MCP compliance catalog

Every MCP tool in the SCOPE compliance index, grouped by server — risk posture, regulatory exposure, and the tools that warrant tighter governance.
303MCP servers
4476tools
Reset 303 of 303 servers
Microsoft 365
23 tools · footprint 41
8 high 14 med 1 low
Paytm for Business
24 tools · footprint 41
2 critical 7 high 5 med 10 low COSOPCI+1 more
Vercel
20 tools · footprint 41
2 critical 3 high 2 med 13 low COSOSOX
Cloudinary
23 tools · footprint 40
1 critical 4 high 15 med 3 low
Freshdesk
24 tools · footprint 40
6 high 14 med 4 low
Netlify
23 tools · footprint 40
2 critical 4 high 4 med 13 low
Zapier
14 tools · footprint 39
1 critical 3 high 3 med 7 low COSOPCI+1 more
Freshservice
23 tools · footprint 38
6 high 15 med 2 low
GitHub
83 tools · footprint 38
1 high 20 med 62 low COSOSOX
Bright Data
25 tools · footprint 37
5 high 17 med 3 low
Snowflake
6 tools · footprint 37
2 critical 3 high 1 med COSOSOX
Brex
25 tools · footprint 36
3 high 17 med 5 low COSOGLBA+2 more
Microsoft Dataverse
15 tools · footprint 35
1 critical 3 high 8 med 3 low
Calendly
35 tools · footprint 34
2 high 13 med 20 low
Lovable
25 tools · footprint 34
1 critical 2 high 9 med 13 low
Smartsheet
42 tools · footprint 34
2 high 9 med 31 low COSOSOX
‹ PrevPage 3 of 19Next ›
Stytch
1 critical 2 high 2 med 2 low · 7 tools · 3 SoD-flagged
regimes APPICCPAGDPRISO_27001LGPDNIST_CSFNY_DFS_500PIPEDAPIPLPOPIASOC2UK_GDPR

Tools needing tighter control (3 of 7)

stytch.updateConsumerSDKConfig critical conf highhuman approval
Reconfigures consumer SDK settings, enabled auth products, and permissions; misconfiguration can disable MFA or lock users out at scale.
stytch.createRedirectURLs high conf highhuman approval
Registers new authentication callback URLs; an attacker-controlled URL here enables credential interception.
stytch.createPublicToken high conf mediumhuman approval
Issues a new public token for a project; expands the set of identifiers that can initiate auth flows.
All other tools (4)
stytch.createProject medium conf highaudit
Creates a new Stytch project; expands the workspace's authentication footprint.
stytch.getAllPublicTokens medium conf mediumaudit
Reads public tokens used by client applications; intended public credentials but still a credential.
stytch.getAllRedirectURLs low conf highallow
Reads registered redirect URLs for the project.
stytch.listProjects low conf highallow
Lists Stytch projects in the workspace.