MCP compliance catalog

Every MCP tool in the SCOPE compliance index, grouped by server — risk posture, regulatory exposure, and the tools that warrant tighter governance.
387MCP servers
5470tools
Reset 387 of 387 servers
Qlik Cloud
25 tools · footprint 66
1 critical 12 high 10 med 2 low COSOSOX
Adobe Workfront
25 tools · footprint 65
2 critical 7 high 13 med 3 low
MailerLite
25 tools · footprint 63
1 critical 11 high 12 med 1 low
MongoDB
25 tools · footprint 63
2 critical 7 high 12 med 4 low
MotherDuck
21 tools · footprint 62
4 critical 5 high 9 med 3 low
QuickNode
22 tools · footprint 61
5 critical 1 high 10 med 6 low COSOPCI+1 more
Salesforce
32 tools · footprint 60
4 critical 2 high 9 med 17 low COSOSOX
Close
64 tools · footprint 59
5 high 22 med 37 low COSOSOX
Cloudflare
26 tools · footprint 58
3 critical 4 high 6 med 13 low
Webflow
23 tools · footprint 57
2 critical 5 high 10 med 6 low
n8n
25 tools · footprint 56
1 critical 7 high 13 med 4 low
Pigment
25 tools · footprint 56
9 high 14 med 2 low COSOSOX
PagerDuty
64 tools · footprint 55
5 high 16 med 43 low
Datadog
24 tools · footprint 52
1 critical 11 high 12 med
Attention
25 tools · footprint 51
1 critical 6 high 18 med
Box
37 tools · footprint 50
10 high 14 med 13 low COSOHIPAA+1 more
‹ PrevPage 2 of 25Next ›
Vibe ProspectingDocs ↗
1 critical 4 high 1 med 6 low · 12 tools · 2 SoD-flagged
regimes APPICCPAGDPRISO_27001LGPDPIPEDAPIPLPOPIASOC2UK_GDPR

Tools needing tighter control (5 of 12)

vibeprospecting.export-to-csv critical conf highhuman approval
Writes an entire prospect or company dataset — including contact emails, phone numbers and social profiles — out to a CSV that leaves the platform's access controls, and burns purchased export credits.
vibeprospecting.fetch-entities high conf mediumhuman approval
Pulls filtered lists of company and contact records from a 800M-person data pool, producing bulk third-party personal data inside the session with no data-subject notice.
vibeprospecting.get-dataset high conf mediumhuman approval
Reads back a stored dataset whose rows may hold contact-level personal data, re-exposing an earlier prospecting result to anyone holding the dataset identifier.
vibeprospecting.enrich-prospects high conf highOBO
Appends direct contact details — work and personal email, phone numbers, social profiles — to named individuals, importing third-party personal data into CRM or ATS records.
vibeprospecting.match-prospects high conf highOBO
Resolves partial identifiers to a single identified person in the vendor's contact graph, linking an internal record to an external profile of that individual.
All other tools (7)
vibeprospecting.autocomplete low conf mediumallow
Resolves filter vocabulary such as industry codes and locations; read-only lookup with no record-level data returned.
vibeprospecting.enrich-business low conf highallow
Adds firmographic, technographic and funding attributes to a company record; company-level data only, and any wrong match propagates into CRM segmentation.
vibeprospecting.estimate-cost low conf mediumallow
Prices a planned query in credits before it runs; no credits are consumed and no records are returned.
vibeprospecting.fetch-businesses-events low conf highallow
Returns funding, hiring and growth events for companies, feeding pipeline prioritisation from company-level public signals.
vibeprospecting.fetch-entities-statistics low conf mediumallow
Returns aggregate counts for a filter set, sizing a market segment without surfacing individual records.
vibeprospecting.fetch-prospects-events medium conf mediumaudit
Surfaces behavioural and job-change signals attached to named individuals, a profiling read that data subjects have not consented to within the buyer's systems.
vibeprospecting.match-business low conf highallow
Maps a name or domain to the vendor's canonical company id; a read-only resolution step that every downstream enrichment depends on.