MCP compliance catalog

Every MCP tool in the SCOPE compliance index, grouped by server — risk posture, regulatory exposure, and the tools that warrant tighter governance.
387MCP servers
5470tools
Reset 387 of 387 servers
Qlik Cloud
25 tools · footprint 66
1 critical 12 high 10 med 2 low COSOSOX
Adobe Workfront
25 tools · footprint 65
2 critical 7 high 13 med 3 low
MailerLite
25 tools · footprint 63
1 critical 11 high 12 med 1 low
MongoDB
25 tools · footprint 63
2 critical 7 high 12 med 4 low
MotherDuck
21 tools · footprint 62
4 critical 5 high 9 med 3 low
QuickNode
22 tools · footprint 61
5 critical 1 high 10 med 6 low COSOPCI+1 more
Salesforce
32 tools · footprint 60
4 critical 2 high 9 med 17 low COSOSOX
Close
64 tools · footprint 59
5 high 22 med 37 low COSOSOX
Cloudflare
26 tools · footprint 58
3 critical 4 high 6 med 13 low
Webflow
23 tools · footprint 57
2 critical 5 high 10 med 6 low
n8n
25 tools · footprint 56
1 critical 7 high 13 med 4 low
Pigment
25 tools · footprint 56
9 high 14 med 2 low COSOSOX
PagerDuty
64 tools · footprint 55
5 high 16 med 43 low
Datadog
24 tools · footprint 52
1 critical 11 high 12 med
Attention
25 tools · footprint 51
1 critical 6 high 18 med
Box
37 tools · footprint 50
10 high 14 med 13 low COSOHIPAA+1 more
‹ PrevPage 2 of 25Next ›
QuickNodeDocs ↗
5 critical 1 high 10 med 6 low · 22 tools · 5 SoD-flagged
regimes APPICCPACOSOGDPRISO_27001LGPDNIST_CSFPCIPIPEDAPIPLPOPIASOC2SOXUK_GDPR

Tools needing tighter control (7 of 22)

quicknode.enable-tooling-access critical conf mediumhuman approval
Turns on RPC access for developer tooling across the entire account, widening who and what can reach every blockchain endpoint without a per-endpoint review.
quicknode.update-endpoint-security-options critical conf highhuman approval
Toggles endpoint security features such as authentication and validation, so a single call can leave a production RPC endpoint unprotected.
quicknode.create-security-rule critical conf highhuman approval
Writes endpoint access controls including auth tokens and IP allowlists, which decides who can call the endpoint and mints a credential in the process.
quicknode.delete-security-rule critical conf highhuman approval
Removes an access-control rule from an endpoint; dropping the last allowlist or JWT rule exposes the RPC endpoint to any caller.
quicknode.delete-endpoint critical conf highhuman approval
Destroys a production RPC endpoint; every application pointed at that URL loses chain access immediately and the endpoint cannot be restored at the same address.
quicknode.disable-tooling-access high conf mediumOBO
Switches off Tooling Access for the whole account, cutting every dependent developer tool off from RPC until someone re-enables it.
quicknode.get-billing medium conf mediumaudit redact
Exposes the account's invoices and payment history, including transaction records and payment-instrument metadata that sit inside the financial audit trail.
All other tools (15)
quicknode.call-rpc low conf mediumallow
Executes an arbitrary read-only JSON-RPC call against any supported chain, returning public on-chain state such as balances, blocks, and transactions.
quicknode.create-endpoint medium conf highaudit
Provisions new billable RPC infrastructure on a chosen chain and network, adding a reachable production surface that inherits account-level defaults.
quicknode.create-endpoint-method-rate-limit low conf highallow
Adds a throttle for one RPC method on an endpoint, capping how often callers can invoke that method.
quicknode.delete-endpoint-method-rate-limit medium conf highaudit
Removes a per-method throttle, letting an expensive RPC method run unbounded against the endpoint and the usage bill.
quicknode.get-endpoint medium conf mediumaudit
Returns one endpoint's configuration and connection details, which are enough for a caller to reach the chain through it.
quicknode.get-endpoint-log-details medium conf mediumaudit
Opens one log entry in full, including the originating IP and request body of a single RPC call — traceable back to an individual user of the application.
quicknode.get-endpoint-metrics low conf highallow
Reports latency and throughput metrics for an endpoint, an aggregate operational read with no customer data attached.
quicknode.get-rpc-usage low conf highallow
Returns metered RPC consumption broken down by endpoint, method, or chain — the same counters that drive the invoice.
quicknode.list-chains low conf highallow
Lists the chains and networks QuickNode supports, a static catalog lookup with no account or customer data.
quicknode.list-endpoint-logs medium conf mediumaudit
Pulls recent request logs for an endpoint, which carry caller IP addresses, wallet addresses, and request payloads that identify who queried what on-chain.
quicknode.list-endpoint-method-rate-limits low conf highallow
Lists the per-method throttles configured on an endpoint, a read-only view of its traffic policy.
quicknode.list-endpoint-security medium conf highaudit
Reveals an endpoint's live security posture — allowlists, token rules, referrer restrictions — which is exactly the reconnaissance an attacker wants before probing it.
quicknode.list-endpoints medium conf highaudit
Enumerates every endpoint on the account, mapping the organization's full blockchain infrastructure footprint and connection details in one call.
quicknode.update-endpoint-method-rate-limit medium conf highaudit
Changes an existing per-method throttle on a live endpoint, shifting either the cost ceiling or the failure threshold for callers of that method.
quicknode.update-endpoint-rate-limits medium conf highaudit
Rewrites an endpoint's overall throughput ceilings, so a bad value either throttles live traffic into failure or removes the guard against runaway usage cost.