MCP compliance catalog

Every MCP tool in the SCOPE compliance index, grouped by server — risk posture, regulatory exposure, and the tools that warrant tighter governance.
80MCP servers
1695tools
Reset 80 of 80 servers
Shopify
6 tools · footprint 10
1 med 5 low
Benchling
4 tools · footprint 9
2 high 2 med
AirOps
40 tools · footprint 6
5 med 35 low
Adobe Experience Manager
7 tools · footprint 4
2 med 5 low
Adobe Journey Optimizer
3 tools · footprint 4
3 low
Figma
16 tools · footprint 2
1 med 15 low
Gamma
4 tools · footprint 2
1 med 3 low
AWS Marketplace
11 tools · footprint 1
11 low
Ahrefs
42 tools · footprint 0
42 low
Aiera
39 tools · footprint 0
39 low
Benevity
2 tools · footprint 0
2 low
Bigdata.com
8 tools · footprint 0
8 low
BioRender
2 tools · footprint 0
2 low
Clerk
2 tools · footprint 0
2 low
Sigma
5 tools · footprint 0
5 low
Similarweb
26 tools · footprint 0
26 low
‹ PrevPage 5 of 5Next ›
Canva
7 med 25 low · 32 tools · 0 SoD-flagged
regimes APPICCPAGDPRISO_27001LGPDPIPEDAPIPLPOPIASOC2UK_GDPR

Tools needing tighter control (0 of 32)

None — every tool is low-risk, high-confidence, and outside PCI/HIPAA payload scope.
All other tools (32)
canva.autofill-design medium conf mediumaudit
Autofills a brand template with provided data; user-supplied data may include PII.
canva.cancel-editing-transaction low conf highallow
Discards in-flight edits.
canva.comment-on-design low conf highallow
Posts a comment on a design.
canva.commit-editing-transaction medium conf highaudit
Persists batched edits to a design; reversible only via version history.
canva.create-design-from-candidate low conf highallow
Materializes a design candidate as a real design.
canva.create-folder low conf highallow
Creates a folder for organizing assets and designs.
canva.export-design medium conf highaudit
Exports a design as a file; moves potentially confidential creative outside the platform.
canva.generate-design low conf highallow
Generates a new design from prompt input.
canva.generate-design-structured low conf highallow
Generates a design from structured input.
canva.get-assets low conf highallow
Lists assets in the workspace.
canva.get-brand-template-dataset low conf highallow
Reads the variable schema of a brand template.
canva.get-design low conf highallow
Reads a single design's metadata.
canva.get-design-content medium conf mediumaudit
Reads design content; designs may contain confidential text, branded assets, or PII embedded in mocks.
canva.get-design-export-formats low conf highallow
Lists allowed export formats for a design.
canva.get-design-pages low conf highallow
Lists pages in a design.
canva.get-design-thumbnail low conf highallow
Returns a thumbnail image of a design.
canva.get-presenter-notes low conf highallow
Reads presenter notes from a design.
canva.import-design-from-url medium conf mediumaudit
Imports external design content; can pull arbitrary remote files into the workspace.
canva.list-brand-kits low conf highallow
Lists brand kits available to the user.
canva.list-comments low conf highallow
Lists comments on a design.
canva.list-folder-items low conf highallow
Lists contents of a folder.
canva.list-replies low conf highallow
Lists replies in a comment thread.
canva.move-item-to-folder low conf highallow
Relocates a design or asset between folders.
canva.perform-editing-operations medium conf highaudit
Applies content edits to a design within an open transaction.
canva.reply-to-comment low conf highallow
Replies to an existing comment thread.
canva.request-outline-review low conf highallow
Submits an outline for review prior to generation.
canva.resize-design low conf highallow
Produces a resized variant of a design.
canva.search-brand-templates low conf highallow
Searches brand-approved templates.
canva.search-designs low conf highallow
Searches user designs; metadata only.
canva.search-folders low conf highallow
Searches folders by name.
canva.start-editing-transaction low conf highallow
Begins an editing session against a design.
canva.upload-asset-from-url medium conf mediumaudit
Pulls a remote asset into the workspace; remote content not pre-vetted.