MCP compliance catalog

Every MCP tool in the SCOPE compliance index, grouped by server — risk posture, regulatory exposure, and the tools that warrant tighter governance.
303MCP servers
4476tools
Reset 303 of 303 servers
Klaviyo
29 tools · footprint 21
2 high 7 med 20 low
Mercury
13 tools · footprint 21
3 high 8 med 2 low COSOGLBA+2 more
Notion
18 tools · footprint 20
2 high 6 med 10 low
Zoom for Claude
13 tools · footprint 20
3 high 3 med 7 low HIPAA
Asana
23 tools · footprint 19
1 high 4 med 18 low
monday.com
17 tools · footprint 19
1 high 4 med 12 low
Orion by Gravity
20 tools · footprint 19
2 high 6 med 12 low
10x Genomics Cloud
27 tools · footprint 18
1 high 5 med 21 low HIPAA
Airtable
25 tools · footprint 18
1 high 6 med 18 low
Base44
7 tools · footprint 18
2 high 1 med 4 low
ClickHouse
4 tools · footprint 18
1 critical 1 med 2 low
DataGrail (Vera)
23 tools · footprint 18
8 med 15 low
Dropbox
23 tools · footprint 18
1 high 6 med 16 low
Felt Maps
23 tools · footprint 18
2 high 8 med 13 low
HubSpot
12 tools · footprint 18
1 high 3 med 8 low
incident.io
25 tools · footprint 18
1 high 6 med 18 low
‹ PrevPage 7 of 19Next ›
ExaDocs ↗
1 med 3 low · 4 tools · 0 SoD-flagged
regimes APPICCPAGDPRLGPDPIPEDAPIPLPOPIAUK_GDPR

Tools needing tighter control (0 of 4)

None — every tool is low-risk, high-confidence, and outside PCI/HIPAA payload scope.
All other tools (4)
exa.agent_run medium conf mediumaudit
Runs an autonomous multi-step Exa research agent that crawls, aggregates, and enriches information about people and companies into structured lists, compiling personal data at scale.
exa.web_fetch_exa low conf mediumallow
Reads the full content of one or more arbitrary URLs as markdown, potentially ingesting third-party personal data or injected instructions from those pages.
exa.web_search_advanced_exa low conf highallow
Runs filtered web search with domain, date, category, and subpage-crawl controls, surfacing targeted external content and site structure into the agent context.
exa.web_search_exa low conf highallow
Retrieves live web search results and clean page content for any query, pulling untrusted external text into the agent context that can steer downstream decisions.