MCP compliance catalog

Every MCP tool in the SCOPE compliance index, grouped by server — risk posture, regulatory exposure, and the tools that warrant tighter governance.
80MCP servers
1695tools
Reset 80 of 80 servers
Canva
32 tools · footprint 17
7 med 25 low
Granola
6 tools · footprint 17
3 high 1 med 2 low
Google Drive
7 tools · footprint 16
2 high 2 med 3 low
Guru
5 tools · footprint 16
3 med 2 low
Gmail
10 tools · footprint 15
2 high 1 med 7 low
Apollo
4 tools · footprint 14
1 high 2 med 1 low
Asana
25 tools · footprint 14
5 med 20 low
Fireflies
3 tools · footprint 14
2 high 1 low
GitLab
15 tools · footprint 14
1 high 4 med 10 low COSOSOX
Google BigQuery
5 tools · footprint 14
1 high 4 low COSOSOX
Google Calendar
8 tools · footprint 14
5 med 3 low
Pendo
15 tools · footprint 14
5 med 10 low
Hex
4 tools · footprint 13
3 med 1 low
Linear
21 tools · footprint 12
3 med 18 low
Plaid
5 tools · footprint 12
1 med 4 low GLBA
Honeycomb
10 tools · footprint 11
1 med 9 low
‹ PrevPage 4 of 5Next ›
Supabase
4 critical 4 high 8 med 16 low · 32 tools · 8 SoD-flagged
regimes APPICCPACOSOGDPRISO_27001LGPDNIST_CSFPIPEDAPIPLPOPIASOC2SOXUK_GDPR

Tools needing tighter control (8 of 32)

supabase.apply_migration critical conf highhuman approval
Applies a DDL migration to the live database; can alter or drop schema with no review gate.
supabase.execute_sql critical conf highhuman approval
Runs arbitrary SQL with project privileges; full read/write access to all tables including PII.
supabase.deploy_edge_function critical conf highhuman approval
Deploys server-side function code to production; arbitrary code execution path with database access.
supabase.merge_branch critical conf highhuman approval
Promotes branch migrations and edge functions into production.
supabase.pause_project high conf highhuman approval
Pauses a project; takes the database offline and breaks any apps depending on it.
supabase.delete_branch high conf highhuman approval
Deletes a branch and its data; irreversible.
supabase.reset_branch high conf highhuman approval
Resets branch migration state; destroys any uncommitted schema work.
supabase.update_storage_config high conf highhuman approval
Modifies storage limits and policies; can broaden public access to user-uploaded content.
All other tools (24)
supabase.confirm_cost medium conf mediumaudit
Acknowledges projected cost; precondition for paid resource creation.
supabase.create_branch medium conf highaudit
Creates an isolated database branch (paid feature); incurs cost.
supabase.create_project medium conf highaudit
Provisions a new Postgres project; incurs cost and expands the org's footprint.
supabase.generate_typescript_types low conf highallow
Generates TypeScript types from the database schema.
supabase.get_advisors low conf highallow
Reads security and performance advisor findings for the project.
supabase.get_cost low conf highallow
Returns the cost estimate for a planned action.
supabase.get_edge_function medium conf highaudit
Returns the source of an edge function; may expose business logic and embedded secrets.
supabase.get_logs medium conf highaudit
Returns service logs; may contain user identifiers, IPs, and request payloads.
supabase.get_organization low conf highallow
Returns details of a single organization including plan.
supabase.get_project low conf highallow
Returns details of a single project.
supabase.get_project_url low conf highallow
Returns the project API URL.
supabase.get_publishable_keys medium conf mediumaudit
Returns the project's anon/publishable keys; intended for client use but still credentials.
supabase.get_storage_config low conf highallow
Reads storage configuration including limits.
supabase.list_branches low conf highallow
Lists project branches.
supabase.list_edge_functions low conf highallow
Lists deployed edge functions for the project.
supabase.list_extensions low conf highallow
Lists installed Postgres extensions.
supabase.list_migrations low conf highallow
Lists database migrations applied to the project.
supabase.list_organizations low conf highallow
Lists organizations the user belongs to.
supabase.list_projects low conf highallow
Lists projects in the connected organization.
supabase.list_storage_buckets low conf highallow
Lists storage buckets.
supabase.list_tables low conf highallow
Enumerates database tables; schema-level read.
supabase.rebase_branch medium conf highaudit
Rebases a branch onto production; can introduce migration conflicts.
supabase.restore_project medium conf highaudit
Restores a paused project back to active; resumes billing.
supabase.search_docs low conf highallow
Searches Supabase documentation.