MCP compliance catalog

Every MCP tool in the SCOPE compliance index, grouped by server — risk posture, regulatory exposure, and the tools that warrant tighter governance.
80MCP servers
1695tools
Reset 80 of 80 servers
Canva
32 tools · footprint 17
7 med 25 low
Granola
6 tools · footprint 17
3 high 1 med 2 low
Google Drive
7 tools · footprint 16
2 high 2 med 3 low
Guru
5 tools · footprint 16
3 med 2 low
Gmail
10 tools · footprint 15
2 high 1 med 7 low
Apollo
4 tools · footprint 14
1 high 2 med 1 low
Asana
25 tools · footprint 14
5 med 20 low
Fireflies
3 tools · footprint 14
2 high 1 low
GitLab
15 tools · footprint 14
1 high 4 med 10 low COSOSOX
Google BigQuery
5 tools · footprint 14
1 high 4 low COSOSOX
Google Calendar
8 tools · footprint 14
5 med 3 low
Pendo
15 tools · footprint 14
5 med 10 low
Hex
4 tools · footprint 13
3 med 1 low
Linear
21 tools · footprint 12
3 med 18 low
Plaid
5 tools · footprint 12
1 med 4 low GLBA
Honeycomb
10 tools · footprint 11
1 med 9 low
‹ PrevPage 4 of 5Next ›
Atlassian RovoDocs ↗
13 med 41 low · 54 tools · 0 SoD-flagged
regimes APPICCPAGDPRISO_27001LGPDNIST_CSFPIPEDAPIPLPOPIASOC2UK_GDPR

Tools needing tighter control (0 of 54)

None — every tool is low-risk, high-confidence, and outside PCI/HIPAA payload scope.
All other tools (54)
atlassian.addCommentToJiraIssue low conf highallow
Posts a comment on a Jira issue under the authenticated user's identity.
atlassian.addWorklogToJiraIssue low conf highallow
Logs time against a Jira issue; affects time-tracking reports.
atlassian.atlassianUserInfo low conf highallow
Reads the authenticated Atlassian user's profile.
atlassian.bitbucketDeployment low conf mediumallow
Reads deployment information from Bitbucket Pipelines.
atlassian.bitbucketEnvironment low conf mediumallow
Reads deployment environment configuration.
atlassian.bitbucketPipeline low conf mediumallow
Reads pipeline run metadata and status.
atlassian.bitbucketPullRequest low conf mediumallow
Reads pull request metadata, comments, and review state.
atlassian.bitbucketRepoContent medium conf mediumaudit
Reads repository file content; source code may contain secrets or proprietary IP.
atlassian.bitbucketRepository low conf mediumallow
Reads Bitbucket repository metadata.
atlassian.bitbucketUser low conf mediumallow
Reads a Bitbucket user record.
atlassian.bitbucketWorkspace low conf mediumallow
Reads Bitbucket workspace metadata.
atlassian.createCompassComponent low conf mediumallow
Registers a new component in the Compass catalog.
atlassian.createCompassComponentRelationship low conf mediumallow
Creates a dependency or other relationship between Compass components.
atlassian.createCompassCustomFieldDefinition medium conf mediumaudit
Defines a new custom field in Compass; schema change applied workspace-wide.
atlassian.createConfluenceFooterComment low conf highallow
Posts a footer comment on a Confluence page.
atlassian.createConfluenceInlineComment low conf highallow
Posts an inline comment anchored to page content.
atlassian.createConfluencePage low conf highallow
Creates a new Confluence page in a space.
atlassian.createJiraIssue low conf highallow
Creates a new Jira issue.
atlassian.editJiraIssue medium conf highaudit
Modifies fields on a Jira issue including assignee, priority, or custom fields.
atlassian.fetchAtlassian medium conf highaudit
Generic fetch of an Atlassian resource by URL or id; PII exposure depends on target.
atlassian.getAccessibleAtlassianResources low conf highallow
Lists Atlassian sites/resources the authenticated user can access.
atlassian.getCompassComponent low conf mediumallow
Reads a Compass software component record.
atlassian.getCompassComponentActivityEvents low conf mediumallow
Reads activity event stream for a Compass component.
atlassian.getCompassComponentLabels low conf mediumallow
Reads labels attached to a Compass component.
atlassian.getCompassComponents low conf mediumallow
Lists Compass components.
atlassian.getCompassComponentsOwnedByMyTeams low conf mediumallow
Lists Compass components owned by the user's teams.
atlassian.getCompassComponentTypes low conf mediumallow
Reads available Compass component types.
atlassian.getCompassCustomFieldDefinitions low conf mediumallow
Reads Compass custom field schema.
atlassian.getConfluenceCommentChildren low conf highallow
Reads replies to a Confluence comment.
atlassian.getConfluencePage low conf highallow
Reads a single Confluence page's content.
atlassian.getConfluencePageDescendants medium conf highaudit
Reads all descendant pages under a parent; can pull a whole subtree of documentation.
atlassian.getConfluencePageFooterComments low conf highallow
Reads footer comments on a Confluence page.
atlassian.getConfluencePageInlineComments low conf highallow
Reads inline comments on a Confluence page.
atlassian.getConfluenceSpaces low conf highallow
Lists Confluence spaces accessible to the user.
atlassian.getIssueLinkTypes low conf highallow
Reads configured issue-link types in the instance.
atlassian.getJiraIssue low conf highallow
Reads a single Jira issue's fields, comments, and attachments.
atlassian.getJiraIssueRemoteIssueLinks low conf highallow
Reads remote links attached to a Jira issue.
atlassian.getJiraIssueTypeMetaWithFields low conf highallow
Reads issue-type schema metadata; configuration introspection.
atlassian.getJiraProjectIssueTypesMetadata low conf highallow
Reads available issue types for a Jira project.
atlassian.getJsmOpsAlerts low conf highallow
Reads JSM Ops on-call alerts.
atlassian.getJsmOpsScheduleInfo low conf highallow
Reads on-call schedule configuration.
atlassian.getJsmOpsTeamInfo low conf highallow
Reads JSM Ops team metadata.
atlassian.getPagesInConfluenceSpace medium conf highaudit
Lists all pages in a space; enables bulk traversal of internal docs.
atlassian.getTeamworkGraphContext medium conf mediumaudit
Reads contextual graph relationships across Atlassian work objects.
atlassian.getTeamworkGraphObject low conf mediumallow
Reads a single object from the Atlassian Teamwork Graph.
atlassian.getTransitionsForJiraIssue low conf highallow
Reads workflow transitions available for a specific issue.
atlassian.getVisibleJiraProjects low conf highallow
Lists Jira projects visible to the authenticated user.
atlassian.lookupJiraAccountId low conf highallow
Resolves a username or email to a Jira accountId.
atlassian.searchAtlassian medium conf highaudit
Cross-product search across Jira, Confluence, and Bitbucket; can surface confidential content.
atlassian.searchConfluenceUsingCql medium conf highaudit
Runs arbitrary CQL searches; can return large volumes of internal documentation.
atlassian.searchJiraIssuesUsingJql medium conf highaudit
Runs arbitrary JQL queries; can return large volumes of issue data.
atlassian.transitionJiraIssue medium conf highaudit
Moves an issue through workflow states; can close tickets or bypass review gates.
atlassian.updateConfluencePage medium conf highaudit
Edits an existing Confluence page; can overwrite knowledge-base content.
atlassian.updateJsmOpsAlert medium conf highaudit
Acknowledges, closes, or modifies an on-call alert; affects incident response state.