MCP compliance catalog

Every MCP tool in the SCOPE compliance index, grouped by server — risk posture, regulatory exposure, and the tools that warrant tighter governance.
387MCP servers
5470tools
Reset 387 of 387 servers
Upwork
19 tools · footprint 41
1 critical 5 high 9 med 4 low COSOSOX
Vercel
20 tools · footprint 41
2 critical 3 high 2 med 13 low COSOSOX
Cloudinary
23 tools · footprint 40
1 critical 4 high 15 med 3 low
Freshdesk
24 tools · footprint 40
6 high 14 med 4 low
Netlify
23 tools · footprint 40
2 critical 4 high 4 med 13 low
Zapier
14 tools · footprint 39
1 critical 3 high 3 med 7 low COSOPCI+1 more
Freshservice
23 tools · footprint 38
6 high 15 med 2 low
GitHub
83 tools · footprint 38
1 high 20 med 62 low COSOSOX
Bright Data
25 tools · footprint 37
5 high 17 med 3 low
Snowflake
6 tools · footprint 37
2 critical 3 high 1 med COSOSOX
Brex
25 tools · footprint 36
3 high 17 med 5 low COSOGLBA+2 more
Microsoft Dataverse
15 tools · footprint 35
1 critical 3 high 8 med 3 low
Calendly
35 tools · footprint 34
2 high 13 med 20 low
Lovable
25 tools · footprint 34
1 critical 2 high 9 med 13 low
Smartsheet
42 tools · footprint 34
2 high 9 med 31 low COSOSOX
Freshservice
23 tools · footprint 33
5 high 12 med 6 low
‹ PrevPage 4 of 25Next ›
Microsoft OutlookDocs ↗
5 high 9 med 7 low · 21 tools · 0 SoD-flagged
regimes APPICCPAGDPRISO_27001LGPDPIPEDAPIPLPOPIASOC2UK_GDPR

Tools needing tighter control (5 of 21)

outlook.mcp_MailTools_graph_mail_sendMail high conf mediumOBO
Sends mail as the signed-in user to arbitrary recipients, allowing mailbox content to leave the organization and the account owner to be impersonated.
outlook.mcp_MailTools_graph_mail_reply high conf mediumOBO
Replies to an existing thread as the user, carrying the quoted original correspondence out to whoever is on the message.
outlook.mcp_MailTools_graph_mail_replyAll high conf mediumOBO
Replies to every participant on a thread, widening the audience for the quoted correspondence to all original recipients including external parties.
outlook.mcp_MailTools_graph_mail_searchMessages high conf mediumOBO
Runs KQL queries across the mailbox through the Graph Search API, surfacing contracts, credentials, and personal data buried anywhere in mail history.
outlook.mcp_MailTools_graph_mail_listSent high conf mediumOBO
Enumerates the Sent Items folder, exposing who the user has corresponded with and what was sent out over time.
All other tools (16)
outlook.mcp_CalendarTools_graph_acceptEvent low conf mediumallow
Accepts a meeting invitation for the user and notifies the organizer that they will attend.
outlook.mcp_CalendarTools_graph_cancelEvent medium conf mediumaudit
Cancels a meeting and pushes cancellation notices to every attendee, clearing it from all participants' calendars.
outlook.mcp_CalendarTools_graph_createEvent low conf mediumallow
Books a new event on a user's calendar, optionally recurring, that can invite attendees and provision an online meeting.
outlook.mcp_CalendarTools_graph_declineEvent low conf mediumallow
Declines a meeting invitation for the user and notifies the organizer that they will not attend.
outlook.mcp_CalendarTools_graph_deleteEvent medium conf mediumaudit
Removes an event from a user's calendar with no built-in undo, erasing the booking and its record for the owner.
outlook.mcp_CalendarTools_graph_findMeetingTimes low conf mediumallow
Proposes meeting slots and locations by reading organizer and attendee availability across their calendars.
outlook.mcp_CalendarTools_graph_getEvent low conf mediumallow
Reads one calendar event with its subject, body, and attendee list from a specified user's calendar.
outlook.mcp_CalendarTools_graph_getSchedule low conf mediumallow
Reads free/busy availability for a user, distribution list, or room resource, revealing when people and spaces are booked.
outlook.mcp_CalendarTools_graph_listCalendarView medium conf mediumaudit
Retrieves every calendar occurrence over a date range for a user, exposing meeting subjects, locations, and participants across the window.
outlook.mcp_CalendarTools_graph_listEvents medium conf mediumaudit
Lists a user's calendar events in bulk; subjects, bodies, and attendee lists can reveal confidential meetings and personal data at scale.
outlook.mcp_CalendarTools_graph_updateEvent low conf mediumallow
Changes an existing event's time, attendees, or content, which reschedules the meeting for everyone invited.
outlook.mcp_MailTools_graph_mail_createMessage medium conf mediumaudit
Composes a draft email with HTML body support in the user's mailbox, staging outgoing correspondence attributed to the account owner.
outlook.mcp_MailTools_graph_mail_deleteMessage medium conf mediumaudit
Removes a message from the signed-in user's mailbox, taking correspondence out of the active folder set and any workflow that depended on it.
outlook.mcp_MailTools_graph_mail_getMessage medium conf mediumaudit
Pulls a single message's full body and headers into agent context, including any personal or confidential content it carries.
outlook.mcp_MailTools_graph_mail_sendDraft medium conf mediumaudit
Transmits an already-composed draft from the mailbox; once sent the message cannot be recalled.
outlook.mcp_MailTools_graph_mail_updateMessage medium conf mediumaudit
Rewrites the subject, body, or categories of a stored message, altering the record of correspondence held in the mailbox.