Every MCP tool in the SCOPE compliance index, grouped by server — risk posture, regulatory exposure, and the tools that warrant tighter governance.
1 critical 4 high 4 med 1 low · 10 tools · 3 SoD-flagged
regimes CCPACOSOGLBAISO_27001NIST_CSFPCISOC2SOX
Tools needing tighter control (5 of 10)
privacy.get_pan critical conf highhuman approval redact
Returns the full primary account number, CVV, and expiry for a virtual card, handing the agent a reusable payment credential that can be spent anywhere the card is accepted.
privacy.create_card high conf highOBO redact
Issues a new virtual payment card with a caller-chosen spend limit and duration, creating real spending capacity against the funding account without a second approver.
privacy.update_card_spend_limit high conf highhuman approval
Raises or lowers the authorized spend ceiling and its reset period on an existing card, changing how much money a single principal can move before any control stops it.
privacy.close_card high conf highOBO
Permanently closes a virtual card with no way to reopen it, breaking every recurring charge and subscription bound to that card number.
privacy.list_transactions high conf highhuman approval redact
Pages through card transaction history up to 1000 records at a time across every card on the account, exposing merchant, amount, date, and approval outcome for the cardholder's spending.
All other tools (5)
privacy.get_card medium conf mediumaudit
Reads one card's configuration and status, including its merchant lock, state, and spend limit — financial account detail tied to an identified cardholder.
privacy.list_cards medium conf highaudit
Enumerates every virtual card on the account with its type, state, and spend limits, giving a full inventory of the payment instruments available to spend against.
privacy.pause_card medium conf highaudit
Suspends authorizations on a card, causing subsequent charges — including recurring vendor billing — to decline until it is unpaused.
privacy.unpause_card medium conf highaudit
Reactivates a paused card so it authorizes charges again, which can undo a pause that was applied in response to suspected fraud.
privacy.update_card_memo low conf highallow
Renames a card's memo label, which changes how the card is identified in statements and reconciliation views but moves no money.