MCP compliance catalog

Every MCP tool in the SCOPE compliance index, grouped by server — risk posture, regulatory exposure, and the tools that warrant tighter governance.

387MCP servers

5470tools

25 tools · footprint 66

1 critical 12 high 10 med 2 low COSOSOX

Adobe Workfront

25 tools · footprint 65

2 critical 7 high 13 med 3 low

25 tools · footprint 63

1 critical 11 high 12 med 1 low

25 tools · footprint 63

2 critical 7 high 12 med 4 low

21 tools · footprint 62

4 critical 5 high 9 med 3 low

22 tools · footprint 61

5 critical 1 high 10 med 6 low COSOPCI+1 more

32 tools · footprint 60

4 critical 2 high 9 med 17 low COSOSOX

64 tools · footprint 59

5 high 22 med 37 low COSOSOX

26 tools · footprint 58

3 critical 4 high 6 med 13 low

23 tools · footprint 57

2 critical 5 high 10 med 6 low

25 tools · footprint 56

1 critical 7 high 13 med 4 low

25 tools · footprint 56

9 high 14 med 2 low COSOSOX

64 tools · footprint 55

5 high 16 med 43 low

24 tools · footprint 52

1 critical 11 high 12 med

25 tools · footprint 51

1 critical 6 high 18 med

37 tools · footprint 50

10 high 14 med 13 low COSOHIPAA+1 more

PandaDocDocs ↗

1 critical 3 low · 4 tools · 1 SoD-flagged

regimes APPICCPACOSOGDPRISO_27001LGPDNIST_CSFPIPEDAPIPLPOPIASOC2SOXUK_GDPR

Tools needing tighter control (1 of 4)

pandadoc.execute-request critical conf highhuman approval

Issues any authenticated HTTP call to the PandaDoc API, so one invocation can delete documents and templates or pull signed contracts and signer PII in bulk with no per-endpoint boundary.

All other tools (3)

pandadoc.get-endpoint low conf highallow

Returns the full spec for one PandaDoc endpoint, including its security schemes and server hosts, which maps the auth surface an agent could later call.

pandadoc.list-endpoints low conf highallow

Enumerates every PandaDoc API path and method from the published spec; read-only reconnaissance that exposes no customer data.

pandadoc.search-endpoints low conf highallow

Searches PandaDoc's API reference for endpoints, operations, and parameters matching a keyword; read-only discovery over spec metadata.