MCP compliance catalog

Every MCP tool in the SCOPE compliance index, grouped by server — risk posture, regulatory exposure, and the tools that warrant tighter governance.

387MCP servers

5470tools

Microsoft Outlook Mail

22 tools · footprint 29

5 high 8 med 9 low

12 tools · footprint 29

1 critical 3 high 1 med 7 low COSOGLBA+3 more

20 tools · footprint 29

2 high 14 med 4 low PCI

Vibe Prospecting

12 tools · footprint 29

1 critical 4 high 1 med 6 low

16 tools · footprint 29

1 critical 1 high 1 med 13 low COSOPCI+1 more

9 tools · footprint 28

2 critical 3 high 1 med 3 low COSOGLBA+2 more

25 tools · footprint 28

2 high 15 med 8 low

23 tools · footprint 28

2 high 8 med 13 low

17 tools · footprint 28

1 critical 5 high 4 med 7 low

19 tools · footprint 28

3 high 6 med 10 low COSOSOX

15 tools · footprint 27

1 high 10 med 4 low

Oracle NetSuite

11 tools · footprint 27

3 high 3 med 5 low COSOSOX

5 tools · footprint 27

2 critical 2 med 1 low HIPAA

15 tools · footprint 26

1 critical 1 high 7 med 6 low GLBA

5 tools · footprint 26

1 critical 2 high 2 med COSOSOX

22 tools · footprint 26

1 critical 6 high 15 low

YugabyteDBDocs ↗

2 critical 1 low · 3 tools · 1 SoD-flagged

regimes APPICCPAGDPRISO_27001LGPDPIPEDAPIPLPOPIASOC2UK_GDPR

Tools needing tighter control (2 of 3)

yugabytedb.run_write_query critical conf highhuman approval

Mutates or destroys production data — a single TRUNCATE or DDL statement can wipe a table the connection role owns, with no undo beyond a cluster backup.

yugabytedb.run_read_only_query critical conf highhuman approval

Reads arbitrary SQL results from the cluster, so one unbounded SELECT can pull every row of customer data the connection role can reach into the agent's context.

All other tools (1)

yugabytedb.summarize_database low conf highallow

Returns the table, column, and row-count inventory for a schema, exposing the data model an attacker would need to target specific tables.