MCP compliance catalog

Every MCP tool in the SCOPE compliance index, grouped by server — risk posture, regulatory exposure, and the tools that warrant tighter governance.
80MCP servers
1695tools
Reset 80 of 80 servers
Aiwyn Tax
10 tools · footprint 22
4 high 1 med 5 low COSOGLBA+1 more
Outreach
17 tools · footprint 22
2 high 6 med 9 low COSOSOX
PlanetScale
16 tools · footprint 22
1 critical 1 high 14 low COSOSOX
Square
3 tools · footprint 22
1 critical 2 low COSOGLBA+3 more
Airtable
19 tools · footprint 21
11 med 8 low
Klaviyo
29 tools · footprint 21
2 high 7 med 20 low
Mercury
13 tools · footprint 21
3 high 8 med 2 low COSOGLBA+2 more
Zoom for Claude
13 tools · footprint 20
3 high 3 med 7 low HIPAA
monday.com
17 tools · footprint 19
1 high 4 med 12 low
10x Genomics Cloud
27 tools · footprint 18
1 high 5 med 21 low HIPAA
Base44
7 tools · footprint 18
2 high 1 med 4 low
HubSpot
12 tools · footprint 18
1 high 3 med 8 low
Intercom
13 tools · footprint 18
8 med 5 low
Mixpanel
23 tools · footprint 18
1 high 6 med 16 low
Notion
18 tools · footprint 18
8 med 10 low
Slack
7 tools · footprint 18
2 high 4 med 1 low
‹ PrevPage 3 of 5Next ›
PostHogDocs ↗
6 high 22 med 8 low · 36 tools · 8 SoD-flagged
regimes APPICCPAGDPRISO_27001LGPDNIST_CSFPIPEDAPIPLPOPIASOC2UK_GDPR

Tools needing tighter control (10 of 36)

posthog.update-feature-flag high conf highhuman approval
Changes who sees a feature in production; can ship or break experiences without code review.
posthog.delete-feature-flag high conf highhuman approval
Removes a flag; dependent code may fail open or closed unexpectedly.
posthog.experiment-launch high conf highhuman approval
Activates an experiment in production; immediately affects user experience.
posthog.experiment-ship-variant high conf highhuman approval
Promotes a variant to all traffic without further review.
posthog.execute-sql high conf highOBO
Runs arbitrary HogQL/SQL across event and person data; can return PII at scale.
posthog.query-run high conf highOBO
Executes saved or ad-hoc queries that may return identified user data.
posthog.scheduled-changes-create medium conf highhuman approval
Schedules a future flag change without re-review at execution time.
posthog.experiment-delete medium conf highhuman approval
Removes experiment configuration and historical results from the UI.
posthog.alert-delete medium conf highhuman approval
Removes a monitoring alert; can blind operators to incidents.
posthog.survey-delete medium conf highhuman approval
Deletes a survey and its responses; may destroy collected feedback.
All other tools (26)
posthog.action-create low conf highallow
Defines a new tracked action for analytics; no production user impact.
posthog.action-delete medium conf highaudit
Removes a tracked action; downstream insights and dashboards may break silently.
posthog.action-update low conf highallow
Updates the definition of an existing tracked action.
posthog.alert-create low conf highallow
Adds a metric alert; no immediate user impact.
posthog.alert-update medium conf highaudit
Modifies thresholds or recipients on a monitoring alert.
posthog.annotation-create low conf highallow
Adds an annotation to time-series charts.
posthog.annotation-delete low conf highallow
Removes a chart annotation.
posthog.cohorts-add-persons-to-static-cohort-partial-update medium conf highaudit
Adds identified persons to a static cohort used for targeting and analysis.
posthog.cohorts-create medium conf highaudit
Defines a user cohort that may target campaigns or feature rollouts.
posthog.cohorts-rm-person-from-static-cohort-partial-update low conf highallow
Removes a person from a static cohort definition.
posthog.create-feature-flag medium conf highaudit
Creates a new feature flag that can gate production behavior on rollout.
posthog.dashboard-create low conf highallow
Creates a new analytics dashboard.
posthog.dashboard-delete medium conf highaudit
Removes a shared dashboard; may disrupt downstream reporting.
posthog.dashboard-update low conf highallow
Modifies dashboard layout or filters.
posthog.experiment-create medium conf highaudit
Starts a new A/B experiment that splits production traffic.
posthog.experiment-end medium conf highaudit
Concludes an experiment and locks the result of record.
posthog.experiment-pause medium conf highaudit
Halts an active experiment mid-run; can invalidate ongoing measurement.
posthog.experiment-resume medium conf highaudit
Restarts a paused experiment, reapplying traffic split.
posthog.experiment-update medium conf highaudit
Modifies an experiment's targeting or variants while running.
posthog.feature-flags-copy-flags-create medium conf highaudit
Copies flags between projects/environments; can replicate untested rollout state.
posthog.query-llm-trace medium conf mediumaudit
Returns LLM trace details including prompts that may contain customer or PII content.
posthog.query-llm-traces-list medium conf mediumaudit
Bulk-lists LLM traces; potential PII exposure depending on prompt content.
posthog.query-logs medium conf highaudit
Searches application logs that can include user identifiers and request payloads.
posthog.scheduled-changes-delete medium conf highaudit
Cancels a scheduled flag change; can leave intended rollout undone.
posthog.survey-create medium conf highaudit
Publishes a survey targeted to identified users; collects new PII responses.
posthog.survey-update medium conf highaudit
Edits a live survey; can change consent text or targeting after launch.