MCP compliance catalog

Every MCP tool in the SCOPE compliance index, grouped by server — risk posture, regulatory exposure, and the tools that warrant tighter governance.
387MCP servers
5470tools
Reset 387 of 387 servers
Gusto
36 tools · footprint 48
12 high 11 med 13 low COSOGLBA+1 more
ActiveCampaign
58 tools · footprint 47
4 high 15 med 39 low COSOSOX
GitHub
24 tools · footprint 47
5 high 12 med 7 low COSOSOX
Sanity
36 tools · footprint 47
1 critical 5 high 12 med 18 low
Tray.ai
22 tools · footprint 47
1 critical 5 high 7 med 9 low
Relativity
20 tools · footprint 46
1 critical 6 high 8 med 5 low COSOSOX
Amplitude
43 tools · footprint 44
6 high 16 med 21 low
Mem
23 tools · footprint 44
5 high 8 med 10 low
Microsoft SharePoint (Work IQ)
23 tools · footprint 44
1 critical 5 high 13 med 4 low
PagerDuty
25 tools · footprint 44
6 high 18 med 1 low
Zoho Desk
25 tools · footprint 44
1 critical 8 high 11 med 5 low
Coralogix
21 tools · footprint 43
5 high 13 med 3 low
Sentry
25 tools · footprint 43
3 high 14 med 8 low
Clarify
25 tools · footprint 42
3 high 15 med 7 low
Microsoft 365
23 tools · footprint 41
8 high 14 med 1 low
Paytm for Business
24 tools · footprint 41
2 critical 7 high 5 med 10 low COSOPCI+1 more
‹ PrevPage 3 of 25Next ›
RelativityDocs ↗
1 critical 6 high 8 med 5 low · 20 tools · 3 SoD-flagged
regimes APPICCPACOSOGDPRISO_27001LGPDNIST_CSFPIPEDAPIPLPOPIASOC2SOXUK_GDPR

Tools needing tighter control (8 of 20)

relativity.relone_add_user_to_group critical conf mediumhuman approval
Adds a user to a Relativity security group, inheriting every instance and workspace permission that group carries — including system-admin rights over case evidence.
relativity.relone_remove_user_from_group high conf mediumOBO
Strips a user's group membership, immediately cutting their access to every workspace the group governed and potentially stalling an active review team.
relativity.relone_add_workspace_group high conf mediumhuman approval
Opens an entire eDiscovery workspace to a group, exposing the case document set — often privileged or PII-laden custodian data — to everyone in it without a separate access review.
relativity.relone_remove_workspace_group high conf mediumOBO
Revokes a group's workspace access, locking out reviewers mid-matter and breaking litigation deadlines if applied to the wrong group.
relativity.relone_edit_workspace high conf mediumOBO
Reassigns a workspace to a different matter or flips its status, moving a live evidence set under a different engagement and muddying chain-of-custody records.
relativity.relone_usage_download_report high conf mediumOBO
Pulls the entire usage report out as a CSV, moving instance-wide consumption and matter-level activity data outside Relativity's access controls in one file.
relativity.relone_usage_delete_report high conf mediumhuman approval
Destroys a generated usage report, removing the consumption record a customer or auditor would use to verify RelativityOne invoicing.
relativity.relone_usage_get_report_details medium conf lowaudit
Exposes row-level consumption detail per workspace and matter, revealing case sizes and activity patterns that are otherwise restricted to admins.
All other tools (12)
relativity.relone_create_client medium conf mediumaudit
Registers a new client entity that matters and workspaces will hang off, affecting how case data and billing roll up.
relativity.relone_create_matter medium conf mediumaudit
Creates a matter container under a client, establishing where subsequent case workspaces and evidence will be organized.
relativity.relone_create_workspace medium conf mediumaudit
Provisions a new case workspace that inherits the template's security groups and field layout, consuming instance storage and licensing entitlements.
relativity.relone_edit_client medium conf mediumaudit
Changes client name, number, or status; setting a client inactive cascades to every matter and workspace beneath it and can interrupt active reviews.
relativity.relone_edit_matter medium conf mediumaudit
Alters matter properties such as its owning client or status, which changes how case workspaces are attributed and can deactivate an in-flight matter.
relativity.relone_get_workspace low conf mediumallow
Returns a workspace's configuration, owning matter, and status — context an agent needs before acting, with no data modification.
relativity.relone_list_clients low conf mediumallow
Reveals the firm's full client roster, which is itself confidential engagement information at most legal service providers.
relativity.relone_list_matters low conf mediumallow
Lists every legal matter on the instance, disclosing which disputes and investigations the organization is running.
relativity.relone_list_users medium conf mediumaudit
Returns the full user directory with account details, handing over names and contact data for every reviewer, attorney, and admin on the instance in one call.
relativity.relone_list_workspace_groups low conf mediumallow
Enumerates which groups hold access to a workspace; read-only but maps the permission surface an attacker would target.
relativity.relone_list_workspaces low conf mediumallow
Enumerates every case workspace on the instance, outlining the organization's active review footprint.
relativity.relone_usage_generate_report medium conf mediumaudit
Compiles a usage report over instance activity and consumption metrics, the same data that drives RelativityOne billing reconciliation.