MCP compliance catalog

Every MCP tool in the SCOPE compliance index, grouped by server — risk posture, regulatory exposure, and the tools that warrant tighter governance.
80MCP servers
1695tools
Reset 80 of 80 servers
Canva
32 tools · footprint 17
7 med 25 low
Granola
6 tools · footprint 17
3 high 1 med 2 low
Google Drive
7 tools · footprint 16
2 high 2 med 3 low
Guru
5 tools · footprint 16
3 med 2 low
Gmail
10 tools · footprint 15
2 high 1 med 7 low
Apollo
4 tools · footprint 14
1 high 2 med 1 low
Asana
25 tools · footprint 14
5 med 20 low
Fireflies
3 tools · footprint 14
2 high 1 low
GitLab
15 tools · footprint 14
1 high 4 med 10 low COSOSOX
Google BigQuery
5 tools · footprint 14
1 high 4 low COSOSOX
Google Calendar
8 tools · footprint 14
5 med 3 low
Pendo
15 tools · footprint 14
5 med 10 low
Hex
4 tools · footprint 13
3 med 1 low
Linear
21 tools · footprint 12
3 med 18 low
Plaid
5 tools · footprint 12
1 med 4 low GLBA
Honeycomb
10 tools · footprint 11
1 med 9 low
‹ PrevPage 4 of 5Next ›
PostHogDocs ↗
6 high 22 med 8 low · 36 tools · 8 SoD-flagged
regimes APPICCPAGDPRISO_27001LGPDNIST_CSFPIPEDAPIPLPOPIASOC2UK_GDPR

Tools needing tighter control (10 of 36)

posthog.update-feature-flag high conf highhuman approval
Changes who sees a feature in production; can ship or break experiences without code review.
posthog.delete-feature-flag high conf highhuman approval
Removes a flag; dependent code may fail open or closed unexpectedly.
posthog.experiment-launch high conf highhuman approval
Activates an experiment in production; immediately affects user experience.
posthog.experiment-ship-variant high conf highhuman approval
Promotes a variant to all traffic without further review.
posthog.execute-sql high conf highOBO
Runs arbitrary HogQL/SQL across event and person data; can return PII at scale.
posthog.query-run high conf highOBO
Executes saved or ad-hoc queries that may return identified user data.
posthog.scheduled-changes-create medium conf highhuman approval
Schedules a future flag change without re-review at execution time.
posthog.experiment-delete medium conf highhuman approval
Removes experiment configuration and historical results from the UI.
posthog.alert-delete medium conf highhuman approval
Removes a monitoring alert; can blind operators to incidents.
posthog.survey-delete medium conf highhuman approval
Deletes a survey and its responses; may destroy collected feedback.
All other tools (26)
posthog.action-create low conf highallow
Defines a new tracked action for analytics; no production user impact.
posthog.action-delete medium conf highaudit
Removes a tracked action; downstream insights and dashboards may break silently.
posthog.action-update low conf highallow
Updates the definition of an existing tracked action.
posthog.alert-create low conf highallow
Adds a metric alert; no immediate user impact.
posthog.alert-update medium conf highaudit
Modifies thresholds or recipients on a monitoring alert.
posthog.annotation-create low conf highallow
Adds an annotation to time-series charts.
posthog.annotation-delete low conf highallow
Removes a chart annotation.
posthog.cohorts-add-persons-to-static-cohort-partial-update medium conf highaudit
Adds identified persons to a static cohort used for targeting and analysis.
posthog.cohorts-create medium conf highaudit
Defines a user cohort that may target campaigns or feature rollouts.
posthog.cohorts-rm-person-from-static-cohort-partial-update low conf highallow
Removes a person from a static cohort definition.
posthog.create-feature-flag medium conf highaudit
Creates a new feature flag that can gate production behavior on rollout.
posthog.dashboard-create low conf highallow
Creates a new analytics dashboard.
posthog.dashboard-delete medium conf highaudit
Removes a shared dashboard; may disrupt downstream reporting.
posthog.dashboard-update low conf highallow
Modifies dashboard layout or filters.
posthog.experiment-create medium conf highaudit
Starts a new A/B experiment that splits production traffic.
posthog.experiment-end medium conf highaudit
Concludes an experiment and locks the result of record.
posthog.experiment-pause medium conf highaudit
Halts an active experiment mid-run; can invalidate ongoing measurement.
posthog.experiment-resume medium conf highaudit
Restarts a paused experiment, reapplying traffic split.
posthog.experiment-update medium conf highaudit
Modifies an experiment's targeting or variants while running.
posthog.feature-flags-copy-flags-create medium conf highaudit
Copies flags between projects/environments; can replicate untested rollout state.
posthog.query-llm-trace medium conf mediumaudit
Returns LLM trace details including prompts that may contain customer or PII content.
posthog.query-llm-traces-list medium conf mediumaudit
Bulk-lists LLM traces; potential PII exposure depending on prompt content.
posthog.query-logs medium conf highaudit
Searches application logs that can include user identifiers and request payloads.
posthog.scheduled-changes-delete medium conf highaudit
Cancels a scheduled flag change; can leave intended rollout undone.
posthog.survey-create medium conf highaudit
Publishes a survey targeted to identified users; collects new PII responses.
posthog.survey-update medium conf highaudit
Edits a live survey; can change consent text or targeting after launch.