MCP compliance catalog

Every MCP tool in the SCOPE compliance index, grouped by server — risk posture, regulatory exposure, and the tools that warrant tighter governance.
303MCP servers
4476tools
Reset 303 of 303 servers
Freshservice
23 tools · footprint 33
5 high 12 med 6 low
Microsoft Teams
25 tools · footprint 33
4 high 11 med 10 low
Ramp
17 tools · footprint 33
5 high 5 med 7 low COSOGLBA+2 more
Attio
37 tools · footprint 32
4 high 14 med 19 low
Euler
25 tools · footprint 32
1 high 13 med 11 low
Box
25 tools · footprint 31
4 high 13 med 8 low
Egnyte
21 tools · footprint 31
3 high 9 med 9 low
Stytch
7 tools · footprint 31
1 critical 2 high 2 med 2 low
Affinity
25 tools · footprint 30
20 med 5 low
Superhuman Mail
10 tools · footprint 30
4 high 3 med 3 low
dbt
22 tools · footprint 29
3 high 7 med 12 low COSOSOX
Microsoft Outlook Mail
22 tools · footprint 29
5 high 8 med 9 low
Ticket Tailor
20 tools · footprint 29
2 high 14 med 4 low PCI
Wix
16 tools · footprint 29
1 critical 1 high 1 med 13 low COSOPCI+1 more
GoCardless
9 tools · footprint 28
2 critical 3 high 1 med 3 low COSOGLBA+2 more
GovTribe
25 tools · footprint 28
2 high 15 med 8 low
‹ PrevPage 4 of 19Next ›
Customer.io
1 critical 2 high 5 low · 8 tools · 1 SoD-flagged
regimes APPICCPAGDPRISO_27001LGPDPIPEDAPIPLPOPIASOC2UK_GDPR

Tools needing tighter control (3 of 8)

customerio.cio_delete_api critical conf mediumhuman approval
Permanently removes any Customer.io resource, irreversibly destroying customer profiles, segments, or campaigns through arbitrary DELETE calls.
customerio.cio_read_api high conf mediumOBO
Reads and lists any Customer.io resource, including customer profiles and messaging history, enabling bulk export of personal data via pagination and filtering.
customerio.cio_write_api high conf mediumOBO
Creates or edits any Customer.io resource, letting the agent alter customer profiles, segments, and campaign configuration through arbitrary POST, PUT, and PATCH calls.
All other tools (5)
customerio.cio_auth_status low conf mediumallow
Reveals the current authentication state and which Customer.io workspaces the token can reach, exposing account access scope.
customerio.cio_prime low conf mediumallow
Loads the AI-ready Customer.io API reference so the agent can plan subsequent calls; reads and changes no customer data.
customerio.cio_schema low conf mediumallow
Enumerates available Customer.io API endpoints and their parameters for call planning; exposes no customer data.
customerio.cio_skills_list low conf mediumallow
Lists the available agent skill playbooks for multi-step Customer.io operations; reveals no customer data.
customerio.cio_skills_read low conf mediumallow
Retrieves the full instructions for a specific Customer.io agent skill; exposes workflow guidance only, not customer data.