MCP compliance catalog

Every MCP tool in the SCOPE compliance index, grouped by server — risk posture, regulatory exposure, and the tools that warrant tighter governance.
387MCP servers
5470tools
Reset 387 of 387 servers
Microsoft Teams
25 tools · footprint 33
4 high 11 med 10 low
Privacy.com
10 tools · footprint 33
1 critical 4 high 4 med 1 low COSOGLBA+2 more
Ramp
17 tools · footprint 33
5 high 5 med 7 low COSOGLBA+2 more
Attio
37 tools · footprint 32
4 high 14 med 19 low
Euler
25 tools · footprint 32
1 high 13 med 11 low
Xero
19 tools · footprint 32
2 high 9 med 8 low COSOGLBA+1 more
Box
25 tools · footprint 31
4 high 13 med 8 low
Egnyte
21 tools · footprint 31
3 high 9 med 9 low
Stytch
7 tools · footprint 31
1 critical 2 high 2 med 2 low
Affinity
25 tools · footprint 30
20 med 5 low
BlackRock Advisor Center
25 tools · footprint 30
1 critical 3 high 8 med 13 low COSOGLBA+1 more
Peec AI
25 tools · footprint 30
3 high 14 med 8 low
Superhuman Mail
10 tools · footprint 30
4 high 3 med 3 low
Windsor.ai
18 tools · footprint 30
2 critical 1 high 2 med 13 low COSOSOX
dbt
22 tools · footprint 29
3 high 7 med 12 low COSOSOX
Microsoft Outlook
21 tools · footprint 29
5 high 9 med 7 low
‹ PrevPage 5 of 25Next ›
Vibe ProspectingDocs ↗
1 critical 4 high 1 med 6 low · 12 tools · 2 SoD-flagged
regimes APPICCPAGDPRISO_27001LGPDPIPEDAPIPLPOPIASOC2UK_GDPR

Tools needing tighter control (5 of 12)

vibeprospecting.export-to-csv critical conf highhuman approval
Writes an entire prospect or company dataset — including contact emails, phone numbers and social profiles — out to a CSV that leaves the platform's access controls, and burns purchased export credits.
vibeprospecting.fetch-entities high conf mediumhuman approval
Pulls filtered lists of company and contact records from a 800M-person data pool, producing bulk third-party personal data inside the session with no data-subject notice.
vibeprospecting.get-dataset high conf mediumhuman approval
Reads back a stored dataset whose rows may hold contact-level personal data, re-exposing an earlier prospecting result to anyone holding the dataset identifier.
vibeprospecting.enrich-prospects high conf highOBO
Appends direct contact details — work and personal email, phone numbers, social profiles — to named individuals, importing third-party personal data into CRM or ATS records.
vibeprospecting.match-prospects high conf highOBO
Resolves partial identifiers to a single identified person in the vendor's contact graph, linking an internal record to an external profile of that individual.
All other tools (7)
vibeprospecting.autocomplete low conf mediumallow
Resolves filter vocabulary such as industry codes and locations; read-only lookup with no record-level data returned.
vibeprospecting.enrich-business low conf highallow
Adds firmographic, technographic and funding attributes to a company record; company-level data only, and any wrong match propagates into CRM segmentation.
vibeprospecting.estimate-cost low conf mediumallow
Prices a planned query in credits before it runs; no credits are consumed and no records are returned.
vibeprospecting.fetch-businesses-events low conf highallow
Returns funding, hiring and growth events for companies, feeding pipeline prioritisation from company-level public signals.
vibeprospecting.fetch-entities-statistics low conf mediumallow
Returns aggregate counts for a filter set, sizing a market segment without surfacing individual records.
vibeprospecting.fetch-prospects-events medium conf mediumaudit
Surfaces behavioural and job-change signals attached to named individuals, a profiling read that data subjects have not consented to within the buyer's systems.
vibeprospecting.match-business low conf highallow
Maps a name or domain to the vendor's canonical company id; a read-only resolution step that every downstream enrichment depends on.