MCP compliance catalog

Every MCP tool in the SCOPE compliance index, grouped by server — risk posture, regulatory exposure, and the tools that warrant tighter governance.
303MCP servers
4476tools
Reset 303 of 303 servers
Microsoft 365
23 tools · footprint 41
8 high 14 med 1 low
Paytm for Business
24 tools · footprint 41
2 critical 7 high 5 med 10 low COSOPCI+1 more
Vercel
20 tools · footprint 41
2 critical 3 high 2 med 13 low COSOSOX
Cloudinary
23 tools · footprint 40
1 critical 4 high 15 med 3 low
Freshdesk
24 tools · footprint 40
6 high 14 med 4 low
Netlify
23 tools · footprint 40
2 critical 4 high 4 med 13 low
Zapier
14 tools · footprint 39
1 critical 3 high 3 med 7 low COSOPCI+1 more
Freshservice
23 tools · footprint 38
6 high 15 med 2 low
GitHub
83 tools · footprint 38
1 high 20 med 62 low COSOSOX
Bright Data
25 tools · footprint 37
5 high 17 med 3 low
Snowflake
6 tools · footprint 37
2 critical 3 high 1 med COSOSOX
Brex
25 tools · footprint 36
3 high 17 med 5 low COSOGLBA+2 more
Microsoft Dataverse
15 tools · footprint 35
1 critical 3 high 8 med 3 low
Calendly
35 tools · footprint 34
2 high 13 med 20 low
Lovable
25 tools · footprint 34
1 critical 2 high 9 med 13 low
Smartsheet
42 tools · footprint 34
2 high 9 med 31 low COSOSOX
‹ PrevPage 3 of 19Next ›
GoCardlessDocs ↗
2 critical 3 high 1 med 3 low · 9 tools · 1 SoD-flagged
regimes CCPACOSOGDPRGLBAISO_27001PIPEDAPSD2SOC2SOXUK_GDPR

Tools needing tighter control (5 of 9)

gocardless.payments critical conf mediumhuman approval
Creates, retries, and cancels bank debits against live customer mandates — money moves out of a payer's account and the collection lands in the merchant's revenue ledger.
gocardless.refunds critical conf mediumhuman approval
Issues refunds that return collected funds to a payer, reversing recognised revenue and disbursing money with a single actor and no second approver.
gocardless.mandates high conf mediumOBO
Cancels a customer's Direct Debit authorisation, permanently ending the merchant's right to collect from that payer until a new mandate is signed.
gocardless.subscriptions high conf mediumOBO
Creates recurring billing schedules that draw funds from a payer on every interval, committing future revenue without further review.
gocardless.customers high conf mediumOBO
Browses the full payer list and individual customer records, surfacing personal and banking-relationship data at list scale even with sensitive fields masked.
All other tools (4)
gocardless.events low conf mediumallow
Reads the lifecycle history of payments and mandates, revealing when each was submitted, confirmed, or failed.
gocardless.integration_guidance low conf mediumallow
Returns GoCardless API reference material, integration patterns, and code samples; no account data is touched.
gocardless.payment_links medium conf mediumaudit
Generates shareable billing request flows that solicit payment authorisation from customers under the merchant's brand.
gocardless.payouts low conf mediumallow
Reads settlement amounts and dates paid into the merchant's bank account, exposing revenue volumes to whoever holds the connection.