Every MCP tool in the SCOPE compliance index, grouped by server — risk posture, regulatory exposure, and the tools that warrant tighter governance.
1 critical 4 high 1 med 6 low · 12 tools · 2 SoD-flagged
regimes APPICCPAGDPRISO_27001LGPDPIPEDAPIPLPOPIASOC2UK_GDPR
Tools needing tighter control (5 of 12)
vibeprospecting.export-to-csv critical conf highhuman approval
Writes an entire prospect or company dataset — including contact emails, phone numbers and social profiles — out to a CSV that leaves the platform's access controls, and burns purchased export credits.
vibeprospecting.fetch-entities high conf mediumhuman approval
Pulls filtered lists of company and contact records from a 800M-person data pool, producing bulk third-party personal data inside the session with no data-subject notice.
vibeprospecting.get-dataset high conf mediumhuman approval
Reads back a stored dataset whose rows may hold contact-level personal data, re-exposing an earlier prospecting result to anyone holding the dataset identifier.
vibeprospecting.enrich-prospects high conf highOBO
Appends direct contact details — work and personal email, phone numbers, social profiles — to named individuals, importing third-party personal data into CRM or ATS records.
vibeprospecting.match-prospects high conf highOBO
Resolves partial identifiers to a single identified person in the vendor's contact graph, linking an internal record to an external profile of that individual.
All other tools (7)
vibeprospecting.autocomplete low conf mediumallow
Resolves filter vocabulary such as industry codes and locations; read-only lookup with no record-level data returned.
vibeprospecting.enrich-business low conf highallow
Adds firmographic, technographic and funding attributes to a company record; company-level data only, and any wrong match propagates into CRM segmentation.
vibeprospecting.estimate-cost low conf mediumallow
Prices a planned query in credits before it runs; no credits are consumed and no records are returned.
vibeprospecting.fetch-businesses-events low conf highallow
Returns funding, hiring and growth events for companies, feeding pipeline prioritisation from company-level public signals.
vibeprospecting.fetch-entities-statistics low conf mediumallow
Returns aggregate counts for a filter set, sizing a market segment without surfacing individual records.
vibeprospecting.fetch-prospects-events medium conf mediumaudit
Surfaces behavioural and job-change signals attached to named individuals, a profiling read that data subjects have not consented to within the buyer's systems.
vibeprospecting.match-business low conf highallow
Maps a name or domain to the vendor's canonical company id; a read-only resolution step that every downstream enrichment depends on.