MCP compliance catalog

Every MCP tool in the SCOPE compliance index, grouped by server — risk posture, regulatory exposure, and the tools that warrant tighter governance.
387MCP servers
5470tools
Reset 387 of 387 servers
Microsoft Teams
25 tools · footprint 33
4 high 11 med 10 low
Privacy.com
10 tools · footprint 33
1 critical 4 high 4 med 1 low COSOGLBA+2 more
Ramp
17 tools · footprint 33
5 high 5 med 7 low COSOGLBA+2 more
Attio
37 tools · footprint 32
4 high 14 med 19 low
Euler
25 tools · footprint 32
1 high 13 med 11 low
Xero
19 tools · footprint 32
2 high 9 med 8 low COSOGLBA+1 more
Box
25 tools · footprint 31
4 high 13 med 8 low
Egnyte
21 tools · footprint 31
3 high 9 med 9 low
Stytch
7 tools · footprint 31
1 critical 2 high 2 med 2 low
Affinity
25 tools · footprint 30
20 med 5 low
BlackRock Advisor Center
25 tools · footprint 30
1 critical 3 high 8 med 13 low COSOGLBA+1 more
Peec AI
25 tools · footprint 30
3 high 14 med 8 low
Superhuman Mail
10 tools · footprint 30
4 high 3 med 3 low
Windsor.ai
18 tools · footprint 30
2 critical 1 high 2 med 13 low COSOSOX
dbt
22 tools · footprint 29
3 high 7 med 12 low COSOSOX
Microsoft Outlook
21 tools · footprint 29
5 high 9 med 7 low
‹ PrevPage 5 of 25Next ›
Supabase
4 critical 4 high 8 med 16 low · 32 tools · 8 SoD-flagged
regimes APPICCPACOSOGDPRISO_27001LGPDNIST_CSFPIPEDAPIPLPOPIASOC2SOXUK_GDPR

Tools needing tighter control (8 of 32)

supabase.apply_migration critical conf highhuman approval
Applies a DDL migration to the live database; can alter or drop schema with no review gate.
supabase.execute_sql critical conf highhuman approval
Runs arbitrary SQL with project privileges; full read/write access to all tables including PII.
supabase.deploy_edge_function critical conf highhuman approval
Deploys server-side function code to production; arbitrary code execution path with database access.
supabase.merge_branch critical conf highhuman approval
Promotes branch migrations and edge functions into production.
supabase.pause_project high conf highhuman approval
Pauses a project; takes the database offline and breaks any apps depending on it.
supabase.delete_branch high conf highhuman approval
Deletes a branch and its data; irreversible.
supabase.reset_branch high conf highhuman approval
Resets branch migration state; destroys any uncommitted schema work.
supabase.update_storage_config high conf highhuman approval
Modifies storage limits and policies; can broaden public access to user-uploaded content.
All other tools (24)
supabase.confirm_cost medium conf mediumaudit
Acknowledges projected cost; precondition for paid resource creation.
supabase.create_branch medium conf highaudit
Creates an isolated database branch (paid feature); incurs cost.
supabase.create_project medium conf highaudit
Provisions a new Postgres project; incurs cost and expands the org's footprint.
supabase.generate_typescript_types low conf highallow
Generates TypeScript types from the database schema.
supabase.get_advisors low conf highallow
Reads security and performance advisor findings for the project.
supabase.get_cost low conf highallow
Returns the cost estimate for a planned action.
supabase.get_edge_function medium conf highaudit
Returns the source of an edge function; may expose business logic and embedded secrets.
supabase.get_logs medium conf highaudit
Returns service logs; may contain user identifiers, IPs, and request payloads.
supabase.get_organization low conf highallow
Returns details of a single organization including plan.
supabase.get_project low conf highallow
Returns details of a single project.
supabase.get_project_url low conf highallow
Returns the project API URL.
supabase.get_publishable_keys medium conf mediumaudit
Returns the project's anon/publishable keys; intended for client use but still credentials.
supabase.get_storage_config low conf highallow
Reads storage configuration including limits.
supabase.list_branches low conf highallow
Lists project branches.
supabase.list_edge_functions low conf highallow
Lists deployed edge functions for the project.
supabase.list_extensions low conf highallow
Lists installed Postgres extensions.
supabase.list_migrations low conf highallow
Lists database migrations applied to the project.
supabase.list_organizations low conf highallow
Lists organizations the user belongs to.
supabase.list_projects low conf highallow
Lists projects in the connected organization.
supabase.list_storage_buckets low conf highallow
Lists storage buckets.
supabase.list_tables low conf highallow
Enumerates database tables; schema-level read.
supabase.rebase_branch medium conf highaudit
Rebases a branch onto production; can introduce migration conflicts.
supabase.restore_project medium conf highaudit
Restores a paused project back to active; resumes billing.
supabase.search_docs low conf highallow
Searches Supabase documentation.