MCP compliance catalog

Every MCP tool in the SCOPE compliance index, grouped by server — risk posture, regulatory exposure, and the tools that warrant tighter governance.
387MCP servers
5470tools
Reset 387 of 387 servers
Microsoft Teams
25 tools · footprint 33
4 high 11 med 10 low
Privacy.com
10 tools · footprint 33
1 critical 4 high 4 med 1 low COSOGLBA+2 more
Ramp
17 tools · footprint 33
5 high 5 med 7 low COSOGLBA+2 more
Attio
37 tools · footprint 32
4 high 14 med 19 low
Euler
25 tools · footprint 32
1 high 13 med 11 low
Xero
19 tools · footprint 32
2 high 9 med 8 low COSOGLBA+1 more
Box
25 tools · footprint 31
4 high 13 med 8 low
Egnyte
21 tools · footprint 31
3 high 9 med 9 low
Stytch
7 tools · footprint 31
1 critical 2 high 2 med 2 low
Affinity
25 tools · footprint 30
20 med 5 low
BlackRock Advisor Center
25 tools · footprint 30
1 critical 3 high 8 med 13 low COSOGLBA+1 more
Peec AI
25 tools · footprint 30
3 high 14 med 8 low
Superhuman Mail
10 tools · footprint 30
4 high 3 med 3 low
Windsor.ai
18 tools · footprint 30
2 critical 1 high 2 med 13 low COSOSOX
dbt
22 tools · footprint 29
3 high 7 med 12 low COSOSOX
Microsoft Outlook
21 tools · footprint 29
5 high 9 med 7 low
‹ PrevPage 5 of 25Next ›
QuickNodeDocs ↗
5 critical 1 high 10 med 6 low · 22 tools · 5 SoD-flagged
regimes APPICCPACOSOGDPRISO_27001LGPDNIST_CSFPCIPIPEDAPIPLPOPIASOC2SOXUK_GDPR

Tools needing tighter control (7 of 22)

quicknode.enable-tooling-access critical conf mediumhuman approval
Turns on RPC access for developer tooling across the entire account, widening who and what can reach every blockchain endpoint without a per-endpoint review.
quicknode.update-endpoint-security-options critical conf highhuman approval
Toggles endpoint security features such as authentication and validation, so a single call can leave a production RPC endpoint unprotected.
quicknode.create-security-rule critical conf highhuman approval
Writes endpoint access controls including auth tokens and IP allowlists, which decides who can call the endpoint and mints a credential in the process.
quicknode.delete-security-rule critical conf highhuman approval
Removes an access-control rule from an endpoint; dropping the last allowlist or JWT rule exposes the RPC endpoint to any caller.
quicknode.delete-endpoint critical conf highhuman approval
Destroys a production RPC endpoint; every application pointed at that URL loses chain access immediately and the endpoint cannot be restored at the same address.
quicknode.disable-tooling-access high conf mediumOBO
Switches off Tooling Access for the whole account, cutting every dependent developer tool off from RPC until someone re-enables it.
quicknode.get-billing medium conf mediumaudit redact
Exposes the account's invoices and payment history, including transaction records and payment-instrument metadata that sit inside the financial audit trail.
All other tools (15)
quicknode.call-rpc low conf mediumallow
Executes an arbitrary read-only JSON-RPC call against any supported chain, returning public on-chain state such as balances, blocks, and transactions.
quicknode.create-endpoint medium conf highaudit
Provisions new billable RPC infrastructure on a chosen chain and network, adding a reachable production surface that inherits account-level defaults.
quicknode.create-endpoint-method-rate-limit low conf highallow
Adds a throttle for one RPC method on an endpoint, capping how often callers can invoke that method.
quicknode.delete-endpoint-method-rate-limit medium conf highaudit
Removes a per-method throttle, letting an expensive RPC method run unbounded against the endpoint and the usage bill.
quicknode.get-endpoint medium conf mediumaudit
Returns one endpoint's configuration and connection details, which are enough for a caller to reach the chain through it.
quicknode.get-endpoint-log-details medium conf mediumaudit
Opens one log entry in full, including the originating IP and request body of a single RPC call — traceable back to an individual user of the application.
quicknode.get-endpoint-metrics low conf highallow
Reports latency and throughput metrics for an endpoint, an aggregate operational read with no customer data attached.
quicknode.get-rpc-usage low conf highallow
Returns metered RPC consumption broken down by endpoint, method, or chain — the same counters that drive the invoice.
quicknode.list-chains low conf highallow
Lists the chains and networks QuickNode supports, a static catalog lookup with no account or customer data.
quicknode.list-endpoint-logs medium conf mediumaudit
Pulls recent request logs for an endpoint, which carry caller IP addresses, wallet addresses, and request payloads that identify who queried what on-chain.
quicknode.list-endpoint-method-rate-limits low conf highallow
Lists the per-method throttles configured on an endpoint, a read-only view of its traffic policy.
quicknode.list-endpoint-security medium conf highaudit
Reveals an endpoint's live security posture — allowlists, token rules, referrer restrictions — which is exactly the reconnaissance an attacker wants before probing it.
quicknode.list-endpoints medium conf highaudit
Enumerates every endpoint on the account, mapping the organization's full blockchain infrastructure footprint and connection details in one call.
quicknode.update-endpoint-method-rate-limit medium conf highaudit
Changes an existing per-method throttle on a live endpoint, shifting either the cost ceiling or the failure threshold for callers of that method.
quicknode.update-endpoint-rate-limits medium conf highaudit
Rewrites an endpoint's overall throughput ceilings, so a bad value either throttles live traffic into failure or removes the guard against runaway usage cost.