Every MCP tool in the SCOPE compliance index, grouped by server — risk posture, regulatory exposure, and the tools that warrant tighter governance.
1 critical 12 high 10 med 2 low · 25 tools · 5 SoD-flagged
regimes APPICCPACOSOGDPRISO_27001LGPDNIST_CSFPIPEDAPIPLPOPIASOC2SOXUK_GDPR
Tools needing tighter control (15 of 25)
qlik.qlik_update_script critical conf mediumhuman approval
Overwrites an application's entire load script in one call, so the agent controls which source tables are pulled and how they are transformed — the prior script is gone and reported figures can change silently.
qlik.qlik_update_data_product_space high conf mediumOBO
Relocates a curated data product into another space, which rewrites who can reach the datasets it exposes — a shared space can widen visibility far beyond the original audience.
qlik.qlik_create_automation high conf mediumOBO
Stands up a new executable workflow that can call external connectors under stored connection credentials, and can be scheduled to run unattended after the agent session ends.
qlik.qlik_update_automation high conf mediumOBO
Rewrites an existing automation's workspace, schedule, and concurrency, changing what a production workflow does and how often it fires without any review gate.
qlik.qlik_delete_automation high conf mediumhuman approval
Destroys an automation and its configuration outright; scheduled integrations and notifications that depend on it stop firing, with no built-in recovery of the workflow definition.
qlik.qlik_start_automation_run high conf mediumOBO
Executes a prebuilt workflow immediately, firing whatever external actions it contains — notifications, integration writes, scheduled jobs — outside Qlik and beyond the agent's visibility.
qlik.qlik_start_automation_run_interactive high conf mediumOBO
Launches an automation and feeds it input mid-flight, letting the agent drive an external-facing workflow step by step with real side effects on connected systems.
qlik.qlik_update_measure high conf mediumhuman approval
Redefines a governed master measure's expression, so every chart and report built on it reports different numbers with no visible change to the dashboard.
qlik.qlik_delete_measure high conf mediumOBO
Removes a governed master measure, breaking every chart that references it and erasing the agreed definition of a reported metric.
qlik.qlik_delete_data_product high conf mediumhuman approval
Deletes a published data product, cutting off every downstream consumer subscribed to it and discarding the curation work that assembled its dataset set.
qlik.qlik_get_dataset_sample high conf mediumOBO
Returns raw rows from a dataset, so any personal or regulated field in those columns — names, emails, account numbers — lands in the model context verbatim.
qlik.qlik_get_field_values high conf mediumOBO
Enumerates the distinct values of a field, which on a customer, email, or patient-identifier column amounts to dumping that whole column's population.
qlik.qlik_create_data_object high conf mediumOBO
Runs an arbitrary ad-hoc query across the app's whole data model, letting the agent pick any dimension and measure combination rather than being limited to what existing charts already show.
qlik.qlik_update_automation_run_input medium conf lowaudit
Halts an automation mid-execution, which can leave a multi-step integration half applied — some external writes committed, the rest never sent.
qlik.qlik_update_term_status medium conf mediumhuman approval
Promotes a glossary term to verified or marks it deprecated — the steward sign-off that gives a business definition its authority, applied here by whoever holds the token.
All other tools (10)
qlik.qlik_cancel_app_reload medium conf mediumaudit
Aborts a running reload, leaving the application serving stale data until the next scheduled refresh and wasting the compute already spent.
qlik.qlik_create_app low conf mediumallow
Adds an empty analytics app to a chosen space; clutters the space inventory but holds no data until a script is written and reloaded.
qlik.qlik_get_chart_data medium conf mediumaudit
Pages through the data behind an existing visualization; on a table or pivot chart that means customer-level rows, not just aggregates.
qlik.qlik_get_full_glossary_export medium conf mediumaudit
Pulls an entire business glossary in one call — all terms, categories, and asset links — which is both a costly tenant operation and a full dump of the organisation's internal data taxonomy.
qlik.qlik_get_lineage low conf mediumallow
Traces where a dataset or app's data came from and how it was transformed; metadata only, though repeated calls sketch the full upstream topology.
qlik.qlik_get_script medium conf mediumaudit
Returns the full load script for an app, exposing the data-connection names, table selections, and transformation logic behind the dashboard — a map of the underlying source systems.
qlik.qlik_list_automation_connections medium conf mediumaudit
Enumerates every configured automation connection in the tenant, handing over an inventory of the credentialed third-party integrations an automation could be pointed at.
qlik.qlik_search_connection_objects medium conf mediumaudit
Lists every table and view reachable through a data connection, exposing the schema of the upstream warehouse or database to anything holding the connection.
qlik.qlik_search_knowledgebase_chunks medium conf mediumaudit
Retrieves passages from indexed knowledge-base documents, whose contents are whatever the tenant uploaded — internal policy, contracts, or support history included.
qlik.qlik_start_app_reload medium conf mediumaudit
Kicks off a reload that re-executes the load script against live sources and replaces the app's in-memory data, consuming tenant reload capacity while it runs.