MCP compliance catalog

Every MCP tool in the SCOPE compliance index, grouped by server — risk posture, regulatory exposure, and the tools that warrant tighter governance.
303MCP servers
4476tools
Reset 303 of 303 servers
Microsoft 365
23 tools · footprint 41
8 high 14 med 1 low
Paytm for Business
24 tools · footprint 41
2 critical 7 high 5 med 10 low COSOPCI+1 more
Vercel
20 tools · footprint 41
2 critical 3 high 2 med 13 low COSOSOX
Cloudinary
23 tools · footprint 40
1 critical 4 high 15 med 3 low
Freshdesk
24 tools · footprint 40
6 high 14 med 4 low
Netlify
23 tools · footprint 40
2 critical 4 high 4 med 13 low
Zapier
14 tools · footprint 39
1 critical 3 high 3 med 7 low COSOPCI+1 more
Freshservice
23 tools · footprint 38
6 high 15 med 2 low
GitHub
83 tools · footprint 38
1 high 20 med 62 low COSOSOX
Bright Data
25 tools · footprint 37
5 high 17 med 3 low
Snowflake
6 tools · footprint 37
2 critical 3 high 1 med COSOSOX
Brex
25 tools · footprint 36
3 high 17 med 5 low COSOGLBA+2 more
Microsoft Dataverse
15 tools · footprint 35
1 critical 3 high 8 med 3 low
Calendly
35 tools · footprint 34
2 high 13 med 20 low
Lovable
25 tools · footprint 34
1 critical 2 high 9 med 13 low
Smartsheet
42 tools · footprint 34
2 high 9 med 31 low COSOSOX
‹ PrevPage 3 of 19Next ›
MongoDBDocs ↗
2 critical 7 high 12 med 4 low · 25 tools · 6 SoD-flagged
regimes APPICCPAGDPRISO_27001LGPDNIST_CSFPIPEDAPIPLPOPIASOC2UK_GDPR

Tools needing tighter control (9 of 25)

mongodb.drop-database critical conf mediumhuman approval
Permanently deletes an entire database and every collection it holds, an irreversible loss of all stored records.
mongodb.drop-collection critical conf mediumhuman approval
Permanently deletes a collection and all of its documents, destroying customer data with no undo.
mongodb.atlas-create-db-user high conf mediumhuman approval
Creates an Atlas database user, provisioning new credentials and access to cluster data without a second approver.
mongodb.atlas-create-access-list high conf mediumhuman approval
Opens an Atlas cluster to additional IP or CIDR ranges, widening the network attack surface that can reach the database.
mongodb.atlas-connect-cluster high conf mediumhuman approval
Connects to an Atlas cluster and, when no connection string is set, mints a temporary database user with a random password.
mongodb.delete-many high conf mediumhuman approval
Removes every document matching a filter in one call, capable of wiping large swaths of a collection at once.
mongodb.update-many high conf mediumOBO
Modifies every document matching a filter in a single call, rewriting business data across a collection at scale.
mongodb.export high conf mediumOBO
Saves query or aggregation results as a JSON file on the MCP host, a channel for exfiltrating collection data.
mongodb.atlas-streams-teardown high conf mediumOBO
Deletes an Atlas Stream Processing workspace, processor, or connection, tearing down live data pipelines.
All other tools (16)
mongodb.aggregate medium conf mediumaudit
Runs an arbitrary aggregation pipeline over a collection, capable of reading and transforming sensitive data at scale.
mongodb.atlas-create-cluster medium conf mediumaudit
Provisions a dedicated M10-M80 Atlas cluster with autoscaling enabled, incurring ongoing compute and storage costs.
mongodb.atlas-create-free-cluster low conf mediumallow
Creates a free-tier Atlas cluster for development, adding a new deployment to the project.
mongodb.atlas-create-project low conf mediumallow
Creates a new Atlas project, a container that scopes clusters, users, and access rules.
mongodb.atlas-list-db-users low conf mediumallow
Enumerates all Atlas database users, exposing the roster of principals with credentialed access to the cluster.
mongodb.atlas-local-delete-deployment medium conf mediumaudit
Deletes a local Atlas deployment, discarding its data and configuration.
mongodb.atlas-pause-resume-cluster medium conf mediumaudit
Pauses or resumes a dedicated Atlas cluster, making it unavailable for connections or restoring service.
mongodb.atlas-upgrade-cluster medium conf mediumaudit
Upgrades an Atlas cluster tier (Free to Flex, Flex to M10, and similar), changing capacity and billing.
mongodb.create-collection low conf mediumallow
Creates a new empty collection in a database, establishing a new store for documents.
mongodb.create-index medium conf mediumaudit
Builds an index on a collection, altering query performance and supporting vector-search workloads.
mongodb.drop-index medium conf mediumaudit
Drops an index from a collection, degrading query performance until the index is rebuilt.
mongodb.find medium conf mediumaudit
Runs an arbitrary query against a collection, returning matching documents that may include personal or sensitive data.
mongodb.insert-many medium conf mediumaudit
Adds documents to a collection in bulk, optionally generating vector embeddings from the supplied text.
mongodb.mongodb-logs medium conf mediumaudit
Returns recent mongod server log events, which can surface query contents, connection details, and operational internals.
mongodb.rename-collection medium conf mediumaudit
Renames a collection, which can silently break application code and queries that reference the old name.
mongodb.update-one medium conf mediumaudit
Modifies a single document in a collection, changing stored business or customer data.