MCP compliance catalog

Every MCP tool in the SCOPE compliance index, grouped by server — risk posture, regulatory exposure, and the tools that warrant tighter governance.

387MCP servers

5470tools

36 tools · footprint 48

12 high 11 med 13 low COSOGLBA+1 more

58 tools · footprint 47

4 high 15 med 39 low COSOSOX

24 tools · footprint 47

5 high 12 med 7 low COSOSOX

36 tools · footprint 47

1 critical 5 high 12 med 18 low

22 tools · footprint 47

1 critical 5 high 7 med 9 low

20 tools · footprint 46

1 critical 6 high 8 med 5 low COSOSOX

43 tools · footprint 44

6 high 16 med 21 low

23 tools · footprint 44

5 high 8 med 10 low

Microsoft SharePoint (Work IQ)

23 tools · footprint 44

1 critical 5 high 13 med 4 low

25 tools · footprint 44

6 high 18 med 1 low

25 tools · footprint 44

1 critical 8 high 11 med 5 low

21 tools · footprint 43

5 high 13 med 3 low

25 tools · footprint 43

3 high 14 med 8 low

25 tools · footprint 42

3 high 15 med 7 low

23 tools · footprint 41

8 high 14 med 1 low

Paytm for Business

24 tools · footprint 41

2 critical 7 high 5 med 10 low COSOPCI+1 more

NPI RegistryDocs ↗

3 low · 3 tools · 0 SoD-flagged

regimes none

Tools needing tighter control (0 of 3)

None — every tool is low-risk, high-confidence, and outside PCI/HIPAA payload scope.

All other tools (3)

npi-registry.npi_lookup low conf highallow

Returns one provider's full NPPES record — legal name, practice address, taxonomy, and enumeration status — from CMS's publicly disclosable provider registry.

npi-registry.npi_search low conf highallow

Enumerates healthcare providers by name, location, specialty, or organization, returning batches of public NPPES directory records for provider-network research.

npi-registry.npi_validate low conf highallow

Checks an NPI's format and Luhn check digit locally, catching typos before a registry call; no data leaves the client and nothing is modified.