents.
mongodb.create-index medium conf mediumaudit
Builds an index on a collection, altering query performance and supporting vector-search workloads.
mongodb.drop-index medium conf mediumaudit
Drops an index from a collection, degrading query performance until the index is rebuilt.
mongodb.find medium conf mediumaudit
Runs an arbitrary query against a collection, returning matching documents that may include personal or sensitive data.
mongodb.insert-many medium conf mediumaudit
Adds documents to a collection in bulk, optionally generating vector embeddings from the supplied text.
mongodb.mongodb-logs medium conf mediumaudit
Returns recent mongod server log events, which can surface query contents, connection details, and operational internals.
mongodb.rename-collection medium conf mediumaudit
Renames a collection, which can silently break application code and queries that reference the old name.
mongodb.update-one medium conf mediumaudit
Modifies a single document in a collection, changing stored business or customer data.