MCP compliance catalog

Every MCP tool in the SCOPE compliance index, grouped by server — risk posture, regulatory exposure, and the tools that warrant tighter governance.
303MCP servers
4476tools
Reset 303 of 303 servers
Microsoft 365
23 tools · footprint 41
8 high 14 med 1 low
Paytm for Business
24 tools · footprint 41
2 critical 7 high 5 med 10 low COSOPCI+1 more
Vercel
20 tools · footprint 41
2 critical 3 high 2 med 13 low COSOSOX
Cloudinary
23 tools · footprint 40
1 critical 4 high 15 med 3 low
Freshdesk
24 tools · footprint 40
6 high 14 med 4 low
Netlify
23 tools · footprint 40
2 critical 4 high 4 med 13 low
Zapier
14 tools · footprint 39
1 critical 3 high 3 med 7 low COSOPCI+1 more
Freshservice
23 tools · footprint 38
6 high 15 med 2 low
GitHub
83 tools · footprint 38
1 high 20 med 62 low COSOSOX
Bright Data
25 tools · footprint 37
5 high 17 med 3 low
Snowflake
6 tools · footprint 37
2 critical 3 high 1 med COSOSOX
Brex
25 tools · footprint 36
3 high 17 med 5 low COSOGLBA+2 more
Microsoft Dataverse
15 tools · footprint 35
1 critical 3 high 8 med 3 low
Calendly
35 tools · footprint 34
2 high 13 med 20 low
Lovable
25 tools · footprint 34
1 critical 2 high 9 med 13 low
Smartsheet
42 tools · footprint 34
2 high 9 med 31 low COSOSOX
‹ PrevPage 3 of 19Next ›
Malwarebytes
1 high 3 med 2 low · 6 tools · 0 SoD-flagged
regimes APPICCPAGDPRISO_27001LGPDPIPEDAPIPLPOPIASOC2UK_GDPR

Tools needing tighter control (1 of 6)

malwarebytes.reputation-scan_all high conf highOBO
Submits a batch of links, email addresses, and phone numbers to Malwarebytes in one call, sending personal identifiers for many individuals to an external threat service at once.
All other tools (5)
malwarebytes.reputation-check_email medium conf highaudit
Sends an email address to Malwarebytes for phishing and scam reputation lookup, disclosing a personal identifier to a third-party processor.
malwarebytes.reputation-check_link low conf highallow
Checks a URL against Malwarebytes reputation data; read-only, though the submitted link is shared with an external service.
malwarebytes.reputation-check_phone medium conf highaudit
Sends a phone number to Malwarebytes to test it against scam reputation data, disclosing a personal identifier to a third-party processor.
malwarebytes.reputation-report medium conf highaudit
Files a suspicious-content report with Malwarebytes, creating a durable third-party abuse record against the reported address, number, or domain that may affect its deliverability and reputation.
malwarebytes.reputation-whois low conf highallow
Retrieves public domain registration records to judge a site's legitimacy; results may include registrant contact details where the registry does not redact them.