MCP compliance catalog

Every MCP tool in the SCOPE compliance index, grouped by server — risk posture, regulatory exposure, and the tools that warrant tighter governance.
387MCP servers
5470tools
Reset 387 of 387 servers
Microsoft Teams
25 tools · footprint 33
4 high 11 med 10 low
Privacy.com
10 tools · footprint 33
1 critical 4 high 4 med 1 low COSOGLBA+2 more
Ramp
17 tools · footprint 33
5 high 5 med 7 low COSOGLBA+2 more
Attio
37 tools · footprint 32
4 high 14 med 19 low
Euler
25 tools · footprint 32
1 high 13 med 11 low
Xero
19 tools · footprint 32
2 high 9 med 8 low COSOGLBA+1 more
Box
25 tools · footprint 31
4 high 13 med 8 low
Egnyte
21 tools · footprint 31
3 high 9 med 9 low
Stytch
7 tools · footprint 31
1 critical 2 high 2 med 2 low
Affinity
25 tools · footprint 30
20 med 5 low
BlackRock Advisor Center
25 tools · footprint 30
1 critical 3 high 8 med 13 low COSOGLBA+1 more
Peec AI
25 tools · footprint 30
3 high 14 med 8 low
Superhuman Mail
10 tools · footprint 30
4 high 3 med 3 low
Windsor.ai
18 tools · footprint 30
2 critical 1 high 2 med 13 low COSOSOX
dbt
22 tools · footprint 29
3 high 7 med 12 low COSOSOX
Microsoft Outlook
21 tools · footprint 29
5 high 9 med 7 low
‹ PrevPage 5 of 25Next ›
Zoho CRM
2 critical 10 high 12 med 1 low · 25 tools · 5 SoD-flagged
regimes APPICCPACOSOGDPRISO_27001LGPDNIST_CSFPIPEDAPIPLPOPIASOC2SOXUK_GDPR

Tools needing tighter control (12 of 25)

zoho-crm.Update_Users critical conf mediumhuman approval
Changes profile, role, and status across multiple CRM users in one call, so a single invocation can escalate privileges or deactivate accounts org-wide.
zoho-crm.Delete_Records critical conf highhuman approval
Deletes many CRM records at once, wiping leads, contacts, or deals in bulk with no second approver and only a time-limited recycle-bin window.
zoho-crm.Update_User high conf mediumhuman approval
Reassigns one user's role, profile, or active state, altering what CRM data and records that principal can reach without an access review.
zoho-crm.convertInventory high conf mediumhuman approval
Converts a quote or sales order into the next inventory document, creating a revenue-bearing record and skipping the normal quote-to-invoice approval chain.
zoho-crm.Create_Field high conf mediumhuman approval
Adds a custom field to a live CRM module, changing the schema that reports, pipeline forecasts, and downstream integrations read from.
zoho-crm.putVariableById high conf mediumOBO
Overwrites an org-level variable that functions and integrations depend on, which can redirect outbound calls or replace stored connection values.
zoho-crm.Delete_Record high conf highOBO
Removes a single customer record and its personal data from the active CRM, breaking any reports or automations keyed to that record.
zoho-crm.Update_Records high conf highOBO
Rewrites fields across many records in one call, so a bad mapping can corrupt contact details or deal values throughout a module.
zoho-crm.Upsert_Records high conf highOBO
Creates or overwrites records by matching key, which silently replaces existing customer data when the duplicate-check field resolves to a live record.
zoho-crm.executeCOQLQuery high conf highOBO
Runs an arbitrary COQL query across CRM modules, letting a caller pull field combinations and customer data well beyond the record it was asked about.
zoho-crm.Get_Records high conf highOBO
Pages through every record in a module, producing a bulk dump of contact and deal data including the personal fields on each record.
zoho-crm.getBulkReadJobDetails high conf mediumOBO
Exposes the state and result location of a bulk read job, the path by which entire CRM modules are exported as downloadable files.
All other tools (13)
zoho-crm.Add_Tags_To_Multiple_Records medium conf mediumaudit
Applies tags across a batch of records, which can pull them into tag-driven segments, campaigns, or automation filters unexpectedly.
zoho-crm.Create_Notes low conf highallow
Attaches a note to a CRM record, adding agent-authored commentary that reps will read as part of the customer history.
zoho-crm.Create_Records medium conf highaudit
Inserts new leads, contacts, or deals carrying personal data into the CRM, triggering assignment rules and workflow automations on creation.
zoho-crm.Delete_Notes medium conf highaudit
Erases notes attached to CRM records, destroying the written account of customer conversations and commitments kept against that record.
zoho-crm.delinkRelatedRecord medium conf mediumaudit
Breaks the link between two records, detaching a contact, product, or campaign from its parent and removing that relationship from reports.
zoho-crm.Get_Record medium conf highaudit
Retrieves one CRM record with all its fields, surfacing that individual's contact details and deal history to the agent context.
zoho-crm.Get_Users medium conf highaudit
Returns the full CRM user directory including names, email addresses, roles, and profiles — a ready-made map of staff identities and their access levels.
zoho-crm.getTimelines medium conf mediumaudit
Reads the change history of a record, revealing who edited which field and when — the audit trail admins rely on for CRM disputes.
zoho-crm.getVariables medium conf mediumaudit
Reads every org-level variable, which commonly holds integration endpoints and API credentials placed there by admins and custom functions.
zoho-crm.Search_Records medium conf highaudit
Searches a module by criteria, email, or phone number and returns matching records in full, including the personal fields they hold.
zoho-crm.Update_Record medium conf highaudit
Edits one CRM record's fields, changing customer detail or deal stage and firing any workflow tied to that field.
zoho-crm.updateRelatedRecords medium conf mediumaudit
Rewrites the association data between a parent record and its related list, changing product lines, contact roles, or campaign membership on a deal.
zoho-crm.updateSpecificRelatedRecord medium conf mediumaudit
Modifies one related-record link, adjusting details such as line-item quantity or contact role on the parent record.