MCP compliance catalog

Every MCP tool in the SCOPE compliance index, grouped by server — risk posture, regulatory exposure, and the tools that warrant tighter governance.
303MCP servers
4476tools
Reset 303 of 303 servers
Magic Patterns
23 tools · footprint 28
2 high 8 med 13 low
WordPress.com
19 tools · footprint 28
3 high 6 med 10 low COSOSOX
Grain
15 tools · footprint 27
1 high 10 med 4 low
Oracle NetSuite
11 tools · footprint 27
3 high 3 med 5 low COSOSOX
Databricks
5 tools · footprint 26
1 critical 2 high 2 med COSOSOX
Lusha
22 tools · footprint 26
1 critical 6 high 15 low
Outlook Mail
10 tools · footprint 26
6 high 4 med
Airwallex Developer MCP
18 tools · footprint 25
1 critical 8 med 9 low COSOGLBA+3 more
Calendly
22 tools · footprint 25
15 med 7 low
Metabase
13 tools · footprint 25
1 critical 4 high 8 low
Atlassian Rovo
54 tools · footprint 24
13 med 41 low
Cognito Forms
9 tools · footprint 24
2 high 6 med 1 low HIPAA
Local Falcon
25 tools · footprint 24
1 high 9 med 15 low
ZoomInfo
15 tools · footprint 24
5 high 4 med 6 low
Braze
40 tools · footprint 23
1 high 5 med 34 low COSOSOX
Glean
11 tools · footprint 23
3 high 7 med 1 low
‹ PrevPage 5 of 19Next ›
Microsoft Outlook Mail
5 high 8 med 9 low · 22 tools · 0 SoD-flagged
regimes APPICCPAGDPRISO_27001LGPDNIST_CSFPIPEDAPIPLPOPIASOC2UK_GDPR

Tools needing tighter control (5 of 22)

microsoft-outlook-mail.outlook_send_mail high conf mediumOBO
Sends an email as the user to arbitrary recipients, enabling disclosure of mailbox data to external parties and impersonation of the account owner.
microsoft-outlook-mail.outlook_forward_mail high conf mediumOBO
Forwards an existing message to new recipients, a direct path to exfiltrate internal correspondence outside the organization.
microsoft-outlook-mail.outlook_batch_delete_messages high conf mediumOBO
Moves many messages to Deleted Items in a single call; bulk removal of correspondence with broad blast radius.
microsoft-outlook-mail.outlook_email_search high conf mediumOBO
Searches the mailbox by sender and date; can surface PII, credentials, contracts, and confidential correspondence at scale.
microsoft-outlook-mail.outlook_create_filter high conf mediumOBO
Creates an inbox rule that can silently auto-forward, move, or delete incoming mail, a well-known exfiltration and evasion vector.
All other tools (17)
microsoft-outlook-mail.outlook_batch_modify_labels low conf mediumallow
Adds or removes categories on multiple messages in a single call; reversible mailbox organization at scale.
microsoft-outlook-mail.outlook_create_draft medium conf mediumaudit
Composes an email draft on the user's behalf; not auto-sent but staged as the user's outgoing correspondence.
microsoft-outlook-mail.outlook_create_label low conf mediumallow
Adds a new category to the mailbox master list for organizing mail.
microsoft-outlook-mail.outlook_create_reply_all_draft medium conf mediumaudit
Stages a reply-all draft on a message, widening the outgoing recipient set to every participant on the thread.
microsoft-outlook-mail.outlook_create_reply_draft medium conf mediumaudit
Stages a reply draft on an existing message, carrying the original thread's content into a new outgoing communication.
microsoft-outlook-mail.outlook_delete_draft low conf mediumallow
Moves an unsent draft to Deleted Items, discarding staged content that was never transmitted.
microsoft-outlook-mail.outlook_delete_filter medium conf mediumaudit
Deletes an inbox rule, potentially removing a mail-routing or security control the user relied on.
microsoft-outlook-mail.outlook_delete_label low conf mediumallow
Removes a category from the mailbox master list, unassigning it from any messages that carried it.
microsoft-outlook-mail.outlook_modify_labels low conf mediumallow
Adds or removes categories on a single message; minor mailbox organization change.
microsoft-outlook-mail.outlook_modify_thread_labels low conf mediumallow
Adds or removes categories across every message in a thread.
microsoft-outlook-mail.outlook_send_draft medium conf mediumaudit
Sends a previously composed draft as the user; the message leaves the mailbox and cannot be recalled.
microsoft-outlook-mail.outlook_set_vacation low conf mediumallow
Sets the automatic-reply message that responds to all incoming senders, including external parties.
microsoft-outlook-mail.outlook_trash_thread medium conf mediumaudit
Moves an entire conversation to Deleted Items; recoverable but removes correspondence from the active mailbox.
microsoft-outlook-mail.outlook_untrash_thread low conf mediumallow
Restores a conversation from Deleted Items back into the active mailbox.
microsoft-outlook-mail.outlook_update_draft medium conf mediumaudit
Modifies the content or recipients of an existing draft before it is sent as the user's correspondence.
microsoft-outlook-mail.outlook_update_label low conf mediumallow
Renames or recolors an existing category in the mailbox master list.
microsoft-outlook-mail.read_resource medium conf mediumaudit
Reads a file, email, or chat by URI, pulling its full body and attachments into agent context.