MCP compliance catalog

Every MCP tool in the SCOPE compliance index, grouped by server — risk posture, regulatory exposure, and the tools that warrant tighter governance.
387MCP servers
5470tools
Reset 387 of 387 servers
Upwork
19 tools · footprint 41
1 critical 5 high 9 med 4 low COSOSOX
Vercel
20 tools · footprint 41
2 critical 3 high 2 med 13 low COSOSOX
Cloudinary
23 tools · footprint 40
1 critical 4 high 15 med 3 low
Freshdesk
24 tools · footprint 40
6 high 14 med 4 low
Netlify
23 tools · footprint 40
2 critical 4 high 4 med 13 low
Zapier
14 tools · footprint 39
1 critical 3 high 3 med 7 low COSOPCI+1 more
Freshservice
23 tools · footprint 38
6 high 15 med 2 low
GitHub
83 tools · footprint 38
1 high 20 med 62 low COSOSOX
Bright Data
25 tools · footprint 37
5 high 17 med 3 low
Snowflake
6 tools · footprint 37
2 critical 3 high 1 med COSOSOX
Brex
25 tools · footprint 36
3 high 17 med 5 low COSOGLBA+2 more
Microsoft Dataverse
15 tools · footprint 35
1 critical 3 high 8 med 3 low
Calendly
35 tools · footprint 34
2 high 13 med 20 low
Lovable
25 tools · footprint 34
1 critical 2 high 9 med 13 low
Smartsheet
42 tools · footprint 34
2 high 9 med 31 low COSOSOX
Freshservice
23 tools · footprint 33
5 high 12 med 6 low
‹ PrevPage 4 of 25Next ›
Turkish AirlinesDocs ↗
3 high 6 med 14 low · 23 tools · 0 SoD-flagged
regimes APPICCPAGDPRISO_27001LGPDPCIPIPEDAPIPLPOPIASOC2UK_GDPR

Tools needing tighter control (3 of 23)

turkish-airlines.create_business_upgrade_payment_link high conf highOBO redact
Commits a passenger to a specific priced upgrade option and hands back a live checkout URL, so a wrong option or passenger count turns into a real card or miles charge at completion.
turkish-airlines.pnr_finder high conf highOBO
Fires a booking-reference recovery message to the contact on file, an account-recovery primitive that can be abused to confirm a passenger's travel or spam their registered phone and email.
turkish-airlines.manage_booking_link high conf highOBO
Confirms that a PNR and surname pair is valid and issues an authenticated deeplink into the cancel, refund, rebook and check-in flows for that reservation.
All other tools (20)
turkish-airlines.add_message_to_baggage_case medium conf highaudit
Writes a statement into an official lost or damaged baggage claim under the customer's name, becoming part of the record the airline adjudicates the claim on.
turkish-airlines.check_stopover_eligibility medium conf mediumaudit
Validates a PNR and surname pair to test stopover entitlement, confirming that a named passenger holds a specific itinerary.
turkish-airlines.check_stopover_routes low conf highallow
Reads programme eligibility rules for up to ten routes; no reservation or passenger identity is involved.
turkish-airlines.find_flight_price_calendar low conf highallow
Reads a date-by-date fare calendar for flexible travellers; pricing data only, with no booking side effects.
turkish-airlines.flight-status low conf highallow
Reads publicly published operational status for one flight number; no reservation or passenger data is touched.
turkish-airlines.flight-status-by-route low conf highallow
Lists operational status for scheduled flights on a route; read-only public schedule data with no customer records involved.
turkish-airlines.generate_baggage_issue_link low conf highallow
Produces a localized URL to the baggage claim form; no passenger data is submitted or read by the call itself.
turkish-airlines.generate_holidays_search_link low conf highallow
Assembles a pre-filled shopping URL including traveller counts and children's ages; the data is supplied in the request, not retrieved from the airline.
turkish-airlines.get_airline_promotions low conf highallow
Reads published promotional offers for a market; marketing content with no data-protection exposure.
turkish-airlines.get_baggage_case_details medium conf mediumaudit
Surfaces the contents and status of a customer's lost-baggage claim, which typically carries their name, contact email and itinerary.
turkish-airlines.get_booking_baggage_allowance low conf highallow
Reads baggage entitlements for a ticketed passenger; limited data, but the lookup is keyed to a real reservation and confirms it exists.
turkish-airlines.get_booking_details medium conf highaudit
Returns passenger names, itinerary and ticket numbers for a single reservation, putting traveller identity and movement data in the agent's context.
turkish-airlines.get_business_upgrade_offers medium conf highaudit
Exposes per-passenger upgrade pricing and payment options tied to a named reservation, revealing who is travelling on the PNR and what they can be charged.
turkish-airlines.get_city_guide low conf highallow
Fetches editorial destination content; no airline or customer records are accessed.
turkish-airlines.get_contact_info low conf highallow
Looks up published corporate contact details; the only personal input is an optional country inferred from the caller's location.
turkish-airlines.get_feedback_status medium conf mediumaudit
Reveals the handling status of a named customer's complaint or application to anyone holding the reference number alone.
turkish-airlines.search_flights low conf highallow
Returns bookable itineraries and fares for a route and date; nothing is held or charged, but the results drive downstream purchase decisions.
turkish-airlines.search_hotel_packages low conf highallow
Returns a curated package catalog with prices and booking links; commercial content only, no customer record is read.
turkish-airlines.search_inbound_flights low conf highallow
Continues a flight search session to price the return leg; read-only fare shopping tied to a transient search id.
turkish-airlines.search_thy_faq low conf highallow
Retrieves official policy text so answers come from published rules rather than model memory; reduces the risk of misstating fare or baggage policy.