MCP compliance catalog

Every MCP tool in the SCOPE compliance index, grouped by server — risk posture, regulatory exposure, and the tools that warrant tighter governance.
303MCP servers
4476tools
Reset 303 of 303 servers
Klaviyo
29 tools · footprint 21
2 high 7 med 20 low
Mercury
13 tools · footprint 21
3 high 8 med 2 low COSOGLBA+2 more
Notion
18 tools · footprint 20
2 high 6 med 10 low
Zoom for Claude
13 tools · footprint 20
3 high 3 med 7 low HIPAA
Asana
23 tools · footprint 19
1 high 4 med 18 low
monday.com
17 tools · footprint 19
1 high 4 med 12 low
Orion by Gravity
20 tools · footprint 19
2 high 6 med 12 low
10x Genomics Cloud
27 tools · footprint 18
1 high 5 med 21 low HIPAA
Airtable
25 tools · footprint 18
1 high 6 med 18 low
Base44
7 tools · footprint 18
2 high 1 med 4 low
ClickHouse
4 tools · footprint 18
1 critical 1 med 2 low
DataGrail (Vera)
23 tools · footprint 18
8 med 15 low
Dropbox
23 tools · footprint 18
1 high 6 med 16 low
Felt Maps
23 tools · footprint 18
2 high 8 med 13 low
HubSpot
12 tools · footprint 18
1 high 3 med 8 low
incident.io
25 tools · footprint 18
1 high 6 med 18 low
‹ PrevPage 7 of 19Next ›
AttentionDocs ↗
1 critical 6 high 18 med · 25 tools · 2 SoD-flagged
regimes APPICCPAGDPRISO_27001LGPDNIST_CSFPIPEDAPIPLPOPIASOC2UK_GDPR

Tools needing tighter control (7 of 25)

attention.create_api_key critical conf highhuman approval
Mints a new API key whose token is displayed only once, creating a long-lived credential that can authenticate full API access if leaked.
attention.delete_api_key high conf highOBO
Permanently revokes an API key, immediately breaking any integration or automation that authenticates with it.
attention.manage_user_role high conf highhuman approval
Assigns or removes a user's role, able to grant elevated privileges that bypass access-review controls.
attention.update_user high conf highhuman approval
Changes a user's profile, role, or seat type, potentially escalating permissions or altering billable seat allocation.
attention.delete_user high conf highOBO
Deactivates a user account, revoking their access to calls and coaching data; reversible via reactivation but disrupts the user immediately.
attention.delete_crm_account high conf highOBO
Disconnects a CRM account and removes its integrations, halting data sync and breaking field mappings across the org.
attention.ask_attention high conf highOBO
Runs AI analysis across up to 25 calls or every call in a deal, aggregating transcript content and insights at scale into a single response.
All other tools (18)
attention.add_team_member medium conf highaudit
Adds a user to a team, granting them visibility into that team's calls, scorecards, and metrics.
attention.connect_integration medium conf highaudit
Generates an OAuth link to connect Salesforce, HubSpot, or Microsoft, establishing a cross-system data flow of CRM and calendar records.
attention.create_crm_integration medium conf mediumaudit
Creates a CRM integration mapping that governs which entities and fields sync between Attention and the connected CRM.
attention.create_snippet medium conf mediumaudit
Creates a shareable clip from a call recording, producing a link that can expose customer conversation content outside the original access scope.
attention.delete_super_agent_session medium conf highaudit
Deletes a super agent session and all its messages, permanently discarding the interaction history for that session.
attention.get_call_details medium conf highaudit
Returns a single call's full transcript, scorecard results, and insights, exposing verbatim customer and prospect conversation content.
attention.get_super_agent_session_history medium conf mediumaudit
Retrieves the full message history of a super agent session, which may contain call excerpts and CRM data surfaced in prior responses.
attention.get_usage_report medium conf highaudit
Returns per-user activity metrics (calls, coaching, AI usage) for a date range, exposing individual reps' monitoring data over time.
attention.invite_user medium conf highaudit
Sends an email invitation that provisions a new user seat and grants access to the org's call and coaching data on acceptance.
attention.list_api_keys medium conf highaudit
Enumerates every API key configured for the org (metadata only, no token values), exposing the credential inventory and integration footprint.
attention.reactivate_user medium conf highaudit
Restores a previously deactivated user, re-granting access to call recordings, transcripts, and coaching data.
attention.remove_team_member medium conf highaudit
Removes a user from a team, revoking their visibility into that team's calls and metrics.
attention.search_calls medium conf highaudit
Searches call recordings by date, rep, team, keyword, opportunity, CRM field, or transcript content, surfacing sensitive customer conversations.
attention.send_super_agent_message medium conf mediumaudit
Sends an instruction to the super agent, which can act across the workspace's calls, CRM data, and configuration on the user's behalf.
attention.sync_crm_fields medium conf mediumaudit
Force-syncs entity and field definitions from the CRM, refreshing the mapping schema used to attach call data to CRM records.
attention.update_crm_integration medium conf mediumaudit
Updates a CRM integration's name, field mappings, or status, changing what data flows between Attention and the CRM.
attention.update_org_settings medium conf highaudit
Changes org-wide settings such as automatic call joining and recording-bot image, affecting how every meeting is captured.
attention.update_user_teams medium conf mediumaudit
Adds or removes a user's team memberships in one call, changing which teams' calls and metrics the user can see.