MCP compliance catalog

Every MCP tool in the SCOPE compliance index, grouped by server — risk posture, regulatory exposure, and the tools that warrant tighter governance.
387MCP servers
5470tools
Reset 387 of 387 servers
Qlik Cloud
25 tools · footprint 66
1 critical 12 high 10 med 2 low COSOSOX
Adobe Workfront
25 tools · footprint 65
2 critical 7 high 13 med 3 low
MailerLite
25 tools · footprint 63
1 critical 11 high 12 med 1 low
MongoDB
25 tools · footprint 63
2 critical 7 high 12 med 4 low
MotherDuck
21 tools · footprint 62
4 critical 5 high 9 med 3 low
QuickNode
22 tools · footprint 61
5 critical 1 high 10 med 6 low COSOPCI+1 more
Salesforce
32 tools · footprint 60
4 critical 2 high 9 med 17 low COSOSOX
Close
64 tools · footprint 59
5 high 22 med 37 low COSOSOX
Cloudflare
26 tools · footprint 58
3 critical 4 high 6 med 13 low
Webflow
23 tools · footprint 57
2 critical 5 high 10 med 6 low
n8n
25 tools · footprint 56
1 critical 7 high 13 med 4 low
Pigment
25 tools · footprint 56
9 high 14 med 2 low COSOSOX
PagerDuty
64 tools · footprint 55
5 high 16 med 43 low
Datadog
24 tools · footprint 52
1 critical 11 high 12 med
Attention
25 tools · footprint 51
1 critical 6 high 18 med
Box
37 tools · footprint 50
10 high 14 med 13 low COSOHIPAA+1 more
‹ PrevPage 2 of 25Next ›
WrikeDocs ↗
1 high 8 med 16 low · 25 tools · 0 SoD-flagged
regimes APPICCPAGDPRISO_27001LGPDPIPEDASOC2UK_GDPR

Tools needing tighter control (1 of 25)

wrike.update_items high conf mediumOBO
Rewrites titles, descriptions, statuses, dates and custom fields across up to 20 work items in one call, so a single mistaken batch can distort project state and reporting for an entire team.
All other tools (24)
wrike.add_attachments_to_item medium conf mediumaudit
Publishes an uploaded file onto a work item, making its contents visible to everyone with access to that item.
wrike.create_item_comment low conf highallow
Posts commentary under the acting user's name and can @-mention colleagues, pushing agent-authored text into human discussion threads.
wrike.create_item_from_blueprint medium conf highaudit
Instantiates an entire blueprint tree of projects, folders and tasks in one call, which can flood a space with structure that must be cleaned up item by item.
wrike.create_project_folder_item low conf highallow
Adds folders and projects with assigned owners and dates, changing the shape of a space's work hierarchy.
wrike.create_task_item low conf highallow
Creates tasks and assigns them to named people, putting work on colleagues' queues without their involvement.
wrike.get_approvals low conf mediumallow
Exposes who was asked to approve a deliverable and what they decided, which is the review trail auditors rely on.
wrike.get_item_comments medium conf highaudit
Pulls entire internal discussion threads with author attribution, exposing candid team commentary and any personal data written into it.
wrike.get_item_details medium conf highaudit
Returns complete work-item records including custom fields and assignees, where teams routinely store client names, budgets and other confidential detail.
wrike.get_items_children low conf highallow
Traverses the work hierarchy level by level, mapping out how a space's projects and tasks are organized.
wrike.get_my_inbox low conf highallow
Reads the caller's notification stream, including mentions and replies written by colleagues.
wrike.get_requestform low conf highallow
Reveals a request form's full field, option and rule configuration, including how submissions are routed.
wrike.get_users medium conf highaudit
Resolves account holders to their profile and email address, exposing employee and collaborator contact details to the agent.
wrike.prefill_requestform low conf mediumallow
Builds a shareable link carrying prefilled form values; nothing is submitted, but the values ride in the URL and can leak if the link is forwarded.
wrike.prepare_attachment_upload low conf mediumallow
Moves file content into Wrike storage ahead of attachment, so whatever the agent uploads now lives in the customer's workspace.
wrike.search_approvals low conf mediumallow
Surfaces every pending and completed approval across the account, including who is holding up which decision.
wrike.search_blueprints low conf highallow
Lists reusable blueprints, showing the standardized project templates an organization runs on.
wrike.search_customitemtypes low conf highallow
Lists the account's custom item types and their usage ranking, exposing how the organization models its work.
wrike.search_item_customfields low conf highallow
Enumerates custom field definitions and their allowed values, revealing what business data the account tracks on work items.
wrike.search_items medium conf highaudit
Runs keyword search across every task, folder and project the caller can reach, making it the fastest route to locate sensitive work records at scale.
wrike.search_requestforms low conf highallow
Lists the intake forms available in the account, exposing which request workflows exist.
wrike.search_spaces low conf highallow
Lists the spaces the caller belongs to, outlining which teams and initiatives the account is organized around.
wrike.search_users medium conf highaudit
Enumerates the account's people directory and infers working relationships from collaboration frequency, handing an agent an internal org map.
wrike.search_workflows low conf highallow
Returns workflow definitions and custom status ids, which are the handles needed to drive work items through state changes.
wrike.submit_requestform medium conf mediumaudit
Files an intake request under the acting user's identity, creating the task or project the form configures and starting whatever downstream routing that form triggers.