MCP compliance catalog

Every MCP tool in the SCOPE compliance index, grouped by server — risk posture, regulatory exposure, and the tools that warrant tighter governance.
80MCP servers
1695tools
Reset 80 of 80 servers
Canva
32 tools · footprint 17
7 med 25 low
Granola
6 tools · footprint 17
3 high 1 med 2 low
Google Drive
7 tools · footprint 16
2 high 2 med 3 low
Guru
5 tools · footprint 16
3 med 2 low
Gmail
10 tools · footprint 15
2 high 1 med 7 low
Apollo
4 tools · footprint 14
1 high 2 med 1 low
Asana
25 tools · footprint 14
5 med 20 low
Fireflies
3 tools · footprint 14
2 high 1 low
GitLab
15 tools · footprint 14
1 high 4 med 10 low COSOSOX
Google BigQuery
5 tools · footprint 14
1 high 4 low COSOSOX
Google Calendar
8 tools · footprint 14
5 med 3 low
Pendo
15 tools · footprint 14
5 med 10 low
Hex
4 tools · footprint 13
3 med 1 low
Linear
21 tools · footprint 12
3 med 18 low
Plaid
5 tools · footprint 12
1 med 4 low GLBA
Honeycomb
10 tools · footprint 11
1 med 9 low
‹ PrevPage 4 of 5Next ›
Box
10 high 14 med 13 low · 37 tools · 1 SoD-flagged
regimes APPICCPACOSOGDPRHIPAAISO_27001LGPDPIPEDAPIPLPOPIASOC2SOXUK_GDPR

Tools needing tighter control (11 of 37)

box.get_file_content high conf highOBO redact
Downloads file contents; arbitrary documents may include PII, PHI, or financial records.
box.search_files_keyword high conf highOBO redact
Full-text search across Box; can surface regulated content the caller has access to.
box.ai_qa_hub high conf highOBO redact
Runs Box AI Q&A across an entire content hub; can summarize regulated content.
box.ai_qa_multi_file high conf highOBO redact
Runs Box AI Q&A across several files; can synthesize sensitive content cross-document.
box.ai_extract_freeform high conf highOBO
Free-form extraction from a document; can pull arbitrary structured PII out of files.
box.ai_extract_structured high conf highOBO
Structured extraction from a document according to a schema; commonly used to pull PII fields.
box.ai_extract_structured_from_fields high conf highOBO
Extracts values for a caller-defined field list from a document.
box.ai_extract_structured_from_fields_enhanced high conf highOBO
Enhanced field-list extraction with reasoning; same data exposure as base extract.
box.ai_extract_structured_from_metadata_template high conf highOBO
Extracts values matching a Box metadata template from a document.
box.ai_extract_structured_from_metadata_template_enhanced high conf highOBO
Enhanced metadata-template extraction with reasoning.
box.upload_file_version medium conf highhuman approval
Replaces existing file content with a new version; alters records of record.
All other tools (26)
box.add_items_to_hub medium conf highaudit
Adds files/folders to a content hub; broadens audience for the items.
box.ai_qa_single_file medium conf highaudit
Runs Box AI Q&A against one file; output may contain extracted PII.
box.copy_hub medium conf highaudit
Duplicates a content hub; creates new exposure surface for included items.
box.create_docgen_batch medium conf highaudit
Generates a batch of documents from a template; outputs may contain merged PII or contract data.
box.create_docgen_template low conf highallow
Defines a new document-generation template.
box.create_file_comment low conf highallow
Posts a comment on a file.
box.create_folder low conf highallow
Creates a new folder; structural change only.
box.create_hub low conf highallow
Creates a new (initially empty) content hub.
box.get_docgen_template_by_id low conf highallow
Reads a document-generation template definition.
box.get_file_details medium conf highaudit
Returns file metadata (owner, path, sharing state).
box.get_folder_details low conf highallow
Returns folder metadata and sharing context.
box.get_hub_details low conf highallow
Returns hub configuration.
box.get_hub_items medium conf highaudit
Lists items within a hub; can enumerate regulated content sets.
box.list_docgen_templates low conf highallow
Enumerates available document-generation templates.
box.list_file_comments low conf highallow
Reads comments on a file.
box.list_folder_content_by_folder_id medium conf highaudit
Lists items within a folder; can enumerate sensitive document inventories.
box.list_hubs low conf highallow
Enumerates content hubs visible to the caller.
box.list_item_collaborations medium conf highaudit
Reveals who has access to an item; useful for both audit and reconnaissance.
box.list_tasks low conf highallow
Lists Box tasks (review/approval) on items.
box.search_files_metadata medium conf highaudit
Searches files by metadata template fields.
box.search_folders_by_name low conf highallow
Locates folders by name.
box.update_file_properties medium conf highaudit
Modifies file metadata; can rename, retag, or move regulated content.
box.update_folder_properties medium conf highaudit
Modifies folder metadata; can affect inherited sharing or retention.
box.update_hub medium conf highaudit
Updates hub metadata or audience configuration.
box.upload_file medium conf highaudit
Uploads a new file into Box; can introduce regulated data into a managed repository.
box.who_am_i low conf highallow
Returns the authenticated Box principal.