MCP compliance catalog

Every MCP tool in the SCOPE compliance index, grouped by server — risk posture, regulatory exposure, and the tools that warrant tighter governance.
303MCP servers
4476tools
Reset 303 of 303 servers
Freshservice
23 tools · footprint 33
5 high 12 med 6 low
Microsoft Teams
25 tools · footprint 33
4 high 11 med 10 low
Ramp
17 tools · footprint 33
5 high 5 med 7 low COSOGLBA+2 more
Attio
37 tools · footprint 32
4 high 14 med 19 low
Euler
25 tools · footprint 32
1 high 13 med 11 low
Box
25 tools · footprint 31
4 high 13 med 8 low
Egnyte
21 tools · footprint 31
3 high 9 med 9 low
Stytch
7 tools · footprint 31
1 critical 2 high 2 med 2 low
Affinity
25 tools · footprint 30
20 med 5 low
Superhuman Mail
10 tools · footprint 30
4 high 3 med 3 low
dbt
22 tools · footprint 29
3 high 7 med 12 low COSOSOX
Microsoft Outlook Mail
22 tools · footprint 29
5 high 8 med 9 low
Ticket Tailor
20 tools · footprint 29
2 high 14 med 4 low PCI
Wix
16 tools · footprint 29
1 critical 1 high 1 med 13 low COSOPCI+1 more
GoCardless
9 tools · footprint 28
2 critical 3 high 1 med 3 low COSOGLBA+2 more
GovTribe
25 tools · footprint 28
2 high 15 med 8 low
‹ PrevPage 4 of 19Next ›
MailerLiteDocs ↗
1 critical 11 high 12 med 1 low · 25 tools · 5 SoD-flagged
regimes APPICCPAGDPRISO_27001LGPDPIPEDAPIPLPOPIASOC2UK_GDPR

Tools needing tighter control (12 of 25)

mailerlite.delete_field critical conf highhuman approval
Destroys a custom field and the values stored under it for every subscriber in the account, with no recovery path and no second approver.
mailerlite.list_subscribers high conf highhuman approval
Enumerates the account's subscriber base with email addresses, names, and status, giving an agent a direct path to pull the whole marketing list.
mailerlite.import_subscribers_to_group high conf highOBO
Loads a batch of personal records into the audience in one call, making an unvetted or purchased list immediately mailable.
mailerlite.get_segment_subscribers high conf highhuman approval
Returns every contact matching a segment's criteria, exposing a targeted slice of the audience along with its inferred attributes.
mailerlite.create_webhook high conf highOBO
Opens a standing egress channel that streams subscriber and campaign events to any external URL the caller names.
mailerlite.update_webhook high conf highOBO
Repoints or re-enables an existing webhook, which can silently redirect subscriber event data to a different destination.
mailerlite.batch_requests high conf mediumOBO
Executes an arbitrary set of API operations in one call, amplifying any write or delete and collapsing per-operation review into a single approval.
mailerlite.schedule_campaign high conf highOBO
Commits an email blast to the selected audience; once delivery starts the message cannot be recalled from recipients' inboxes, and any consent defect is already realised.
mailerlite.get_campaign_subscribers high conf highhuman approval
Returns the full recipient list for a send, exposing who was contacted along with their delivery status.
mailerlite.get_campaign_link_recipients high conf highhuman approval
Links click-tracking data back to named individuals, revealing interest signals that count as behavioural profiling under privacy law.
mailerlite.manage_ecommerce_customers high conf mediumOBO
Covers read, write, and delete on synced shop customer records, so one call can dump or destroy purchaser identity data.
mailerlite.manage_ecommerce_orders high conf mediumOBO
Reads and rewrites purchase records tied to named customers, including bulk import and deletion of order history used for revenue segmentation.
All other tools (13)
mailerlite.add_subscriber medium conf highaudit
Upserts a subscriber record, which can add contacts who never gave marketing consent and put them in scope for future sends.
mailerlite.create_automation low conf highallow
Adds a draft workflow that sends nothing until it is enabled, so the immediate effect is limited to account clutter.
mailerlite.create_campaign medium conf highaudit
Drafts a campaign with its audience, sender identity, and content, staging outbound messaging that carries the company's brand.
mailerlite.delete_automation medium conf highaudit
Tears down a live workflow, halting onboarding or nurture sequences for subscribers currently mid-journey.
mailerlite.delete_campaign medium conf highaudit
Removes a campaign along with the performance history marketers rely on for reporting and consent evidence.
mailerlite.delete_subscriber medium conf highaudit
Removes a person from the audience so they stop receiving mail; the vendor retains their record for re-subscription, so it is not a full erasure.
mailerlite.delete_webhook medium conf highaudit
Removes an event subscription, breaking downstream CRM or analytics sync without any visible failure in MailerLite itself.
mailerlite.get_subscriber medium conf highaudit
Reads one subscriber's contact details, custom fields, and subscription status.
mailerlite.get_subscriber_activity medium conf highaudit
Exposes one person's open, click, and send history — behavioural profiling data tied to an identifiable individual.
mailerlite.search medium conf mediumaudit
Queries across account resources and can surface subscriber records the caller did not know to ask for by ID.
mailerlite.update_automation_email medium conf highaudit
Changes the body of an email that fires automatically to every subscriber entering the workflow, with no per-send review.
mailerlite.update_campaign medium conf highaudit
Rewrites subject line, sender address, or body of a campaign, altering what recipients see and who it appears to come from.
mailerlite.update_subscriber medium conf highaudit
Modifies stored personal data on a subscriber record, including email, name, and custom field values used for targeting.