MCP compliance catalog

Every MCP tool in the SCOPE compliance index, grouped by server — risk posture, regulatory exposure, and the tools that warrant tighter governance.

387MCP servers

5470tools

36 tools · footprint 48

12 high 11 med 13 low COSOGLBA+1 more

58 tools · footprint 47

4 high 15 med 39 low COSOSOX

24 tools · footprint 47

5 high 12 med 7 low COSOSOX

36 tools · footprint 47

1 critical 5 high 12 med 18 low

22 tools · footprint 47

1 critical 5 high 7 med 9 low

20 tools · footprint 46

1 critical 6 high 8 med 5 low COSOSOX

43 tools · footprint 44

6 high 16 med 21 low

23 tools · footprint 44

5 high 8 med 10 low

Microsoft SharePoint (Work IQ)

23 tools · footprint 44

1 critical 5 high 13 med 4 low

25 tools · footprint 44

6 high 18 med 1 low

25 tools · footprint 44

1 critical 8 high 11 med 5 low

21 tools · footprint 43

5 high 13 med 3 low

25 tools · footprint 43

3 high 14 med 8 low

25 tools · footprint 42

3 high 15 med 7 low

23 tools · footprint 41

8 high 14 med 1 low

Paytm for Business

24 tools · footprint 41

2 critical 7 high 5 med 10 low COSOPCI+1 more

YugabyteDBDocs ↗

2 critical 1 low · 3 tools · 1 SoD-flagged

regimes APPICCPAGDPRISO_27001LGPDPIPEDAPIPLPOPIASOC2UK_GDPR

Tools needing tighter control (2 of 3)

yugabytedb.run_write_query critical conf highhuman approval

Mutates or destroys production data — a single TRUNCATE or DDL statement can wipe a table the connection role owns, with no undo beyond a cluster backup.

yugabytedb.run_read_only_query critical conf highhuman approval

Reads arbitrary SQL results from the cluster, so one unbounded SELECT can pull every row of customer data the connection role can reach into the agent's context.

All other tools (1)

yugabytedb.summarize_database low conf highallow

Returns the table, column, and row-count inventory for a schema, exposing the data model an attacker would need to target specific tables.