MCP compliance catalog

Every MCP tool in the SCOPE compliance index, grouped by server — risk posture, regulatory exposure, and the tools that warrant tighter governance.
303MCP servers
4476tools
Reset 303 of 303 servers
Jam
22 tools · footprint 23
1 high 11 med 10 low
Lattice
18 tools · footprint 23
1 high 8 med 9 low
Miro
25 tools · footprint 23
17 med 8 low
Aiwyn Tax
10 tools · footprint 22
4 high 1 med 5 low COSOGLBA+1 more
Ashby
17 tools · footprint 22
1 high 8 med 8 low
Lucid
18 tools · footprint 22
2 high 8 med 8 low
Outreach
17 tools · footprint 22
2 high 6 med 9 low COSOSOX
PlanetScale
16 tools · footprint 22
1 critical 1 high 14 low COSOSOX
Square
3 tools · footprint 22
1 critical 2 low COSOGLBA+3 more
Airtable
19 tools · footprint 21
11 med 8 low
BrightHire
11 tools · footprint 21
1 high 6 med 4 low
Customer.io
8 tools · footprint 21
1 critical 2 high 5 low
Customer.io
8 tools · footprint 21
1 critical 2 high 5 low
Customer.io
8 tools · footprint 21
1 critical 2 high 5 low
Customer.io
8 tools · footprint 21
1 critical 2 high 5 low
Harness
11 tools · footprint 21
1 critical 3 high 7 low COSOSOX
‹ PrevPage 6 of 19Next ›
Mermaid ChartDocs ↗
1 high 2 med 22 low · 25 tools · 1 SoD-flagged
regimes APPICCPAGDPRISO_27001LGPDPIPEDAPIPLPOPIASOC2UK_GDPR

Tools needing tighter control (1 of 25)

mermaid-chart.push_file high conf highhuman approval
Writes arbitrary file content straight onto a named branch — including the default branch — so a single agent call lands code in the repository with no pull request or reviewer in the loop.
All other tools (24)
mermaid-chart.create_issue low conf highallow
Files a new issue in the repository, notifying watchers and adding tracker noise; fully reversible by closing or deleting the issue.
mermaid-chart.create_pr medium conf highaudit
Creates a branch, commits file changes, and opens a pull request; the change stays gated behind review but consumes reviewer attention and can be used to smuggle edits into a busy repo.
mermaid-chart.generate_jira_kanban_board low conf mediumallow
Renders a project's issues as a kanban board with optional assignee badges, exposing per-person workload across the whole project.
mermaid-chart.generate_ticket_dependency_tree low conf highallow
Reads a project's issue graph and renders ticket keys, summaries, and statuses, exposing roadmap sequencing and blockers outside Jira's permission model.
mermaid-chart.generate_ticket_diagram low conf mediumallow
Fetches a ticket's subtasks, parent, links, and recent comments in one call, pulling named commenters and their free-text remarks into the diagram output.
mermaid-chart.generate_ticket_timeline low conf mediumallow
Reconstructs a ticket's full changelog including who changed status, assignee, and priority and when — an activity trail attributable to named employees.
mermaid-chart.get_diagram_summary low conf highallow
Summarises a supplied diagram in a few sentences; the diagram body is transmitted to the vendor service but nothing is written back.
mermaid-chart.get_diagram_title low conf highallow
Suggests a title for a supplied diagram; read-only analysis with no persistence on either side.
mermaid-chart.get_issue_comments low conf highallow
Returns the full comment thread on an issue, including internal triage discussion on private repositories.
mermaid-chart.get_mermaid_syntax_document low conf highallow
Returns public Mermaid.js syntax reference material; no tenant data is read or written.
mermaid-chart.get_notion_mermaid_diagram_by_block_id low conf highallow
Reads one diagram block's source and caption from a Notion workspace; scope is limited to the referenced block.
mermaid-chart.get_notion_page_mermaid_diagrams low conf highallow
Extracts every diagram block from a Notion page, moving internal architecture and process documentation into the agent context.
mermaid-chart.get_pull_comments low conf highallow
Returns every thread and inline review comment on a pull request, exposing internal review discussion from private repositories to the agent context.
mermaid-chart.insert_notion_mermaid_diagram low conf highallow
Appends a new diagram block to the end of a Notion page; additive and easily removed, but edits shared workspace documentation.
mermaid-chart.list_branches low conf highallow
Returns branch names for a repository, exposing release and feature-branch naming conventions that hint at unreleased work.
mermaid-chart.list_issues low conf highallow
Reads the issue backlog of a repository, surfacing unresolved defects and roadmap detail from private projects.
mermaid-chart.list_mermaid_files low conf highallow
Searches a repository's tree for diagram files, exposing directory structure and file naming of private repositories.
mermaid-chart.list_pulls low conf highallow
Enumerates open and closed pull requests for a repository, revealing in-flight work and branch naming across private projects.
mermaid-chart.list_repos low conf highallow
Enumerates every repository the supplied GitHub token can see, including private ones, giving a complete inventory of the org's codebases.
mermaid-chart.list_tools low conf mediumallow
Enumerates every MCP server and tool wired into the workspace, handing a caller a map of the connected systems it could reach next.
mermaid-chart.read_mermaid_file low conf highallow
Pulls the contents of a diagram file out of a private repository; the .mmd restriction keeps source code out of reach but architecture diagrams still leave the repo.
mermaid-chart.search_mermaid_icons low conf highallow
Looks up icon identifiers from public icon sets; no customer data is involved.
mermaid-chart.update_notion_mermaid_diagram medium conf highaudit
Overwrites the source of an existing diagram block on a Notion page, replacing published documentation content that colleagues rely on; recoverable only through Notion page history.
mermaid-chart.validate_and_render_mermaid_diagram low conf highallow
Sends diagram source to the hosted Mermaid renderer and returns an image, so any system or data-flow detail in the diagram transits a third-party service.