MCP compliance catalog

Every MCP tool in the SCOPE compliance index, grouped by server — risk posture, regulatory exposure, and the tools that warrant tighter governance.
387MCP servers
5470tools
Reset 387 of 387 servers
Gusto
36 tools · footprint 48
12 high 11 med 13 low COSOGLBA+1 more
ActiveCampaign
58 tools · footprint 47
4 high 15 med 39 low COSOSOX
GitHub
24 tools · footprint 47
5 high 12 med 7 low COSOSOX
Sanity
36 tools · footprint 47
1 critical 5 high 12 med 18 low
Tray.ai
22 tools · footprint 47
1 critical 5 high 7 med 9 low
Relativity
20 tools · footprint 46
1 critical 6 high 8 med 5 low COSOSOX
Amplitude
43 tools · footprint 44
6 high 16 med 21 low
Mem
23 tools · footprint 44
5 high 8 med 10 low
Microsoft SharePoint (Work IQ)
23 tools · footprint 44
1 critical 5 high 13 med 4 low
PagerDuty
25 tools · footprint 44
6 high 18 med 1 low
Zoho Desk
25 tools · footprint 44
1 critical 8 high 11 med 5 low
Coralogix
21 tools · footprint 43
5 high 13 med 3 low
Sentry
25 tools · footprint 43
3 high 14 med 8 low
Clarify
25 tools · footprint 42
3 high 15 med 7 low
Microsoft 365
23 tools · footprint 41
8 high 14 med 1 low
Paytm for Business
24 tools · footprint 41
2 critical 7 high 5 med 10 low COSOPCI+1 more
‹ PrevPage 3 of 25Next ›
Vibe ProspectingDocs ↗
1 critical 4 high 1 med 6 low · 12 tools · 2 SoD-flagged
regimes APPICCPAGDPRISO_27001LGPDPIPEDAPIPLPOPIASOC2UK_GDPR

Tools needing tighter control (5 of 12)

vibeprospecting.export-to-csv critical conf highhuman approval
Writes an entire prospect or company dataset — including contact emails, phone numbers and social profiles — out to a CSV that leaves the platform's access controls, and burns purchased export credits.
vibeprospecting.fetch-entities high conf mediumhuman approval
Pulls filtered lists of company and contact records from a 800M-person data pool, producing bulk third-party personal data inside the session with no data-subject notice.
vibeprospecting.get-dataset high conf mediumhuman approval
Reads back a stored dataset whose rows may hold contact-level personal data, re-exposing an earlier prospecting result to anyone holding the dataset identifier.
vibeprospecting.enrich-prospects high conf highOBO
Appends direct contact details — work and personal email, phone numbers, social profiles — to named individuals, importing third-party personal data into CRM or ATS records.
vibeprospecting.match-prospects high conf highOBO
Resolves partial identifiers to a single identified person in the vendor's contact graph, linking an internal record to an external profile of that individual.
All other tools (7)
vibeprospecting.autocomplete low conf mediumallow
Resolves filter vocabulary such as industry codes and locations; read-only lookup with no record-level data returned.
vibeprospecting.enrich-business low conf highallow
Adds firmographic, technographic and funding attributes to a company record; company-level data only, and any wrong match propagates into CRM segmentation.
vibeprospecting.estimate-cost low conf mediumallow
Prices a planned query in credits before it runs; no credits are consumed and no records are returned.
vibeprospecting.fetch-businesses-events low conf highallow
Returns funding, hiring and growth events for companies, feeding pipeline prioritisation from company-level public signals.
vibeprospecting.fetch-entities-statistics low conf mediumallow
Returns aggregate counts for a filter set, sizing a market segment without surfacing individual records.
vibeprospecting.fetch-prospects-events medium conf mediumaudit
Surfaces behavioural and job-change signals attached to named individuals, a profiling read that data subjects have not consented to within the buyer's systems.
vibeprospecting.match-business low conf highallow
Maps a name or domain to the vendor's canonical company id; a read-only resolution step that every downstream enrichment depends on.