MCP compliance catalog

Every MCP tool in the SCOPE compliance index, grouped by server — risk posture, regulatory exposure, and the tools that warrant tighter governance.
80MCP servers
1695tools
Reset 80 of 80 servers
Shopify
6 tools · footprint 10
1 med 5 low
Benchling
4 tools · footprint 9
2 high 2 med
AirOps
40 tools · footprint 6
5 med 35 low
Adobe Experience Manager
7 tools · footprint 4
2 med 5 low
Adobe Journey Optimizer
3 tools · footprint 4
3 low
Figma
16 tools · footprint 2
1 med 15 low
Gamma
4 tools · footprint 2
1 med 3 low
AWS Marketplace
11 tools · footprint 1
11 low
Ahrefs
42 tools · footprint 0
42 low
Aiera
39 tools · footprint 0
39 low
Benevity
2 tools · footprint 0
2 low
Bigdata.com
8 tools · footprint 0
8 low
BioRender
2 tools · footprint 0
2 low
Clerk
2 tools · footprint 0
2 low
Sigma
5 tools · footprint 0
5 low
Similarweb
26 tools · footprint 0
26 low
‹ PrevPage 5 of 5Next ›
PostHogDocs ↗
6 high 22 med 8 low · 36 tools · 8 SoD-flagged
regimes APPICCPAGDPRISO_27001LGPDNIST_CSFPIPEDAPIPLPOPIASOC2UK_GDPR

Tools needing tighter control (10 of 36)

posthog.update-feature-flag high conf highhuman approval
Changes who sees a feature in production; can ship or break experiences without code review.
posthog.delete-feature-flag high conf highhuman approval
Removes a flag; dependent code may fail open or closed unexpectedly.
posthog.experiment-launch high conf highhuman approval
Activates an experiment in production; immediately affects user experience.
posthog.experiment-ship-variant high conf highhuman approval
Promotes a variant to all traffic without further review.
posthog.execute-sql high conf highOBO
Runs arbitrary HogQL/SQL across event and person data; can return PII at scale.
posthog.query-run high conf highOBO
Executes saved or ad-hoc queries that may return identified user data.
posthog.scheduled-changes-create medium conf highhuman approval
Schedules a future flag change without re-review at execution time.
posthog.experiment-delete medium conf highhuman approval
Removes experiment configuration and historical results from the UI.
posthog.alert-delete medium conf highhuman approval
Removes a monitoring alert; can blind operators to incidents.
posthog.survey-delete medium conf highhuman approval
Deletes a survey and its responses; may destroy collected feedback.
All other tools (26)
posthog.action-create low conf highallow
Defines a new tracked action for analytics; no production user impact.
posthog.action-delete medium conf highaudit
Removes a tracked action; downstream insights and dashboards may break silently.
posthog.action-update low conf highallow
Updates the definition of an existing tracked action.
posthog.alert-create low conf highallow
Adds a metric alert; no immediate user impact.
posthog.alert-update medium conf highaudit
Modifies thresholds or recipients on a monitoring alert.
posthog.annotation-create low conf highallow
Adds an annotation to time-series charts.
posthog.annotation-delete low conf highallow
Removes a chart annotation.
posthog.cohorts-add-persons-to-static-cohort-partial-update medium conf highaudit
Adds identified persons to a static cohort used for targeting and analysis.
posthog.cohorts-create medium conf highaudit
Defines a user cohort that may target campaigns or feature rollouts.
posthog.cohorts-rm-person-from-static-cohort-partial-update low conf highallow
Removes a person from a static cohort definition.
posthog.create-feature-flag medium conf highaudit
Creates a new feature flag that can gate production behavior on rollout.
posthog.dashboard-create low conf highallow
Creates a new analytics dashboard.
posthog.dashboard-delete medium conf highaudit
Removes a shared dashboard; may disrupt downstream reporting.
posthog.dashboard-update low conf highallow
Modifies dashboard layout or filters.
posthog.experiment-create medium conf highaudit
Starts a new A/B experiment that splits production traffic.
posthog.experiment-end medium conf highaudit
Concludes an experiment and locks the result of record.
posthog.experiment-pause medium conf highaudit
Halts an active experiment mid-run; can invalidate ongoing measurement.
posthog.experiment-resume medium conf highaudit
Restarts a paused experiment, reapplying traffic split.
posthog.experiment-update medium conf highaudit
Modifies an experiment's targeting or variants while running.
posthog.feature-flags-copy-flags-create medium conf highaudit
Copies flags between projects/environments; can replicate untested rollout state.
posthog.query-llm-trace medium conf mediumaudit
Returns LLM trace details including prompts that may contain customer or PII content.
posthog.query-llm-traces-list medium conf mediumaudit
Bulk-lists LLM traces; potential PII exposure depending on prompt content.
posthog.query-logs medium conf highaudit
Searches application logs that can include user identifiers and request payloads.
posthog.scheduled-changes-delete medium conf highaudit
Cancels a scheduled flag change; can leave intended rollout undone.
posthog.survey-create medium conf highaudit
Publishes a survey targeted to identified users; collects new PII responses.
posthog.survey-update medium conf highaudit
Edits a live survey; can change consent text or targeting after launch.