Every MCP tool in the SCOPE compliance index, grouped by server — risk posture, regulatory exposure, and the tools that warrant tighter governance.
3 critical 7 high 10 med 6 low · 26 tools · 9 SoD-flagged
regimes APPICCPACOSOGDPRISO_27001LGPDPCIPIPEDAPIPLPOPIAPSD2SOC2SOXUK_GDPR
Tools needing tighter control (19 of 26)
stripe.create_invoice critical conf highhuman approval redact
Creates a billable invoice in Stripe; revenue recognition event tied to the GL.
stripe.finalize_invoice critical conf highhuman approval redact
Locks the invoice and triggers payment collection; commits revenue.
stripe.create_refund critical conf highhuman approval redact
Moves money back to the customer; direct GL impact and chargeback exposure.
stripe.create_invoice_item high conf highOBO redact
Adds line items to a draft invoice; affects amount billed to the customer.
stripe.create_payment_link high conf highhuman approval redact
Generates a publicly shareable URL that initiates a payment flow against your account.
stripe.update_dispute high conf highhuman approval redact
Submits or modifies dispute evidence; affects chargeback outcome and revenue.
stripe.update_subscription high conf highhuman approval redact
Changes plan, quantity, or trial state of a recurring billing relationship.
stripe.cancel_subscription high conf highhuman approval redact
Ends a recurring revenue stream; reverses future-period revenue recognition.
stripe.create_price high conf highhuman approval
Defines pricing applied to subsequent invoices; revenue-recognition relevant.
stripe.list_customers high conf highOBO redact
Bulk read of customer records including billing PII; export risk at scale.
stripe.list_invoices medium conf highaudit redact
Reads invoice history including amounts and customer references.
stripe.list_payment_intents medium conf highaudit redact
Reads payment attempts including amounts, status, and last-four card data.
stripe.execute_analytics medium conf mediumaudit redact
Runs aggregate analytics queries across Stripe data; can return broad financial signals.
stripe.list_disputes medium conf highaudit redact
Reads chargeback / dispute records including amounts and reason codes.
stripe.list_subscriptions medium conf highaudit redact
Reads recurring billing arrangements including customer, plan, and amount.
stripe.create_coupon medium conf highhuman approval
Creates a discount instrument; can be applied to reduce future invoice amounts.
stripe.create_customer medium conf highaudit redact
Creates a customer record holding billing PII (name, email, address).
stripe.search_stripe_resources medium conf mediumaudit redact
Generic search across Stripe resources; can return PII and financial data.
stripe.fetch_stripe_resources medium conf mediumaudit redact
Generic fetch of arbitrary Stripe resources by id; PII and financial exposure depends on target.
All other tools (7)
stripe.create_product medium conf highaudit
Defines a new sellable item in the Stripe catalog.
stripe.get_stripe_account_info low conf highallow
Reads metadata about the connected Stripe account.
stripe.list_coupons low conf highallow
Reads available discount instruments.
stripe.list_prices low conf highallow
Reads pricing definitions; catalog metadata only.
stripe.list_products low conf highallow
Reads catalog products; metadata only.
stripe.retrieve_balance low conf highallow
Reads current available and pending Stripe balance.
stripe.search_stripe_documentation low conf highallow
Searches Stripe public documentation; no account data accessed.