MCP compliance catalog

Every MCP tool in the SCOPE compliance index, grouped by server — risk posture, regulatory exposure, and the tools that warrant tighter governance.
387MCP servers
5470tools
Reset 387 of 387 servers
Microsoft Outlook Mail
22 tools · footprint 29
5 high 8 med 9 low
Stripe API
12 tools · footprint 29
1 critical 3 high 1 med 7 low COSOGLBA+3 more
Ticket Tailor
20 tools · footprint 29
2 high 14 med 4 low PCI
Vibe Prospecting
12 tools · footprint 29
1 critical 4 high 1 med 6 low
Wix
16 tools · footprint 29
1 critical 1 high 1 med 13 low COSOPCI+1 more
GoCardless
9 tools · footprint 28
2 critical 3 high 1 med 3 low COSOGLBA+2 more
GovTribe
25 tools · footprint 28
2 high 15 med 8 low
Magic Patterns
23 tools · footprint 28
2 high 8 med 13 low
Sprouts
17 tools · footprint 28
1 critical 5 high 4 med 7 low
WordPress.com
19 tools · footprint 28
3 high 6 med 10 low COSOSOX
Grain
15 tools · footprint 27
1 high 10 med 4 low
Oracle NetSuite
11 tools · footprint 27
3 high 3 med 5 low COSOSOX
Quo
5 tools · footprint 27
2 critical 2 med 1 low HIPAA
Addepar
15 tools · footprint 26
1 critical 1 high 7 med 6 low GLBA
Databricks
5 tools · footprint 26
1 critical 2 high 2 med COSOSOX
Lusha
22 tools · footprint 26
1 critical 6 high 15 low
‹ PrevPage 6 of 25Next ›
Customer.ioDocs ↗
1 critical 2 high 5 low · 8 tools · 1 SoD-flagged
regimes APPICCPAGDPRISO_27001LGPDPIPEDAPIPLPOPIASOC2UK_GDPR

Tools needing tighter control (3 of 8)

customerio-api.cio_delete_api critical conf mediumhuman approval
Issues arbitrary authenticated DELETE calls against any Customer.io endpoint, irreversibly removing customer records, segments, or campaigns with no built-in recovery path.
customerio-api.cio_write_api high conf mediumOBO
Issues arbitrary POST, PUT, and PATCH calls to any endpoint, letting the agent create or edit customer profiles, attributes, segments, and campaigns — including messaging that reaches real recipients.
customerio-api.cio_read_api high conf mediumOBO
Issues arbitrary authenticated GET calls against any endpoint, enabling retrieval and listing of customer profiles, attributes, and behavioral event data at scale.
All other tools (5)
customerio-api.cio_auth_status low conf mediumallow
Reveals the current token's authentication state and the set of workspaces it can reach, exposing the credential's effective access scope.
customerio-api.cio_prime low conf mediumallow
Loads the Customer.io API reference bundle into the agent context; a read-only priming call with no data-plane effect.
customerio-api.cio_schema low conf mediumallow
Enumerates available Customer.io API resources, endpoints, and parameters for discovery before any call is made; read-only metadata.
customerio-api.cio_skills_list low conf mediumallow
Lists the available agent skills — task-specific instruction sets — without executing any of them.
customerio-api.cio_skills_read low conf mediumallow
Returns the full step-by-step content of a named agent skill so the agent can follow the workflow; read-only retrieval.