MCP compliance catalog

Every MCP tool in the SCOPE compliance index, grouped by server — risk posture, regulatory exposure, and the tools that warrant tighter governance.
387MCP servers
5470tools
Reset 387 of 387 servers
Qlik Cloud
25 tools · footprint 66
1 critical 12 high 10 med 2 low COSOSOX
Adobe Workfront
25 tools · footprint 65
2 critical 7 high 13 med 3 low
MailerLite
25 tools · footprint 63
1 critical 11 high 12 med 1 low
MongoDB
25 tools · footprint 63
2 critical 7 high 12 med 4 low
MotherDuck
21 tools · footprint 62
4 critical 5 high 9 med 3 low
QuickNode
22 tools · footprint 61
5 critical 1 high 10 med 6 low COSOPCI+1 more
Salesforce
32 tools · footprint 60
4 critical 2 high 9 med 17 low COSOSOX
Close
64 tools · footprint 59
5 high 22 med 37 low COSOSOX
Cloudflare
26 tools · footprint 58
3 critical 4 high 6 med 13 low
Webflow
23 tools · footprint 57
2 critical 5 high 10 med 6 low
n8n
25 tools · footprint 56
1 critical 7 high 13 med 4 low
Pigment
25 tools · footprint 56
9 high 14 med 2 low COSOSOX
PagerDuty
64 tools · footprint 55
5 high 16 med 43 low
Datadog
24 tools · footprint 52
1 critical 11 high 12 med
Attention
25 tools · footprint 51
1 critical 6 high 18 med
Box
37 tools · footprint 50
10 high 14 med 13 low COSOHIPAA+1 more
‹ PrevPage 2 of 25Next ›
UpworkDocs ↗
1 critical 5 high 9 med 4 low · 19 tools · 1 SoD-flagged
regimes APPICCPACOSOCO_AI_ACTEU_AI_ACTGDPRISO_27001LGPDNIST_AI_RMFPIPEDAPIPLPOPIASOC2SOXUK_GDPR

Tools needing tighter control (6 of 19)

upwork.milestones_and_payments critical conf mediumhuman approval
Approving or rejecting a contract milestone authorizes release of escrowed funds to a freelancer, moving money and changing recognized project cost in a single step.
upwork.financials_and_time_reports high conf mediumOBO
Pulls timesheets, work-diary activity records, and transaction history across every active contract, exposing worker-monitoring data and spend history in bulk.
upwork.offers_and_contracts high conf mediumOBO
Prepares a contract offer carrying scope and rate, committing the client to spend once confirmed on upwork.com, and reads terms of every active contract.
upwork.respond_to_invitations_and_offers high conf mediumOBO
Accepts or declines direct offers and invitations, which starts or forfeits a revenue-bearing contract at the stated rate once confirmed on upwork.com.
upwork.messaging high conf mediumOBO
Reads private message threads with freelancers and applicants and sends messages under the account holder's identity, exposing and impersonating confidential correspondence.
upwork.agency_dashboard high conf mediumOBO
Returns one aggregated view of every agency member's invitations, offers, messages, and contracts, concentrating the whole organization's client data into a single response.
All other tools (13)
upwork.account_and_access low conf mediumallow
Enumerates which Upwork accounts the connected credential can act as — freelancer, client, or agency — plus company details, revealing the agent's effective reach.
upwork.contracts_and_work_delivery medium conf mediumaudit
Submits milestone deliverables and reports logged time against active contracts, which is the billing input a client reviews before funds are released.
upwork.dashboard_overview low conf mediumallow
Summarizes new proposals, pending offers, messages, and contract updates in one read; a status roll-up that changes nothing but reveals current pipeline state.
upwork.draft_and_submit_proposals medium conf mediumaudit
Submits a proposal to a job posting, spending Connects credits and putting a binding rate and pitch in front of a prospective client.
upwork.earnings_and_profile medium conf mediumaudit
Reads earnings and available balance, and rewrites profile fields including employment history, education, and languages — personal data that drives marketplace matching.
upwork.file_attachments medium conf mediumaudit
Uploads and downloads attachments bound to proposals, offers, jobs, and messages — files that routinely carry resumes, identity documents, and client deliverables.
upwork.find_and_shortlist_talent medium conf mediumaudit
Searches freelancers by skill, rate, and location and returns ranked profiles with full work history, producing an automated shortlist that shapes who gets hired.
upwork.find_the_right_jobs low conf mediumallow
Searches and saves marketplace job listings by skill, budget, or type; read-only discovery over publicly posted jobs with no state change beyond favorites.
upwork.invitations_and_proposals medium conf mediumaudit
Invites specific freelancers to apply and declines received proposals off ranked summaries, an adverse hiring decision recorded against a named applicant.
upwork.post_and_manage_jobs medium conf mediumaudit
Publishes and edits live job postings on the public Upwork marketplace, so drafted scope, budget, and requirements become externally visible under the company's name.
upwork.profile_visibility medium conf mediumaudit
Toggles the availability badge and manages profile boost ads, which are paid placements — changes here incur marketplace ad spend and alter inbound lead volume.
upwork.talent_lists low conf mediumallow
Creates talent lists and saves freelancers into them for later consideration; a reversible bookmarking write over already-published marketplace profiles.
upwork.teams_and_members medium conf mediumaudit
Returns the agency's team structure and full member roster, exposing the identities and affiliations of everyone working under the organization.