MCP compliance catalog

Every MCP tool in the SCOPE compliance index, grouped by server — risk posture, regulatory exposure, and the tools that warrant tighter governance.

387MCP servers

5470tools

Microsoft Outlook Mail

22 tools · footprint 29

5 high 8 med 9 low

12 tools · footprint 29

1 critical 3 high 1 med 7 low COSOGLBA+3 more

20 tools · footprint 29

2 high 14 med 4 low PCI

Vibe Prospecting

12 tools · footprint 29

1 critical 4 high 1 med 6 low

16 tools · footprint 29

1 critical 1 high 1 med 13 low COSOPCI+1 more

9 tools · footprint 28

2 critical 3 high 1 med 3 low COSOGLBA+2 more

25 tools · footprint 28

2 high 15 med 8 low

23 tools · footprint 28

2 high 8 med 13 low

17 tools · footprint 28

1 critical 5 high 4 med 7 low

19 tools · footprint 28

3 high 6 med 10 low COSOSOX

15 tools · footprint 27

1 high 10 med 4 low

Oracle NetSuite

11 tools · footprint 27

3 high 3 med 5 low COSOSOX

5 tools · footprint 27

2 critical 2 med 1 low HIPAA

15 tools · footprint 26

1 critical 1 high 7 med 6 low GLBA

5 tools · footprint 26

1 critical 2 high 2 med COSOSOX

22 tools · footprint 26

1 critical 6 high 15 low

Granola

3 high 1 med 2 low · 6 tools · 0 SoD-flagged

regimes APPICCPAGDPRISO_27001LGPDPIPEDAPIPLPOPIASOC2UK_GDPR

Tools needing tighter control (3 of 6)

granola.query_granola_meetings high conf highOBO

Conversational Q&A over meeting notes; answers may surface confidential discussions, customer PII, or material non-public information.

granola.get_meetings high conf highOBO

Returns full meeting notes (private and enhanced) for specified IDs; exposes verbatim internal discussions.

granola.get_meeting_transcript high conf highOBO

Returns the verbatim transcript of a meeting; raw recording of private business conversations may include PII or PHI.

All other tools (3)

granola.get_account_info low conf highallow

Returns the connected user's email and workspace identifier.

granola.list_meeting_folders low conf highallow

Lists folders the user is a member of.

granola.list_meetings medium conf highaudit

Lists meetings with titles, dates, and attendees; titles alone can reveal sensitive context (M&A, layoffs).