MCP compliance catalog

Every MCP tool in the SCOPE compliance index, grouped by server — risk posture, regulatory exposure, and the tools that warrant tighter governance.
387MCP servers
5470tools
Reset 387 of 387 servers
Qlik Cloud
25 tools · footprint 66
1 critical 12 high 10 med 2 low COSOSOX
Adobe Workfront
25 tools · footprint 65
2 critical 7 high 13 med 3 low
MailerLite
25 tools · footprint 63
1 critical 11 high 12 med 1 low
MongoDB
25 tools · footprint 63
2 critical 7 high 12 med 4 low
MotherDuck
21 tools · footprint 62
4 critical 5 high 9 med 3 low
QuickNode
22 tools · footprint 61
5 critical 1 high 10 med 6 low COSOPCI+1 more
Salesforce
32 tools · footprint 60
4 critical 2 high 9 med 17 low COSOSOX
Close
64 tools · footprint 59
5 high 22 med 37 low COSOSOX
Cloudflare
26 tools · footprint 58
3 critical 4 high 6 med 13 low
Webflow
23 tools · footprint 57
2 critical 5 high 10 med 6 low
n8n
25 tools · footprint 56
1 critical 7 high 13 med 4 low
Pigment
25 tools · footprint 56
9 high 14 med 2 low COSOSOX
PagerDuty
64 tools · footprint 55
5 high 16 med 43 low
Datadog
24 tools · footprint 52
1 critical 11 high 12 med
Attention
25 tools · footprint 51
1 critical 6 high 18 med
Box
37 tools · footprint 50
10 high 14 med 13 low COSOHIPAA+1 more
‹ PrevPage 2 of 25Next ›
RelativityDocs ↗
1 critical 6 high 8 med 5 low · 20 tools · 3 SoD-flagged
regimes APPICCPACOSOGDPRISO_27001LGPDNIST_CSFPIPEDAPIPLPOPIASOC2SOXUK_GDPR

Tools needing tighter control (8 of 20)

relativity.relone_add_user_to_group critical conf mediumhuman approval
Adds a user to a Relativity security group, inheriting every instance and workspace permission that group carries — including system-admin rights over case evidence.
relativity.relone_remove_user_from_group high conf mediumOBO
Strips a user's group membership, immediately cutting their access to every workspace the group governed and potentially stalling an active review team.
relativity.relone_add_workspace_group high conf mediumhuman approval
Opens an entire eDiscovery workspace to a group, exposing the case document set — often privileged or PII-laden custodian data — to everyone in it without a separate access review.
relativity.relone_remove_workspace_group high conf mediumOBO
Revokes a group's workspace access, locking out reviewers mid-matter and breaking litigation deadlines if applied to the wrong group.
relativity.relone_edit_workspace high conf mediumOBO
Reassigns a workspace to a different matter or flips its status, moving a live evidence set under a different engagement and muddying chain-of-custody records.
relativity.relone_usage_download_report high conf mediumOBO
Pulls the entire usage report out as a CSV, moving instance-wide consumption and matter-level activity data outside Relativity's access controls in one file.
relativity.relone_usage_delete_report high conf mediumhuman approval
Destroys a generated usage report, removing the consumption record a customer or auditor would use to verify RelativityOne invoicing.
relativity.relone_usage_get_report_details medium conf lowaudit
Exposes row-level consumption detail per workspace and matter, revealing case sizes and activity patterns that are otherwise restricted to admins.
All other tools (12)
relativity.relone_create_client medium conf mediumaudit
Registers a new client entity that matters and workspaces will hang off, affecting how case data and billing roll up.
relativity.relone_create_matter medium conf mediumaudit
Creates a matter container under a client, establishing where subsequent case workspaces and evidence will be organized.
relativity.relone_create_workspace medium conf mediumaudit
Provisions a new case workspace that inherits the template's security groups and field layout, consuming instance storage and licensing entitlements.
relativity.relone_edit_client medium conf mediumaudit
Changes client name, number, or status; setting a client inactive cascades to every matter and workspace beneath it and can interrupt active reviews.
relativity.relone_edit_matter medium conf mediumaudit
Alters matter properties such as its owning client or status, which changes how case workspaces are attributed and can deactivate an in-flight matter.
relativity.relone_get_workspace low conf mediumallow
Returns a workspace's configuration, owning matter, and status — context an agent needs before acting, with no data modification.
relativity.relone_list_clients low conf mediumallow
Reveals the firm's full client roster, which is itself confidential engagement information at most legal service providers.
relativity.relone_list_matters low conf mediumallow
Lists every legal matter on the instance, disclosing which disputes and investigations the organization is running.
relativity.relone_list_users medium conf mediumaudit
Returns the full user directory with account details, handing over names and contact data for every reviewer, attorney, and admin on the instance in one call.
relativity.relone_list_workspace_groups low conf mediumallow
Enumerates which groups hold access to a workspace; read-only but maps the permission surface an attacker would target.
relativity.relone_list_workspaces low conf mediumallow
Enumerates every case workspace on the instance, outlining the organization's active review footprint.
relativity.relone_usage_generate_report medium conf mediumaudit
Compiles a usage report over instance activity and consumption metrics, the same data that drives RelativityOne billing reconciliation.