MCP compliance catalog

Every MCP tool in the SCOPE compliance index, grouped by server — risk posture, regulatory exposure, and the tools that warrant tighter governance.
387MCP servers
5470tools
Reset 387 of 387 servers
Microsoft Outlook Mail
22 tools · footprint 29
5 high 8 med 9 low
Stripe API
12 tools · footprint 29
1 critical 3 high 1 med 7 low COSOGLBA+3 more
Ticket Tailor
20 tools · footprint 29
2 high 14 med 4 low PCI
Vibe Prospecting
12 tools · footprint 29
1 critical 4 high 1 med 6 low
Wix
16 tools · footprint 29
1 critical 1 high 1 med 13 low COSOPCI+1 more
GoCardless
9 tools · footprint 28
2 critical 3 high 1 med 3 low COSOGLBA+2 more
GovTribe
25 tools · footprint 28
2 high 15 med 8 low
Magic Patterns
23 tools · footprint 28
2 high 8 med 13 low
Sprouts
17 tools · footprint 28
1 critical 5 high 4 med 7 low
WordPress.com
19 tools · footprint 28
3 high 6 med 10 low COSOSOX
Grain
15 tools · footprint 27
1 high 10 med 4 low
Oracle NetSuite
11 tools · footprint 27
3 high 3 med 5 low COSOSOX
Quo
5 tools · footprint 27
2 critical 2 med 1 low HIPAA
Addepar
15 tools · footprint 26
1 critical 1 high 7 med 6 low GLBA
Databricks
5 tools · footprint 26
1 critical 2 high 2 med COSOSOX
Lusha
22 tools · footprint 26
1 critical 6 high 15 low
‹ PrevPage 6 of 25Next ›
QuickNodeDocs ↗
5 critical 1 high 10 med 6 low · 22 tools · 5 SoD-flagged
regimes APPICCPACOSOGDPRISO_27001LGPDNIST_CSFPCIPIPEDAPIPLPOPIASOC2SOXUK_GDPR

Tools needing tighter control (7 of 22)

quicknode.enable-tooling-access critical conf mediumhuman approval
Turns on RPC access for developer tooling across the entire account, widening who and what can reach every blockchain endpoint without a per-endpoint review.
quicknode.update-endpoint-security-options critical conf highhuman approval
Toggles endpoint security features such as authentication and validation, so a single call can leave a production RPC endpoint unprotected.
quicknode.create-security-rule critical conf highhuman approval
Writes endpoint access controls including auth tokens and IP allowlists, which decides who can call the endpoint and mints a credential in the process.
quicknode.delete-security-rule critical conf highhuman approval
Removes an access-control rule from an endpoint; dropping the last allowlist or JWT rule exposes the RPC endpoint to any caller.
quicknode.delete-endpoint critical conf highhuman approval
Destroys a production RPC endpoint; every application pointed at that URL loses chain access immediately and the endpoint cannot be restored at the same address.
quicknode.disable-tooling-access high conf mediumOBO
Switches off Tooling Access for the whole account, cutting every dependent developer tool off from RPC until someone re-enables it.
quicknode.get-billing medium conf mediumaudit redact
Exposes the account's invoices and payment history, including transaction records and payment-instrument metadata that sit inside the financial audit trail.
All other tools (15)
quicknode.call-rpc low conf mediumallow
Executes an arbitrary read-only JSON-RPC call against any supported chain, returning public on-chain state such as balances, blocks, and transactions.
quicknode.create-endpoint medium conf highaudit
Provisions new billable RPC infrastructure on a chosen chain and network, adding a reachable production surface that inherits account-level defaults.
quicknode.create-endpoint-method-rate-limit low conf highallow
Adds a throttle for one RPC method on an endpoint, capping how often callers can invoke that method.
quicknode.delete-endpoint-method-rate-limit medium conf highaudit
Removes a per-method throttle, letting an expensive RPC method run unbounded against the endpoint and the usage bill.
quicknode.get-endpoint medium conf mediumaudit
Returns one endpoint's configuration and connection details, which are enough for a caller to reach the chain through it.
quicknode.get-endpoint-log-details medium conf mediumaudit
Opens one log entry in full, including the originating IP and request body of a single RPC call — traceable back to an individual user of the application.
quicknode.get-endpoint-metrics low conf highallow
Reports latency and throughput metrics for an endpoint, an aggregate operational read with no customer data attached.
quicknode.get-rpc-usage low conf highallow
Returns metered RPC consumption broken down by endpoint, method, or chain — the same counters that drive the invoice.
quicknode.list-chains low conf highallow
Lists the chains and networks QuickNode supports, a static catalog lookup with no account or customer data.
quicknode.list-endpoint-logs medium conf mediumaudit
Pulls recent request logs for an endpoint, which carry caller IP addresses, wallet addresses, and request payloads that identify who queried what on-chain.
quicknode.list-endpoint-method-rate-limits low conf highallow
Lists the per-method throttles configured on an endpoint, a read-only view of its traffic policy.
quicknode.list-endpoint-security medium conf highaudit
Reveals an endpoint's live security posture — allowlists, token rules, referrer restrictions — which is exactly the reconnaissance an attacker wants before probing it.
quicknode.list-endpoints medium conf highaudit
Enumerates every endpoint on the account, mapping the organization's full blockchain infrastructure footprint and connection details in one call.
quicknode.update-endpoint-method-rate-limit medium conf highaudit
Changes an existing per-method throttle on a live endpoint, shifting either the cost ceiling or the failure threshold for callers of that method.
quicknode.update-endpoint-rate-limits medium conf highaudit
Rewrites an endpoint's overall throughput ceilings, so a bad value either throttles live traffic into failure or removes the guard against runaway usage cost.