MCP compliance catalog

Every MCP tool in the SCOPE compliance index, grouped by server — risk posture, regulatory exposure, and the tools that warrant tighter governance.
80MCP servers
1695tools
Reset 80 of 80 servers
Vercel
20 tools · footprint 41
2 critical 3 high 2 med 13 low COSOSOX
Zapier
14 tools · footprint 39
1 critical 3 high 3 med 7 low COSOPCI+1 more
GitHub
83 tools · footprint 38
1 high 20 med 62 low COSOSOX
Snowflake
6 tools · footprint 37
2 critical 3 high 1 med COSOSOX
Calendly
35 tools · footprint 34
2 high 13 med 20 low
Smartsheet
42 tools · footprint 34
2 high 9 med 31 low COSOSOX
Ramp
17 tools · footprint 33
5 high 5 med 7 low COSOGLBA+2 more
Attio
37 tools · footprint 32
4 high 14 med 19 low
Egnyte
21 tools · footprint 31
3 high 9 med 9 low
Stytch
7 tools · footprint 31
1 critical 2 high 2 med 2 low
Wix
16 tools · footprint 29
1 critical 1 high 1 med 13 low COSOPCI+1 more
WordPress.com
19 tools · footprint 28
3 high 6 med 10 low COSOSOX
Oracle NetSuite
11 tools · footprint 27
3 high 3 med 5 low COSOSOX
Atlassian Rovo
54 tools · footprint 24
13 med 41 low
ZoomInfo
15 tools · footprint 24
5 high 4 med 6 low
Braze
40 tools · footprint 23
1 high 5 med 34 low COSOSOX
‹ PrevPage 2 of 5Next ›
Supabase
4 critical 4 high 8 med 16 low · 32 tools · 8 SoD-flagged
regimes APPICCPACOSOGDPRISO_27001LGPDNIST_CSFPIPEDAPIPLPOPIASOC2SOXUK_GDPR

Tools needing tighter control (8 of 32)

supabase.apply_migration critical conf highhuman approval
Applies a DDL migration to the live database; can alter or drop schema with no review gate.
supabase.execute_sql critical conf highhuman approval
Runs arbitrary SQL with project privileges; full read/write access to all tables including PII.
supabase.deploy_edge_function critical conf highhuman approval
Deploys server-side function code to production; arbitrary code execution path with database access.
supabase.merge_branch critical conf highhuman approval
Promotes branch migrations and edge functions into production.
supabase.pause_project high conf highhuman approval
Pauses a project; takes the database offline and breaks any apps depending on it.
supabase.delete_branch high conf highhuman approval
Deletes a branch and its data; irreversible.
supabase.reset_branch high conf highhuman approval
Resets branch migration state; destroys any uncommitted schema work.
supabase.update_storage_config high conf highhuman approval
Modifies storage limits and policies; can broaden public access to user-uploaded content.
All other tools (24)
supabase.confirm_cost medium conf mediumaudit
Acknowledges projected cost; precondition for paid resource creation.
supabase.create_branch medium conf highaudit
Creates an isolated database branch (paid feature); incurs cost.
supabase.create_project medium conf highaudit
Provisions a new Postgres project; incurs cost and expands the org's footprint.
supabase.generate_typescript_types low conf highallow
Generates TypeScript types from the database schema.
supabase.get_advisors low conf highallow
Reads security and performance advisor findings for the project.
supabase.get_cost low conf highallow
Returns the cost estimate for a planned action.
supabase.get_edge_function medium conf highaudit
Returns the source of an edge function; may expose business logic and embedded secrets.
supabase.get_logs medium conf highaudit
Returns service logs; may contain user identifiers, IPs, and request payloads.
supabase.get_organization low conf highallow
Returns details of a single organization including plan.
supabase.get_project low conf highallow
Returns details of a single project.
supabase.get_project_url low conf highallow
Returns the project API URL.
supabase.get_publishable_keys medium conf mediumaudit
Returns the project's anon/publishable keys; intended for client use but still credentials.
supabase.get_storage_config low conf highallow
Reads storage configuration including limits.
supabase.list_branches low conf highallow
Lists project branches.
supabase.list_edge_functions low conf highallow
Lists deployed edge functions for the project.
supabase.list_extensions low conf highallow
Lists installed Postgres extensions.
supabase.list_migrations low conf highallow
Lists database migrations applied to the project.
supabase.list_organizations low conf highallow
Lists organizations the user belongs to.
supabase.list_projects low conf highallow
Lists projects in the connected organization.
supabase.list_storage_buckets low conf highallow
Lists storage buckets.
supabase.list_tables low conf highallow
Enumerates database tables; schema-level read.
supabase.rebase_branch medium conf highaudit
Rebases a branch onto production; can introduce migration conflicts.
supabase.restore_project medium conf highaudit
Restores a paused project back to active; resumes billing.
supabase.search_docs low conf highallow
Searches Supabase documentation.