MCP compliance catalog

Every MCP tool in the SCOPE compliance index, grouped by server — risk posture, regulatory exposure, and the tools that warrant tighter governance.
303MCP servers
4476tools
Reset 303 of 303 servers
Magic Patterns
23 tools · footprint 28
2 high 8 med 13 low
WordPress.com
19 tools · footprint 28
3 high 6 med 10 low COSOSOX
Grain
15 tools · footprint 27
1 high 10 med 4 low
Oracle NetSuite
11 tools · footprint 27
3 high 3 med 5 low COSOSOX
Databricks
5 tools · footprint 26
1 critical 2 high 2 med COSOSOX
Lusha
22 tools · footprint 26
1 critical 6 high 15 low
Outlook Mail
10 tools · footprint 26
6 high 4 med
Airwallex Developer MCP
18 tools · footprint 25
1 critical 8 med 9 low COSOGLBA+3 more
Calendly
22 tools · footprint 25
15 med 7 low
Metabase
13 tools · footprint 25
1 critical 4 high 8 low
Atlassian Rovo
54 tools · footprint 24
13 med 41 low
Cognito Forms
9 tools · footprint 24
2 high 6 med 1 low HIPAA
Local Falcon
25 tools · footprint 24
1 high 9 med 15 low
ZoomInfo
15 tools · footprint 24
5 high 4 med 6 low
Braze
40 tools · footprint 23
1 high 5 med 34 low COSOSOX
Glean
11 tools · footprint 23
3 high 7 med 1 low
‹ PrevPage 5 of 19Next ›
MetabaseDocs ↗
1 critical 4 high 8 low · 13 tools · 1 SoD-flagged
regimes APPICCPAGDPRISO_27001LGPDPIPEDAPIPLPOPIASOC2UK_GDPR

Tools needing tighter control (5 of 13)

metabase.execute_sql critical conf mediumhuman approval
Runs arbitrary SQL against a connected production database, able to pull entire tables of customer data or mutate rows wherever the connection's native-query permission allows.
metabase.query high conf mediumOBO
Returns up to 2,000 rows of live warehouse data per invocation, exposing customer records and business metrics to the AI client in bulk.
metabase.execute_query high conf mediumOBO
Runs a previously built query handle and returns its result rows, surfacing whatever underlying records the question targets.
metabase.update_question high conf mediumOBO
Rewrites a saved question or moves it into another collection, changing the numbers business users see and the audience permitted to view them.
metabase.update_dashboard high conf mediumOBO
Renames, archives, or relocates a dashboard, pulling a report away from its audience or shifting it into a collection with different viewer permissions.
All other tools (8)
metabase.construct_query low conf mediumallow
Builds a query definition and returns an opaque handle; no rows leave Metabase until that handle is executed.
metabase.create_collection low conf mediumallow
Adds a collection for organizing content, inheriting view permissions from the parent it is nested under.
metabase.create_dashboard low conf mediumallow
Adds a dashboard, optionally pre-populated with saved questions, into a collection other users can browse.
metabase.create_question low conf mediumallow
Saves a query as a named, reusable question that other Metabase users can run on demand.
metabase.read_resource low conf mediumallow
Reads Metabase entity metadata such as collection contents and table field lists, revealing the shape of the underlying data model.
metabase.render_drill_through low conf mediumallow
Re-renders the drilled-into segment of a chart, returning the narrower slice of data sitting behind a single data point.
metabase.search low conf mediumallow
Locates tables and metrics by keyword, disclosing which data assets exist in the instance.
metabase.visualize_query low conf mediumallow
Renders query results as an inline chart, moving result data into the AI client's sandboxed browser origin for display.