MCP compliance catalog

Every MCP tool in the SCOPE compliance index, grouped by server — risk posture, regulatory exposure, and the tools that warrant tighter governance.
80MCP servers
1695tools
Reset 80 of 80 servers
Aiwyn Tax
10 tools · footprint 22
4 high 1 med 5 low COSOGLBA+1 more
Outreach
17 tools · footprint 22
2 high 6 med 9 low COSOSOX
PlanetScale
16 tools · footprint 22
1 critical 1 high 14 low COSOSOX
Square
3 tools · footprint 22
1 critical 2 low COSOGLBA+3 more
Airtable
19 tools · footprint 21
11 med 8 low
Klaviyo
29 tools · footprint 21
2 high 7 med 20 low
Mercury
13 tools · footprint 21
3 high 8 med 2 low COSOGLBA+2 more
Zoom for Claude
13 tools · footprint 20
3 high 3 med 7 low HIPAA
monday.com
17 tools · footprint 19
1 high 4 med 12 low
10x Genomics Cloud
27 tools · footprint 18
1 high 5 med 21 low HIPAA
Base44
7 tools · footprint 18
2 high 1 med 4 low
HubSpot
12 tools · footprint 18
1 high 3 med 8 low
Intercom
13 tools · footprint 18
8 med 5 low
Mixpanel
23 tools · footprint 18
1 high 6 med 16 low
Notion
18 tools · footprint 18
8 med 10 low
Slack
7 tools · footprint 18
2 high 4 med 1 low
‹ PrevPage 3 of 5Next ›
Box
10 high 14 med 13 low · 37 tools · 1 SoD-flagged
regimes APPICCPACOSOGDPRHIPAAISO_27001LGPDPIPEDAPIPLPOPIASOC2SOXUK_GDPR

Tools needing tighter control (11 of 37)

box.get_file_content high conf highOBO redact
Downloads file contents; arbitrary documents may include PII, PHI, or financial records.
box.search_files_keyword high conf highOBO redact
Full-text search across Box; can surface regulated content the caller has access to.
box.ai_qa_hub high conf highOBO redact
Runs Box AI Q&A across an entire content hub; can summarize regulated content.
box.ai_qa_multi_file high conf highOBO redact
Runs Box AI Q&A across several files; can synthesize sensitive content cross-document.
box.ai_extract_freeform high conf highOBO
Free-form extraction from a document; can pull arbitrary structured PII out of files.
box.ai_extract_structured high conf highOBO
Structured extraction from a document according to a schema; commonly used to pull PII fields.
box.ai_extract_structured_from_fields high conf highOBO
Extracts values for a caller-defined field list from a document.
box.ai_extract_structured_from_fields_enhanced high conf highOBO
Enhanced field-list extraction with reasoning; same data exposure as base extract.
box.ai_extract_structured_from_metadata_template high conf highOBO
Extracts values matching a Box metadata template from a document.
box.ai_extract_structured_from_metadata_template_enhanced high conf highOBO
Enhanced metadata-template extraction with reasoning.
box.upload_file_version medium conf highhuman approval
Replaces existing file content with a new version; alters records of record.
All other tools (26)
box.add_items_to_hub medium conf highaudit
Adds files/folders to a content hub; broadens audience for the items.
box.ai_qa_single_file medium conf highaudit
Runs Box AI Q&A against one file; output may contain extracted PII.
box.copy_hub medium conf highaudit
Duplicates a content hub; creates new exposure surface for included items.
box.create_docgen_batch medium conf highaudit
Generates a batch of documents from a template; outputs may contain merged PII or contract data.
box.create_docgen_template low conf highallow
Defines a new document-generation template.
box.create_file_comment low conf highallow
Posts a comment on a file.
box.create_folder low conf highallow
Creates a new folder; structural change only.
box.create_hub low conf highallow
Creates a new (initially empty) content hub.
box.get_docgen_template_by_id low conf highallow
Reads a document-generation template definition.
box.get_file_details medium conf highaudit
Returns file metadata (owner, path, sharing state).
box.get_folder_details low conf highallow
Returns folder metadata and sharing context.
box.get_hub_details low conf highallow
Returns hub configuration.
box.get_hub_items medium conf highaudit
Lists items within a hub; can enumerate regulated content sets.
box.list_docgen_templates low conf highallow
Enumerates available document-generation templates.
box.list_file_comments low conf highallow
Reads comments on a file.
box.list_folder_content_by_folder_id medium conf highaudit
Lists items within a folder; can enumerate sensitive document inventories.
box.list_hubs low conf highallow
Enumerates content hubs visible to the caller.
box.list_item_collaborations medium conf highaudit
Reveals who has access to an item; useful for both audit and reconnaissance.
box.list_tasks low conf highallow
Lists Box tasks (review/approval) on items.
box.search_files_metadata medium conf highaudit
Searches files by metadata template fields.
box.search_folders_by_name low conf highallow
Locates folders by name.
box.update_file_properties medium conf highaudit
Modifies file metadata; can rename, retag, or move regulated content.
box.update_folder_properties medium conf highaudit
Modifies folder metadata; can affect inherited sharing or retention.
box.update_hub medium conf highaudit
Updates hub metadata or audience configuration.
box.upload_file medium conf highaudit
Uploads a new file into Box; can introduce regulated data into a managed repository.
box.who_am_i low conf highallow
Returns the authenticated Box principal.