MCP compliance catalog

Every MCP tool in the SCOPE compliance index, grouped by server — risk posture, regulatory exposure, and the tools that warrant tighter governance.
80MCP servers
1695tools
Reset 80 of 80 servers
Vercel
20 tools · footprint 41
2 critical 3 high 2 med 13 low COSOSOX
Zapier
14 tools · footprint 39
1 critical 3 high 3 med 7 low COSOPCI+1 more
GitHub
83 tools · footprint 38
1 high 20 med 62 low COSOSOX
Snowflake
6 tools · footprint 37
2 critical 3 high 1 med COSOSOX
Calendly
35 tools · footprint 34
2 high 13 med 20 low
Smartsheet
42 tools · footprint 34
2 high 9 med 31 low COSOSOX
Ramp
17 tools · footprint 33
5 high 5 med 7 low COSOGLBA+2 more
Attio
37 tools · footprint 32
4 high 14 med 19 low
Egnyte
21 tools · footprint 31
3 high 9 med 9 low
Stytch
7 tools · footprint 31
1 critical 2 high 2 med 2 low
Wix
16 tools · footprint 29
1 critical 1 high 1 med 13 low COSOPCI+1 more
WordPress.com
19 tools · footprint 28
3 high 6 med 10 low COSOSOX
Oracle NetSuite
11 tools · footprint 27
3 high 3 med 5 low COSOSOX
Atlassian Rovo
54 tools · footprint 24
13 med 41 low
ZoomInfo
15 tools · footprint 24
5 high 4 med 6 low
Braze
40 tools · footprint 23
1 high 5 med 34 low COSOSOX
‹ PrevPage 2 of 5Next ›
PostHogDocs ↗
6 high 22 med 8 low · 36 tools · 8 SoD-flagged
regimes APPICCPAGDPRISO_27001LGPDNIST_CSFPIPEDAPIPLPOPIASOC2UK_GDPR

Tools needing tighter control (10 of 36)

posthog.update-feature-flag high conf highhuman approval
Changes who sees a feature in production; can ship or break experiences without code review.
posthog.delete-feature-flag high conf highhuman approval
Removes a flag; dependent code may fail open or closed unexpectedly.
posthog.experiment-launch high conf highhuman approval
Activates an experiment in production; immediately affects user experience.
posthog.experiment-ship-variant high conf highhuman approval
Promotes a variant to all traffic without further review.
posthog.execute-sql high conf highOBO
Runs arbitrary HogQL/SQL across event and person data; can return PII at scale.
posthog.query-run high conf highOBO
Executes saved or ad-hoc queries that may return identified user data.
posthog.scheduled-changes-create medium conf highhuman approval
Schedules a future flag change without re-review at execution time.
posthog.experiment-delete medium conf highhuman approval
Removes experiment configuration and historical results from the UI.
posthog.alert-delete medium conf highhuman approval
Removes a monitoring alert; can blind operators to incidents.
posthog.survey-delete medium conf highhuman approval
Deletes a survey and its responses; may destroy collected feedback.
All other tools (26)
posthog.action-create low conf highallow
Defines a new tracked action for analytics; no production user impact.
posthog.action-delete medium conf highaudit
Removes a tracked action; downstream insights and dashboards may break silently.
posthog.action-update low conf highallow
Updates the definition of an existing tracked action.
posthog.alert-create low conf highallow
Adds a metric alert; no immediate user impact.
posthog.alert-update medium conf highaudit
Modifies thresholds or recipients on a monitoring alert.
posthog.annotation-create low conf highallow
Adds an annotation to time-series charts.
posthog.annotation-delete low conf highallow
Removes a chart annotation.
posthog.cohorts-add-persons-to-static-cohort-partial-update medium conf highaudit
Adds identified persons to a static cohort used for targeting and analysis.
posthog.cohorts-create medium conf highaudit
Defines a user cohort that may target campaigns or feature rollouts.
posthog.cohorts-rm-person-from-static-cohort-partial-update low conf highallow
Removes a person from a static cohort definition.
posthog.create-feature-flag medium conf highaudit
Creates a new feature flag that can gate production behavior on rollout.
posthog.dashboard-create low conf highallow
Creates a new analytics dashboard.
posthog.dashboard-delete medium conf highaudit
Removes a shared dashboard; may disrupt downstream reporting.
posthog.dashboard-update low conf highallow
Modifies dashboard layout or filters.
posthog.experiment-create medium conf highaudit
Starts a new A/B experiment that splits production traffic.
posthog.experiment-end medium conf highaudit
Concludes an experiment and locks the result of record.
posthog.experiment-pause medium conf highaudit
Halts an active experiment mid-run; can invalidate ongoing measurement.
posthog.experiment-resume medium conf highaudit
Restarts a paused experiment, reapplying traffic split.
posthog.experiment-update medium conf highaudit
Modifies an experiment's targeting or variants while running.
posthog.feature-flags-copy-flags-create medium conf highaudit
Copies flags between projects/environments; can replicate untested rollout state.
posthog.query-llm-trace medium conf mediumaudit
Returns LLM trace details including prompts that may contain customer or PII content.
posthog.query-llm-traces-list medium conf mediumaudit
Bulk-lists LLM traces; potential PII exposure depending on prompt content.
posthog.query-logs medium conf highaudit
Searches application logs that can include user identifiers and request payloads.
posthog.scheduled-changes-delete medium conf highaudit
Cancels a scheduled flag change; can leave intended rollout undone.
posthog.survey-create medium conf highaudit
Publishes a survey targeted to identified users; collects new PII responses.
posthog.survey-update medium conf highaudit
Edits a live survey; can change consent text or targeting after launch.