MCP compliance catalog

Every MCP tool in the SCOPE compliance index, grouped by server — risk posture, regulatory exposure, and the tools that warrant tighter governance.
387MCP servers
5470tools
Reset 387 of 387 servers
Gusto
36 tools · footprint 48
12 high 11 med 13 low COSOGLBA+1 more
ActiveCampaign
58 tools · footprint 47
4 high 15 med 39 low COSOSOX
GitHub
24 tools · footprint 47
5 high 12 med 7 low COSOSOX
Sanity
36 tools · footprint 47
1 critical 5 high 12 med 18 low
Tray.ai
22 tools · footprint 47
1 critical 5 high 7 med 9 low
Relativity
20 tools · footprint 46
1 critical 6 high 8 med 5 low COSOSOX
Amplitude
43 tools · footprint 44
6 high 16 med 21 low
Mem
23 tools · footprint 44
5 high 8 med 10 low
Microsoft SharePoint (Work IQ)
23 tools · footprint 44
1 critical 5 high 13 med 4 low
PagerDuty
25 tools · footprint 44
6 high 18 med 1 low
Zoho Desk
25 tools · footprint 44
1 critical 8 high 11 med 5 low
Coralogix
21 tools · footprint 43
5 high 13 med 3 low
Sentry
25 tools · footprint 43
3 high 14 med 8 low
Clarify
25 tools · footprint 42
3 high 15 med 7 low
Microsoft 365
23 tools · footprint 41
8 high 14 med 1 low
Paytm for Business
24 tools · footprint 41
2 critical 7 high 5 med 10 low COSOPCI+1 more
‹ PrevPage 3 of 25Next ›
Tray.aiDocs ↗
1 critical 5 high 7 med 9 low · 22 tools · 5 SoD-flagged
regimes APPICCPAGDPRISO_27001LGPDNIST_CSFPIPEDAPIPLPOPIASOC2UK_GDPR

Tools needing tighter control (7 of 22)

tray-ai.trigger_workflow critical conf mediumhuman approval
Fires a production workflow that executes every connector step against live systems — Slack posts, CRM writes and third-party webhooks all land, with no dry-run and no undo.
tray-ai.create_workflow high conf mediumhuman approval
Creates a workflow and, for agent-tool triggers, auto-registers a callable API operation under API Management — new automation reaches production without a manual review step.
tray-ai.import_workflow high conf lowhuman approval
Loads a whole workflow definition into the workspace in one call, introducing integration logic and connector wiring that never passed through the normal build-and-review path.
tray-ai.update_workflow_steps high conf mediumOBO
Overwrites step properties wholesale and can swap the operation or the auth_id a step runs under, silently repointing production automation at a different system or credential.
tray-ai.create_auth_collection high conf mediumhuman approval
Starts a new credential grant for a third-party service, expanding which external systems workspace automation can reach once the user completes sign-in.
tray-ai.call_connector high conf mediumOBO
Executes an operation directly against a connected third-party system using stored workspace credentials, reaching real records outside Tray even though the default gate favours schema-discovery calls.
tray-ai.update_workflow_metadata medium conf mediumhuman approval
Flips a workflow's enabled state, name or tags without creating a new version, so an automation can be switched on or off with no version-history trace.
All other tools (15)
tray-ai.add_workflow_steps medium conf mediumaudit
Adds steps to an existing workflow in a batch, changing what the automation does on its next run; reversible but live once the workflow fires.
tray-ai.check_auth_completion low conf mediumallow
Polls whether a pending authentication has been completed; returns status only, with no credential material exposed.
tray-ai.create_project low conf mediumallow
Creates an empty project container for workflows; no data or automation runs until workflows are added to it.
tray-ai.get_workflow low conf mediumallow
Reads a workflow's structure and step configuration, exposing how an integration is wired but not the records flowing through it.
tray-ai.get_workflow_execution medium conf mediumaudit
Opens a specific execution run and its step-level results, giving visibility into what the automation processed and where it failed.
tray-ai.get_workflow_step_detail medium conf mediumaudit
Exposes the literal input and output payload of a workflow step, which routinely contains customer records pulled from the connected CRM, support or HR system.
tray-ai.list_authentications medium conf mediumaudit
Enumerates every stored authentication in the workspace, mapping which external systems are connected and which auth ids a workflow step can be pointed at.
tray-ai.list_connector_operations low conf mediumallow
Returns a connector's operations and their input/output schemas; catalogue metadata that carries no tenant data.
tray-ai.list_connectors low conf mediumallow
Searches the catalogue of available connectors; returns product metadata only, with no workspace or customer data involved.
tray-ai.list_projects low conf mediumallow
Enumerates projects in the workspace, revealing the names and scope of the automation estate to whoever holds the token.
tray-ai.list_service_environments low conf mediumallow
Lists the auth environments available for a service; configuration metadata used to set up a credential, not the credential itself.
tray-ai.list_workflow_executions low conf mediumallow
Lists recent execution summaries for a workflow — run status and timing only, without the payloads those runs carried.
tray-ai.remove_workflow_step medium conf mediumaudit
Deletes a step from a live workflow, which can quietly drop a validation, notification or logging stage from an integration that downstream teams depend on.
tray-ai.update_workflow_structure medium conf mediumaudit
Reorders steps or moves them between error and success branches, changing execution order and failure handling for an integration already running in production.
tray-ai.validate_workflow low conf mediumallow
Runs a read-only structural audit of a workflow and returns findings; no state changes and no data leaves the workspace.