MCP compliance catalog

Every MCP tool in the SCOPE compliance index, grouped by server — risk posture, regulatory exposure, and the tools that warrant tighter governance.
387MCP servers
5470tools
Reset 387 of 387 servers
Gusto
36 tools · footprint 48
12 high 11 med 13 low COSOGLBA+1 more
ActiveCampaign
58 tools · footprint 47
4 high 15 med 39 low COSOSOX
GitHub
24 tools · footprint 47
5 high 12 med 7 low COSOSOX
Sanity
36 tools · footprint 47
1 critical 5 high 12 med 18 low
Tray.ai
22 tools · footprint 47
1 critical 5 high 7 med 9 low
Relativity
20 tools · footprint 46
1 critical 6 high 8 med 5 low COSOSOX
Amplitude
43 tools · footprint 44
6 high 16 med 21 low
Mem
23 tools · footprint 44
5 high 8 med 10 low
Microsoft SharePoint (Work IQ)
23 tools · footprint 44
1 critical 5 high 13 med 4 low
PagerDuty
25 tools · footprint 44
6 high 18 med 1 low
Zoho Desk
25 tools · footprint 44
1 critical 8 high 11 med 5 low
Coralogix
21 tools · footprint 43
5 high 13 med 3 low
Sentry
25 tools · footprint 43
3 high 14 med 8 low
Clarify
25 tools · footprint 42
3 high 15 med 7 low
Microsoft 365
23 tools · footprint 41
8 high 14 med 1 low
Paytm for Business
24 tools · footprint 41
2 critical 7 high 5 med 10 low COSOPCI+1 more
‹ PrevPage 3 of 25Next ›
MongoDBDocs ↗
2 critical 7 high 12 med 4 low · 25 tools · 6 SoD-flagged
regimes APPICCPAGDPRISO_27001LGPDNIST_CSFPIPEDAPIPLPOPIASOC2UK_GDPR

Tools needing tighter control (9 of 25)

mongodb.drop-database critical conf mediumhuman approval
Permanently deletes an entire database and every collection it holds, an irreversible loss of all stored records.
mongodb.drop-collection critical conf mediumhuman approval
Permanently deletes a collection and all of its documents, destroying customer data with no undo.
mongodb.atlas-create-db-user high conf mediumhuman approval
Creates an Atlas database user, provisioning new credentials and access to cluster data without a second approver.
mongodb.atlas-create-access-list high conf mediumhuman approval
Opens an Atlas cluster to additional IP or CIDR ranges, widening the network attack surface that can reach the database.
mongodb.atlas-connect-cluster high conf mediumhuman approval
Connects to an Atlas cluster and, when no connection string is set, mints a temporary database user with a random password.
mongodb.delete-many high conf mediumhuman approval
Removes every document matching a filter in one call, capable of wiping large swaths of a collection at once.
mongodb.update-many high conf mediumOBO
Modifies every document matching a filter in a single call, rewriting business data across a collection at scale.
mongodb.export high conf mediumOBO
Saves query or aggregation results as a JSON file on the MCP host, a channel for exfiltrating collection data.
mongodb.atlas-streams-teardown high conf mediumOBO
Deletes an Atlas Stream Processing workspace, processor, or connection, tearing down live data pipelines.
All other tools (16)
mongodb.aggregate medium conf mediumaudit
Runs an arbitrary aggregation pipeline over a collection, capable of reading and transforming sensitive data at scale.
mongodb.atlas-create-cluster medium conf mediumaudit
Provisions a dedicated M10-M80 Atlas cluster with autoscaling enabled, incurring ongoing compute and storage costs.
mongodb.atlas-create-free-cluster low conf mediumallow
Creates a free-tier Atlas cluster for development, adding a new deployment to the project.
mongodb.atlas-create-project low conf mediumallow
Creates a new Atlas project, a container that scopes clusters, users, and access rules.
mongodb.atlas-list-db-users low conf mediumallow
Enumerates all Atlas database users, exposing the roster of principals with credentialed access to the cluster.
mongodb.atlas-local-delete-deployment medium conf mediumaudit
Deletes a local Atlas deployment, discarding its data and configuration.
mongodb.atlas-pause-resume-cluster medium conf mediumaudit
Pauses or resumes a dedicated Atlas cluster, making it unavailable for connections or restoring service.
mongodb.atlas-upgrade-cluster medium conf mediumaudit
Upgrades an Atlas cluster tier (Free to Flex, Flex to M10, and similar), changing capacity and billing.
mongodb.create-collection low conf mediumallow
Creates a new empty collection in a database, establishing a new store for documents.
mongodb.create-index medium conf mediumaudit
Builds an index on a collection, altering query performance and supporting vector-search workloads.
mongodb.drop-index medium conf mediumaudit
Drops an index from a collection, degrading query performance until the index is rebuilt.
mongodb.find medium conf mediumaudit
Runs an arbitrary query against a collection, returning matching documents that may include personal or sensitive data.
mongodb.insert-many medium conf mediumaudit
Adds documents to a collection in bulk, optionally generating vector embeddings from the supplied text.
mongodb.mongodb-logs medium conf mediumaudit
Returns recent mongod server log events, which can surface query contents, connection details, and operational internals.
mongodb.rename-collection medium conf mediumaudit
Renames a collection, which can silently break application code and queries that reference the old name.
mongodb.update-one medium conf mediumaudit
Modifies a single document in a collection, changing stored business or customer data.