MCP compliance catalog

Every MCP tool in the SCOPE compliance index, grouped by server — risk posture, regulatory exposure, and the tools that warrant tighter governance.
303MCP servers
4476tools
Reset 303 of 303 servers
Microsoft 365
23 tools · footprint 41
8 high 14 med 1 low
Paytm for Business
24 tools · footprint 41
2 critical 7 high 5 med 10 low COSOPCI+1 more
Vercel
20 tools · footprint 41
2 critical 3 high 2 med 13 low COSOSOX
Cloudinary
23 tools · footprint 40
1 critical 4 high 15 med 3 low
Freshdesk
24 tools · footprint 40
6 high 14 med 4 low
Netlify
23 tools · footprint 40
2 critical 4 high 4 med 13 low
Zapier
14 tools · footprint 39
1 critical 3 high 3 med 7 low COSOPCI+1 more
Freshservice
23 tools · footprint 38
6 high 15 med 2 low
GitHub
83 tools · footprint 38
1 high 20 med 62 low COSOSOX
Bright Data
25 tools · footprint 37
5 high 17 med 3 low
Snowflake
6 tools · footprint 37
2 critical 3 high 1 med COSOSOX
Brex
25 tools · footprint 36
3 high 17 med 5 low COSOGLBA+2 more
Microsoft Dataverse
15 tools · footprint 35
1 critical 3 high 8 med 3 low
Calendly
35 tools · footprint 34
2 high 13 med 20 low
Lovable
25 tools · footprint 34
1 critical 2 high 9 med 13 low
Smartsheet
42 tools · footprint 34
2 high 9 med 31 low COSOSOX
‹ PrevPage 3 of 19Next ›
Microsoft Outlook Mail
5 high 8 med 9 low · 22 tools · 0 SoD-flagged
regimes APPICCPAGDPRISO_27001LGPDNIST_CSFPIPEDAPIPLPOPIASOC2UK_GDPR

Tools needing tighter control (5 of 22)

microsoft-outlook-mail.outlook_send_mail high conf mediumOBO
Sends an email as the user to arbitrary recipients, enabling disclosure of mailbox data to external parties and impersonation of the account owner.
microsoft-outlook-mail.outlook_forward_mail high conf mediumOBO
Forwards an existing message to new recipients, a direct path to exfiltrate internal correspondence outside the organization.
microsoft-outlook-mail.outlook_batch_delete_messages high conf mediumOBO
Moves many messages to Deleted Items in a single call; bulk removal of correspondence with broad blast radius.
microsoft-outlook-mail.outlook_email_search high conf mediumOBO
Searches the mailbox by sender and date; can surface PII, credentials, contracts, and confidential correspondence at scale.
microsoft-outlook-mail.outlook_create_filter high conf mediumOBO
Creates an inbox rule that can silently auto-forward, move, or delete incoming mail, a well-known exfiltration and evasion vector.
All other tools (17)
microsoft-outlook-mail.outlook_batch_modify_labels low conf mediumallow
Adds or removes categories on multiple messages in a single call; reversible mailbox organization at scale.
microsoft-outlook-mail.outlook_create_draft medium conf mediumaudit
Composes an email draft on the user's behalf; not auto-sent but staged as the user's outgoing correspondence.
microsoft-outlook-mail.outlook_create_label low conf mediumallow
Adds a new category to the mailbox master list for organizing mail.
microsoft-outlook-mail.outlook_create_reply_all_draft medium conf mediumaudit
Stages a reply-all draft on a message, widening the outgoing recipient set to every participant on the thread.
microsoft-outlook-mail.outlook_create_reply_draft medium conf mediumaudit
Stages a reply draft on an existing message, carrying the original thread's content into a new outgoing communication.
microsoft-outlook-mail.outlook_delete_draft low conf mediumallow
Moves an unsent draft to Deleted Items, discarding staged content that was never transmitted.
microsoft-outlook-mail.outlook_delete_filter medium conf mediumaudit
Deletes an inbox rule, potentially removing a mail-routing or security control the user relied on.
microsoft-outlook-mail.outlook_delete_label low conf mediumallow
Removes a category from the mailbox master list, unassigning it from any messages that carried it.
microsoft-outlook-mail.outlook_modify_labels low conf mediumallow
Adds or removes categories on a single message; minor mailbox organization change.
microsoft-outlook-mail.outlook_modify_thread_labels low conf mediumallow
Adds or removes categories across every message in a thread.
microsoft-outlook-mail.outlook_send_draft medium conf mediumaudit
Sends a previously composed draft as the user; the message leaves the mailbox and cannot be recalled.
microsoft-outlook-mail.outlook_set_vacation low conf mediumallow
Sets the automatic-reply message that responds to all incoming senders, including external parties.
microsoft-outlook-mail.outlook_trash_thread medium conf mediumaudit
Moves an entire conversation to Deleted Items; recoverable but removes correspondence from the active mailbox.
microsoft-outlook-mail.outlook_untrash_thread low conf mediumallow
Restores a conversation from Deleted Items back into the active mailbox.
microsoft-outlook-mail.outlook_update_draft medium conf mediumaudit
Modifies the content or recipients of an existing draft before it is sent as the user's correspondence.
microsoft-outlook-mail.outlook_update_label low conf mediumallow
Renames or recolors an existing category in the mailbox master list.
microsoft-outlook-mail.read_resource medium conf mediumaudit
Reads a file, email, or chat by URI, pulling its full body and attachments into agent context.