MCP compliance catalog

Every MCP tool in the SCOPE compliance index, grouped by server — risk posture, regulatory exposure, and the tools that warrant tighter governance.

387MCP servers

5470tools

19 tools · footprint 41

1 critical 5 high 9 med 4 low COSOSOX

20 tools · footprint 41

2 critical 3 high 2 med 13 low COSOSOX

23 tools · footprint 40

1 critical 4 high 15 med 3 low

24 tools · footprint 40

6 high 14 med 4 low

23 tools · footprint 40

2 critical 4 high 4 med 13 low

14 tools · footprint 39

1 critical 3 high 3 med 7 low COSOPCI+1 more

23 tools · footprint 38

6 high 15 med 2 low

83 tools · footprint 38

1 high 20 med 62 low COSOSOX

25 tools · footprint 37

5 high 17 med 3 low

6 tools · footprint 37

2 critical 3 high 1 med COSOSOX

25 tools · footprint 36

3 high 17 med 5 low COSOGLBA+2 more

Microsoft Dataverse

15 tools · footprint 35

1 critical 3 high 8 med 3 low

35 tools · footprint 34

2 high 13 med 20 low

25 tools · footprint 34

1 critical 2 high 9 med 13 low

42 tools · footprint 34

2 high 9 med 31 low COSOSOX

23 tools · footprint 33

5 high 12 med 6 low

YugabyteDBDocs ↗

2 critical 1 low · 3 tools · 1 SoD-flagged

regimes APPICCPAGDPRISO_27001LGPDPIPEDAPIPLPOPIASOC2UK_GDPR

Tools needing tighter control (2 of 3)

yugabytedb.run_write_query critical conf highhuman approval

Mutates or destroys production data — a single TRUNCATE or DDL statement can wipe a table the connection role owns, with no undo beyond a cluster backup.

yugabytedb.run_read_only_query critical conf highhuman approval

Reads arbitrary SQL results from the cluster, so one unbounded SELECT can pull every row of customer data the connection role can reach into the agent's context.

All other tools (1)

yugabytedb.summarize_database low conf highallow

Returns the table, column, and row-count inventory for a schema, exposing the data model an attacker would need to target specific tables.