MCP compliance catalog

Every MCP tool in the SCOPE compliance index, grouped by server — risk posture, regulatory exposure, and the tools that warrant tighter governance.

303MCP servers

4476tools

25 tools · footprint 56

1 critical 7 high 13 med 4 low

64 tools · footprint 55

5 high 16 med 43 low

24 tools · footprint 52

1 critical 11 high 12 med

25 tools · footprint 51

1 critical 6 high 18 med

37 tools · footprint 50

10 high 14 med 13 low COSOHIPAA+1 more

36 tools · footprint 48

12 high 11 med 13 low COSOGLBA+1 more

58 tools · footprint 47

4 high 15 med 39 low COSOSOX

24 tools · footprint 47

5 high 12 med 7 low COSOSOX

36 tools · footprint 47

1 critical 5 high 12 med 18 low

43 tools · footprint 44

6 high 16 med 21 low

23 tools · footprint 44

5 high 8 med 10 low

Microsoft SharePoint (Work IQ)

23 tools · footprint 44

1 critical 5 high 13 med 4 low

25 tools · footprint 44

6 high 18 med 1 low

21 tools · footprint 43

5 high 13 med 3 low

25 tools · footprint 43

3 high 14 med 8 low

25 tools · footprint 42

3 high 15 med 7 low

NPI RegistryDocs ↗

3 low · 3 tools · 0 SoD-flagged

regimes none

Tools needing tighter control (0 of 3)

None — every tool is low-risk, high-confidence, and outside PCI/HIPAA payload scope.

All other tools (3)

npi-registry.npi_lookup low conf highallow

Returns one provider's full NPPES record — legal name, practice address, taxonomy, and enumeration status — from CMS's publicly disclosable provider registry.

npi-registry.npi_search low conf highallow

Enumerates healthcare providers by name, location, specialty, or organization, returning batches of public NPPES directory records for provider-network research.

npi-registry.npi_validate low conf highallow

Checks an NPI's format and Luhn check digit locally, catching typos before a registry call; no data leaves the client and nothing is modified.