MCP compliance catalog

Every MCP tool in the SCOPE compliance index, grouped by server — risk posture, regulatory exposure, and the tools that warrant tighter governance.
303MCP servers
4476tools
Reset 303 of 303 servers
Magic Patterns
23 tools · footprint 28
2 high 8 med 13 low
WordPress.com
19 tools · footprint 28
3 high 6 med 10 low COSOSOX
Grain
15 tools · footprint 27
1 high 10 med 4 low
Oracle NetSuite
11 tools · footprint 27
3 high 3 med 5 low COSOSOX
Databricks
5 tools · footprint 26
1 critical 2 high 2 med COSOSOX
Lusha
22 tools · footprint 26
1 critical 6 high 15 low
Outlook Mail
10 tools · footprint 26
6 high 4 med
Airwallex Developer MCP
18 tools · footprint 25
1 critical 8 med 9 low COSOGLBA+3 more
Calendly
22 tools · footprint 25
15 med 7 low
Metabase
13 tools · footprint 25
1 critical 4 high 8 low
Atlassian Rovo
54 tools · footprint 24
13 med 41 low
Cognito Forms
9 tools · footprint 24
2 high 6 med 1 low HIPAA
Local Falcon
25 tools · footprint 24
1 high 9 med 15 low
ZoomInfo
15 tools · footprint 24
5 high 4 med 6 low
Braze
40 tools · footprint 23
1 high 5 med 34 low COSOSOX
Glean
11 tools · footprint 23
3 high 7 med 1 low
‹ PrevPage 5 of 19Next ›
Superhuman Mail
4 high 3 med 3 low · 10 tools · 3 SoD-flagged
regimes APPICCPAGDPRISO_27001LGPDPIPEDAPIPLPOPIASOC2UK_GDPR

Tools needing tighter control (4 of 10)

superhuman-mail.query_email_and_calendar high conf mediumhuman approval
Runs semantic search across the entire mailbox and calendar; a single query can surface PII, credentials, contracts, and confidential meeting details.
superhuman-mail.list_email high conf mediumhuman approval
Searches and returns emails matching sender, subject, or date criteria; can pull message content and PII across correspondence at scale.
superhuman-mail.get_email_thread high conf mediumhuman approval
Fetches a full email thread's contents; entire message bodies and quoted history enter agent context.
superhuman-mail.send_email high conf highOBO
Sends an email to arbitrary recipients on the user's behalf; irreversible once delivered and can transmit confidential data outside the organization.
All other tools (6)
superhuman-mail.create_or_update_draft medium conf mediumaudit
Composes or edits an email draft in the user's voice; not auto-sent but stages outbound content that may include personal or confidential information.
superhuman-mail.create_or_update_event medium conf mediumaudit
Creates or updates calendar events including attendees, times, and details; writes participant personal data to the user's calendar.
superhuman-mail.get_availability_calendar low conf mediumallow
Finds free meeting times across a group of participants; reveals attendees' availability but not event contents.
superhuman-mail.get_read_statuses low conf mediumallow
Returns read/unread status for emails matching criteria; exposes recipient engagement metadata.
superhuman-mail.update_email medium conf mediumaudit
Applies labels, reminders, star, trash, done, or read/unread state to emails; reversible mailbox organization changes.
superhuman-mail.update_preferences_email_and_calendar low conf mediumallow
Updates the writing style, calendar preferences, and stored facts the assistant uses to draft emails and events on the user's behalf.