MCP compliance catalog

Every MCP tool in the SCOPE compliance index, grouped by server — risk posture, regulatory exposure, and the tools that warrant tighter governance.
303MCP servers
4476tools
Reset 303 of 303 servers
Magic Patterns
23 tools · footprint 28
2 high 8 med 13 low
WordPress.com
19 tools · footprint 28
3 high 6 med 10 low COSOSOX
Grain
15 tools · footprint 27
1 high 10 med 4 low
Oracle NetSuite
11 tools · footprint 27
3 high 3 med 5 low COSOSOX
Databricks
5 tools · footprint 26
1 critical 2 high 2 med COSOSOX
Lusha
22 tools · footprint 26
1 critical 6 high 15 low
Outlook Mail
10 tools · footprint 26
6 high 4 med
Airwallex Developer MCP
18 tools · footprint 25
1 critical 8 med 9 low COSOGLBA+3 more
Calendly
22 tools · footprint 25
15 med 7 low
Metabase
13 tools · footprint 25
1 critical 4 high 8 low
Atlassian Rovo
54 tools · footprint 24
13 med 41 low
Cognito Forms
9 tools · footprint 24
2 high 6 med 1 low HIPAA
Local Falcon
25 tools · footprint 24
1 high 9 med 15 low
ZoomInfo
15 tools · footprint 24
5 high 4 med 6 low
Braze
40 tools · footprint 23
1 high 5 med 34 low COSOSOX
Glean
11 tools · footprint 23
3 high 7 med 1 low
‹ PrevPage 5 of 19Next ›
Malwarebytes
1 high 3 med 2 low · 6 tools · 0 SoD-flagged
regimes APPICCPAGDPRISO_27001LGPDPIPEDAPIPLPOPIASOC2UK_GDPR

Tools needing tighter control (1 of 6)

malwarebytes.reputation-scan_all high conf highOBO
Submits a batch of links, email addresses, and phone numbers to Malwarebytes in one call, sending personal identifiers for many individuals to an external threat service at once.
All other tools (5)
malwarebytes.reputation-check_email medium conf highaudit
Sends an email address to Malwarebytes for phishing and scam reputation lookup, disclosing a personal identifier to a third-party processor.
malwarebytes.reputation-check_link low conf highallow
Checks a URL against Malwarebytes reputation data; read-only, though the submitted link is shared with an external service.
malwarebytes.reputation-check_phone medium conf highaudit
Sends a phone number to Malwarebytes to test it against scam reputation data, disclosing a personal identifier to a third-party processor.
malwarebytes.reputation-report medium conf highaudit
Files a suspicious-content report with Malwarebytes, creating a durable third-party abuse record against the reported address, number, or domain that may affect its deliverability and reputation.
malwarebytes.reputation-whois low conf highallow
Retrieves public domain registration records to judge a site's legitimacy; results may include registrant contact details where the registry does not redact them.