MCP compliance catalog

Every MCP tool in the SCOPE compliance index, grouped by server — risk posture, regulatory exposure, and the tools that warrant tighter governance.
303MCP servers
4476tools
Reset 303 of 303 servers
Microsoft 365
23 tools · footprint 41
8 high 14 med 1 low
Paytm for Business
24 tools · footprint 41
2 critical 7 high 5 med 10 low COSOPCI+1 more
Vercel
20 tools · footprint 41
2 critical 3 high 2 med 13 low COSOSOX
Cloudinary
23 tools · footprint 40
1 critical 4 high 15 med 3 low
Freshdesk
24 tools · footprint 40
6 high 14 med 4 low
Netlify
23 tools · footprint 40
2 critical 4 high 4 med 13 low
Zapier
14 tools · footprint 39
1 critical 3 high 3 med 7 low COSOPCI+1 more
Freshservice
23 tools · footprint 38
6 high 15 med 2 low
GitHub
83 tools · footprint 38
1 high 20 med 62 low COSOSOX
Bright Data
25 tools · footprint 37
5 high 17 med 3 low
Snowflake
6 tools · footprint 37
2 critical 3 high 1 med COSOSOX
Brex
25 tools · footprint 36
3 high 17 med 5 low COSOGLBA+2 more
Microsoft Dataverse
15 tools · footprint 35
1 critical 3 high 8 med 3 low
Calendly
35 tools · footprint 34
2 high 13 med 20 low
Lovable
25 tools · footprint 34
1 critical 2 high 9 med 13 low
Smartsheet
42 tools · footprint 34
2 high 9 med 31 low COSOSOX
‹ PrevPage 3 of 19Next ›
AshbyDocs ↗
1 high 8 med 8 low · 17 tools · 0 SoD-flagged
regimes APPICCPAEU_AI_ACTGDPRISO_27001LGPDNIST_AI_RMFPIPEDAPIPLPOPIASOC2UK_GDPR

Tools needing tighter control (2 of 17)

ashby-api.filter_records high conf mediumOBO
Runs criteria-based queries across candidates, applications, and jobs, returning matching records in bulk — an exfiltration path for candidate PII at scale.
ashby-api.get_interview_plan low conf lowallow
Shows the configured candidate progression stages for an interview plan; largely structural pipeline configuration.
All other tools (15)
ashby-api.add_note_to_candidate low conf mediumallow
Drafts a profile note on a candidate for later confirmation; reversible and does not commit until the user approves it.
ashby-api.change_application_stage medium conf mediumaudit
Advances a candidate's application through interview stages, effecting a consequential step in an automated hiring pipeline.
ashby-api.consider_candidate_for_job medium conf mediumaudit
Creates a new application linking a candidate to a job, entering that person into the hiring pipeline for the role.
ashby-api.create_candidate medium conf mediumaudit
Adds a new candidate record with contact information, writing applicant personal data into the ATS.
ashby-api.describe_object_fields low conf mediumallow
Returns the filterable field metadata for an object type as a backend helper; exposes schema shape, not record data.
ashby-api.get_candidate medium conf mediumaudit
Pulls a comprehensive candidate profile including resume and interview feedback — a rich single-record disclosure of applicant personal data.
ashby-api.get_interview_details medium conf mediumaudit
Provides pre-interview briefing materials for a scheduled interview, including candidate-specific context.
ashby-api.get_job_pipeline low conf mediumallow
Displays aggregate candidate counts at each pipeline stage for a job; exposes summary metrics rather than individual records.
ashby-api.get_pending_tasks low conf mediumallow
Lists the caller's own outstanding scorecards and approvals; a personal task queue read scoped to the authenticated user.
ashby-api.get_record_details medium conf mediumaudit
Retrieves full information for a job, application, or offer, including offer compensation terms and applicant details.
ashby-api.get_submitted_feedback low conf mediumallow
Retrieves the caller's own submitted scorecard feedback, scoped to the authenticated interviewer.
ashby-api.get_upcoming_interviews medium conf mediumaudit
Lists scheduled interviews with candidate and job details, surfacing identifying applicant information and schedules.
ashby-api.search_product_docs low conf mediumallow
Queries Ashby's product documentation; a read of public help content with no customer data exposure.
ashby-api.search_records_by_name medium conf mediumaudit
Locates candidates, jobs, applications, and email templates by name, surfacing identifying candidate details to the caller.
ashby-api.submit_mcp_feedback low conf mediumallow
Sends a suggestion to the Ashby team about the MCP server; a low-impact outbound feedback message.