MCP compliance catalog

Every MCP tool in the SCOPE compliance index, grouped by server — risk posture, regulatory exposure, and the tools that warrant tighter governance.
387MCP servers
5470tools
Reset 387 of 387 servers
Outlook Mail
10 tools · footprint 26
6 high 4 med
Airwallex Developer MCP
18 tools · footprint 25
1 critical 8 med 9 low COSOGLBA+3 more
Calendly
22 tools · footprint 25
15 med 7 low
Metabase
13 tools · footprint 25
1 critical 4 high 8 low
Atlassian Rovo
54 tools · footprint 24
13 med 41 low
Cognito Forms
9 tools · footprint 24
2 high 6 med 1 low HIPAA
Local Falcon
25 tools · footprint 24
1 high 9 med 15 low
ZoomInfo
15 tools · footprint 24
5 high 4 med 6 low
Braze
40 tools · footprint 23
1 high 5 med 34 low COSOSOX
Glean
11 tools · footprint 23
3 high 7 med 1 low
Jam
22 tools · footprint 23
1 high 11 med 10 low
Lattice
18 tools · footprint 23
1 high 8 med 9 low
Miro
25 tools · footprint 23
17 med 8 low
Phoenix by HG Insights
25 tools · footprint 23
3 high 5 med 17 low
Turkish Airlines
23 tools · footprint 23
3 high 6 med 14 low PCI
Aiwyn Tax
10 tools · footprint 22
4 high 1 med 5 low COSOGLBA+1 more
‹ PrevPage 7 of 25Next ›
Microsoft OutlookDocs ↗
5 high 9 med 7 low · 21 tools · 0 SoD-flagged
regimes APPICCPAGDPRISO_27001LGPDPIPEDAPIPLPOPIASOC2UK_GDPR

Tools needing tighter control (5 of 21)

outlook.mcp_MailTools_graph_mail_sendMail high conf mediumOBO
Sends mail as the signed-in user to arbitrary recipients, allowing mailbox content to leave the organization and the account owner to be impersonated.
outlook.mcp_MailTools_graph_mail_reply high conf mediumOBO
Replies to an existing thread as the user, carrying the quoted original correspondence out to whoever is on the message.
outlook.mcp_MailTools_graph_mail_replyAll high conf mediumOBO
Replies to every participant on a thread, widening the audience for the quoted correspondence to all original recipients including external parties.
outlook.mcp_MailTools_graph_mail_searchMessages high conf mediumOBO
Runs KQL queries across the mailbox through the Graph Search API, surfacing contracts, credentials, and personal data buried anywhere in mail history.
outlook.mcp_MailTools_graph_mail_listSent high conf mediumOBO
Enumerates the Sent Items folder, exposing who the user has corresponded with and what was sent out over time.
All other tools (16)
outlook.mcp_CalendarTools_graph_acceptEvent low conf mediumallow
Accepts a meeting invitation for the user and notifies the organizer that they will attend.
outlook.mcp_CalendarTools_graph_cancelEvent medium conf mediumaudit
Cancels a meeting and pushes cancellation notices to every attendee, clearing it from all participants' calendars.
outlook.mcp_CalendarTools_graph_createEvent low conf mediumallow
Books a new event on a user's calendar, optionally recurring, that can invite attendees and provision an online meeting.
outlook.mcp_CalendarTools_graph_declineEvent low conf mediumallow
Declines a meeting invitation for the user and notifies the organizer that they will not attend.
outlook.mcp_CalendarTools_graph_deleteEvent medium conf mediumaudit
Removes an event from a user's calendar with no built-in undo, erasing the booking and its record for the owner.
outlook.mcp_CalendarTools_graph_findMeetingTimes low conf mediumallow
Proposes meeting slots and locations by reading organizer and attendee availability across their calendars.
outlook.mcp_CalendarTools_graph_getEvent low conf mediumallow
Reads one calendar event with its subject, body, and attendee list from a specified user's calendar.
outlook.mcp_CalendarTools_graph_getSchedule low conf mediumallow
Reads free/busy availability for a user, distribution list, or room resource, revealing when people and spaces are booked.
outlook.mcp_CalendarTools_graph_listCalendarView medium conf mediumaudit
Retrieves every calendar occurrence over a date range for a user, exposing meeting subjects, locations, and participants across the window.
outlook.mcp_CalendarTools_graph_listEvents medium conf mediumaudit
Lists a user's calendar events in bulk; subjects, bodies, and attendee lists can reveal confidential meetings and personal data at scale.
outlook.mcp_CalendarTools_graph_updateEvent low conf mediumallow
Changes an existing event's time, attendees, or content, which reschedules the meeting for everyone invited.
outlook.mcp_MailTools_graph_mail_createMessage medium conf mediumaudit
Composes a draft email with HTML body support in the user's mailbox, staging outgoing correspondence attributed to the account owner.
outlook.mcp_MailTools_graph_mail_deleteMessage medium conf mediumaudit
Removes a message from the signed-in user's mailbox, taking correspondence out of the active folder set and any workflow that depended on it.
outlook.mcp_MailTools_graph_mail_getMessage medium conf mediumaudit
Pulls a single message's full body and headers into agent context, including any personal or confidential content it carries.
outlook.mcp_MailTools_graph_mail_sendDraft medium conf mediumaudit
Transmits an already-composed draft from the mailbox; once sent the message cannot be recalled.
outlook.mcp_MailTools_graph_mail_updateMessage medium conf mediumaudit
Rewrites the subject, body, or categories of a stored message, altering the record of correspondence held in the mailbox.