MCP compliance catalog

Every MCP tool in the SCOPE compliance index, grouped by server — risk posture, regulatory exposure, and the tools that warrant tighter governance.
387MCP servers
5470tools
Reset 387 of 387 servers
Gusto
36 tools · footprint 48
12 high 11 med 13 low COSOGLBA+1 more
ActiveCampaign
58 tools · footprint 47
4 high 15 med 39 low COSOSOX
GitHub
24 tools · footprint 47
5 high 12 med 7 low COSOSOX
Sanity
36 tools · footprint 47
1 critical 5 high 12 med 18 low
Tray.ai
22 tools · footprint 47
1 critical 5 high 7 med 9 low
Relativity
20 tools · footprint 46
1 critical 6 high 8 med 5 low COSOSOX
Amplitude
43 tools · footprint 44
6 high 16 med 21 low
Mem
23 tools · footprint 44
5 high 8 med 10 low
Microsoft SharePoint (Work IQ)
23 tools · footprint 44
1 critical 5 high 13 med 4 low
PagerDuty
25 tools · footprint 44
6 high 18 med 1 low
Zoho Desk
25 tools · footprint 44
1 critical 8 high 11 med 5 low
Coralogix
21 tools · footprint 43
5 high 13 med 3 low
Sentry
25 tools · footprint 43
3 high 14 med 8 low
Clarify
25 tools · footprint 42
3 high 15 med 7 low
Microsoft 365
23 tools · footprint 41
8 high 14 med 1 low
Paytm for Business
24 tools · footprint 41
2 critical 7 high 5 med 10 low COSOPCI+1 more
‹ PrevPage 3 of 25Next ›
Order by Cash App
1 med 4 low · 5 tools · 0 SoD-flagged
regimes none

Tools needing tighter control (0 of 5)

None — every tool is low-risk, high-confidence, and outside PCI/HIPAA payload scope.
All other tools (5)
cash-app.create-cart medium conf highaudit
Assembles a restaurant order cart from item selections, staging a purchase that a downstream checkout could turn into a paid order.
cash-app.discover-nearby-restaurants low conf highallow
Lists restaurants near a supplied location with fulfillment hours; surfaces public listing data for ordering discovery.
cash-app.get-multiple-menus low conf highallow
Pulls plain-text menus for up to ten restaurants at once for price comparison; reads public catalog data with no sensitive fields.
cash-app.get-single-menu low conf highallow
Returns a single restaurant's menu, prices, and the unit token used to seed a cart; exposes public catalog data only.
cash-app.search-brand-by-name low conf highallow
Resolves a restaurant brand name to its physical locations for discovery; returns public storefront data only.