MCP compliance catalog

Every MCP tool in the SCOPE compliance index, grouped by server — risk posture, regulatory exposure, and the tools that warrant tighter governance.
387MCP servers
5470tools
Reset 387 of 387 servers
Gusto
36 tools · footprint 48
12 high 11 med 13 low COSOGLBA+1 more
ActiveCampaign
58 tools · footprint 47
4 high 15 med 39 low COSOSOX
GitHub
24 tools · footprint 47
5 high 12 med 7 low COSOSOX
Sanity
36 tools · footprint 47
1 critical 5 high 12 med 18 low
Tray.ai
22 tools · footprint 47
1 critical 5 high 7 med 9 low
Relativity
20 tools · footprint 46
1 critical 6 high 8 med 5 low COSOSOX
Amplitude
43 tools · footprint 44
6 high 16 med 21 low
Mem
23 tools · footprint 44
5 high 8 med 10 low
Microsoft SharePoint (Work IQ)
23 tools · footprint 44
1 critical 5 high 13 med 4 low
PagerDuty
25 tools · footprint 44
6 high 18 med 1 low
Zoho Desk
25 tools · footprint 44
1 critical 8 high 11 med 5 low
Coralogix
21 tools · footprint 43
5 high 13 med 3 low
Sentry
25 tools · footprint 43
3 high 14 med 8 low
Clarify
25 tools · footprint 42
3 high 15 med 7 low
Microsoft 365
23 tools · footprint 41
8 high 14 med 1 low
Paytm for Business
24 tools · footprint 41
2 critical 7 high 5 med 10 low COSOPCI+1 more
‹ PrevPage 3 of 25Next ›
PigmentDocs ↗
9 high 14 med 2 low · 25 tools · 4 SoD-flagged
regimes APPICCPACOSOGDPRISO_27001LGPDPIPEDAPIPLPOPIASOC2SOXUK_GDPR

Tools needing tighter control (9 of 25)

pigment.update_metric high conf mediumhuman approval
Rewrites the formula or structure of a live planning metric, changing every downstream figure that depends on it without any review step.
pigment.set_metric_input high conf mediumOBO
Writes a value straight into a plan input cell, altering the budget and forecast figures leadership reports against.
pigment.create_metric_copy_config high conf mediumOBO
Saves a standing copy rule that overwrites one metric's values with another's, for example pushing actuals over a forecast baseline.
pigment.calendar_remove_time_dimension high conf mediumhuman approval
Removes a calendar-derived time dimension, discarding the granularity every metric and View built on it depends on.
pigment.batch_share_blocks high conf mediumOBO
Shares many metrics and blocks with a Library or another Application in a single call, widening who can read the underlying planning data.
pigment.update_view high conf mediumOBO
Flips a View's sharing status alongside its name and template, which can expose a private analysis to everyone with Application access.
pigment.create_frame high conf mediumOBO
Deploys custom JavaScript as a full-page Frame in the workspace, running unreviewed code against the planning data bound to it.
pigment.update_frame high conf mediumhuman approval
Replaces a live Frame's code, bindings, and data sources in one push, shipping a production change with no review gate.
pigment.delete_views high conf mediumhuman approval
Deletes one or more Views outright, destroying saved reporting configurations that boards and their consumers depend on.
All other tools (16)
pigment.add_list_items medium conf mediumaudit
Adds items to a dimension list, which for employee or customer dimensions means writing personal identifiers into the model.
pigment.calendar_add_time_dimension medium conf mediumaudit
Adds a calendar-derived time dimension, expanding the granularity at which metrics can be modeled and reported.
pigment.calendar_create medium conf mediumaudit
Creates the calendar an Application's periods derive from, fixing fiscal boundaries for every time-based metric built on it.
pigment.calendar_expand medium conf mediumaudit
Extends calendar coverage so metrics hold periods beyond the current range, growing model size and computation cost.
pigment.create_cycle medium conf mediumaudit
Establishes a planning cycle across a set of metrics, defining how forecast iterations get captured and compared.
pigment.create_list low conf mediumallow
Creates a new dimension list, adding a structural axis that metrics and Views can then be built on.
pigment.create_metric medium conf highaudit
Adds a new calculated metric to the planning model, introducing figures that feed boards and reported totals.
pigment.enable_application_library medium conf mediumaudit
Activates a Library inside a consuming Application, making that Library's shared blocks and their data usable there.
pigment.fetch_metric_data medium conf mediumaudit
Reads the stored values of a named metric, exposing the figures behind a budget, forecast, or actuals series.
pigment.get_list_items medium conf mediumaudit
Returns every item of a dimension list, which in workforce models is a full roster of named employees and their identifiers.
pigment.query_data medium conf highaudit
Pulls metric values across arbitrary breakdowns and filters from a plain-language prompt, which can surface compensation, headcount, and customer figures in volume.
pigment.search low conf highallow
Scans an entire Application's block metadata — names, data types, dimensions — returning model structure without the underlying values.
pigment.update_cycle medium conf mediumaudit
Adds or drops metrics from an active planning cycle, changing which figures are captured for each forecast iteration.
pigment.update_list_property medium conf mediumaudit
Changes a dimension list property such as the unique-key Employee ID, which can break identity matching everywhere the list is used.
pigment.update_view_aggregations medium conf mediumaudit
Changes what a View's totals compute, so the same underlying metric can present materially different reported numbers.
pigment.write_file medium conf mediumaudit
Authors the JavaScript a Frame will execute, staging arbitrary code for deployment into the workspace.