MCP compliance catalog

Every MCP tool in the SCOPE compliance index, grouped by server — risk posture, regulatory exposure, and the tools that warrant tighter governance.

387MCP servers

5470tools

Microsoft Outlook Mail

22 tools · footprint 29

5 high 8 med 9 low

12 tools · footprint 29

1 critical 3 high 1 med 7 low COSOGLBA+3 more

20 tools · footprint 29

2 high 14 med 4 low PCI

Vibe Prospecting

12 tools · footprint 29

1 critical 4 high 1 med 6 low

16 tools · footprint 29

1 critical 1 high 1 med 13 low COSOPCI+1 more

9 tools · footprint 28

2 critical 3 high 1 med 3 low COSOGLBA+2 more

25 tools · footprint 28

2 high 15 med 8 low

23 tools · footprint 28

2 high 8 med 13 low

17 tools · footprint 28

1 critical 5 high 4 med 7 low

19 tools · footprint 28

3 high 6 med 10 low COSOSOX

15 tools · footprint 27

1 high 10 med 4 low

Oracle NetSuite

11 tools · footprint 27

3 high 3 med 5 low COSOSOX

5 tools · footprint 27

2 critical 2 med 1 low HIPAA

15 tools · footprint 26

1 critical 1 high 7 med 6 low GLBA

5 tools · footprint 26

1 critical 2 high 2 med COSOSOX

22 tools · footprint 26

1 critical 6 high 15 low

PandaDocDocs ↗

1 critical 3 low · 4 tools · 1 SoD-flagged

regimes APPICCPACOSOGDPRISO_27001LGPDNIST_CSFPIPEDAPIPLPOPIASOC2SOXUK_GDPR

Tools needing tighter control (1 of 4)

pandadoc.execute-request critical conf highhuman approval

Issues any authenticated HTTP call to the PandaDoc API, so one invocation can delete documents and templates or pull signed contracts and signer PII in bulk with no per-endpoint boundary.

All other tools (3)

pandadoc.get-endpoint low conf highallow

Returns the full spec for one PandaDoc endpoint, including its security schemes and server hosts, which maps the auth surface an agent could later call.

pandadoc.list-endpoints low conf highallow

Enumerates every PandaDoc API path and method from the published spec; read-only reconnaissance that exposes no customer data.

pandadoc.search-endpoints low conf highallow

Searches PandaDoc's API reference for endpoints, operations, and parameters matching a keyword; read-only discovery over spec metadata.