MCP compliance catalog

Every MCP tool in the SCOPE compliance index, grouped by server — risk posture, regulatory exposure, and the tools that warrant tighter governance.
387MCP servers
5470tools
Reset 387 of 387 servers
Qlik Cloud
25 tools · footprint 66
1 critical 12 high 10 med 2 low COSOSOX
Adobe Workfront
25 tools · footprint 65
2 critical 7 high 13 med 3 low
MailerLite
25 tools · footprint 63
1 critical 11 high 12 med 1 low
MongoDB
25 tools · footprint 63
2 critical 7 high 12 med 4 low
MotherDuck
21 tools · footprint 62
4 critical 5 high 9 med 3 low
QuickNode
22 tools · footprint 61
5 critical 1 high 10 med 6 low COSOPCI+1 more
Salesforce
32 tools · footprint 60
4 critical 2 high 9 med 17 low COSOSOX
Close
64 tools · footprint 59
5 high 22 med 37 low COSOSOX
Cloudflare
26 tools · footprint 58
3 critical 4 high 6 med 13 low
Webflow
23 tools · footprint 57
2 critical 5 high 10 med 6 low
n8n
25 tools · footprint 56
1 critical 7 high 13 med 4 low
Pigment
25 tools · footprint 56
9 high 14 med 2 low COSOSOX
PagerDuty
64 tools · footprint 55
5 high 16 med 43 low
Datadog
24 tools · footprint 52
1 critical 11 high 12 med
Attention
25 tools · footprint 51
1 critical 6 high 18 med
Box
37 tools · footprint 50
10 high 14 med 13 low COSOHIPAA+1 more
‹ PrevPage 2 of 25Next ›
PigmentDocs ↗
9 high 14 med 2 low · 25 tools · 4 SoD-flagged
regimes APPICCPACOSOGDPRISO_27001LGPDPIPEDAPIPLPOPIASOC2SOXUK_GDPR

Tools needing tighter control (9 of 25)

pigment.update_metric high conf mediumhuman approval
Rewrites the formula or structure of a live planning metric, changing every downstream figure that depends on it without any review step.
pigment.set_metric_input high conf mediumOBO
Writes a value straight into a plan input cell, altering the budget and forecast figures leadership reports against.
pigment.create_metric_copy_config high conf mediumOBO
Saves a standing copy rule that overwrites one metric's values with another's, for example pushing actuals over a forecast baseline.
pigment.calendar_remove_time_dimension high conf mediumhuman approval
Removes a calendar-derived time dimension, discarding the granularity every metric and View built on it depends on.
pigment.batch_share_blocks high conf mediumOBO
Shares many metrics and blocks with a Library or another Application in a single call, widening who can read the underlying planning data.
pigment.update_view high conf mediumOBO
Flips a View's sharing status alongside its name and template, which can expose a private analysis to everyone with Application access.
pigment.create_frame high conf mediumOBO
Deploys custom JavaScript as a full-page Frame in the workspace, running unreviewed code against the planning data bound to it.
pigment.update_frame high conf mediumhuman approval
Replaces a live Frame's code, bindings, and data sources in one push, shipping a production change with no review gate.
pigment.delete_views high conf mediumhuman approval
Deletes one or more Views outright, destroying saved reporting configurations that boards and their consumers depend on.
All other tools (16)
pigment.add_list_items medium conf mediumaudit
Adds items to a dimension list, which for employee or customer dimensions means writing personal identifiers into the model.
pigment.calendar_add_time_dimension medium conf mediumaudit
Adds a calendar-derived time dimension, expanding the granularity at which metrics can be modeled and reported.
pigment.calendar_create medium conf mediumaudit
Creates the calendar an Application's periods derive from, fixing fiscal boundaries for every time-based metric built on it.
pigment.calendar_expand medium conf mediumaudit
Extends calendar coverage so metrics hold periods beyond the current range, growing model size and computation cost.
pigment.create_cycle medium conf mediumaudit
Establishes a planning cycle across a set of metrics, defining how forecast iterations get captured and compared.
pigment.create_list low conf mediumallow
Creates a new dimension list, adding a structural axis that metrics and Views can then be built on.
pigment.create_metric medium conf highaudit
Adds a new calculated metric to the planning model, introducing figures that feed boards and reported totals.
pigment.enable_application_library medium conf mediumaudit
Activates a Library inside a consuming Application, making that Library's shared blocks and their data usable there.
pigment.fetch_metric_data medium conf mediumaudit
Reads the stored values of a named metric, exposing the figures behind a budget, forecast, or actuals series.
pigment.get_list_items medium conf mediumaudit
Returns every item of a dimension list, which in workforce models is a full roster of named employees and their identifiers.
pigment.query_data medium conf highaudit
Pulls metric values across arbitrary breakdowns and filters from a plain-language prompt, which can surface compensation, headcount, and customer figures in volume.
pigment.search low conf highallow
Scans an entire Application's block metadata — names, data types, dimensions — returning model structure without the underlying values.
pigment.update_cycle medium conf mediumaudit
Adds or drops metrics from an active planning cycle, changing which figures are captured for each forecast iteration.
pigment.update_list_property medium conf mediumaudit
Changes a dimension list property such as the unique-key Employee ID, which can break identity matching everywhere the list is used.
pigment.update_view_aggregations medium conf mediumaudit
Changes what a View's totals compute, so the same underlying metric can present materially different reported numbers.
pigment.write_file medium conf mediumaudit
Authors the JavaScript a Frame will execute, staging arbitrary code for deployment into the workspace.