MCP compliance catalog

Every MCP tool in the SCOPE compliance index, grouped by server — risk posture, regulatory exposure, and the tools that warrant tighter governance.
387MCP servers
5470tools
Reset 387 of 387 servers
Outlook Mail
10 tools · footprint 26
6 high 4 med
Airwallex Developer MCP
18 tools · footprint 25
1 critical 8 med 9 low COSOGLBA+3 more
Calendly
22 tools · footprint 25
15 med 7 low
Metabase
13 tools · footprint 25
1 critical 4 high 8 low
Atlassian Rovo
54 tools · footprint 24
13 med 41 low
Cognito Forms
9 tools · footprint 24
2 high 6 med 1 low HIPAA
Local Falcon
25 tools · footprint 24
1 high 9 med 15 low
ZoomInfo
15 tools · footprint 24
5 high 4 med 6 low
Braze
40 tools · footprint 23
1 high 5 med 34 low COSOSOX
Glean
11 tools · footprint 23
3 high 7 med 1 low
Jam
22 tools · footprint 23
1 high 11 med 10 low
Lattice
18 tools · footprint 23
1 high 8 med 9 low
Miro
25 tools · footprint 23
17 med 8 low
Phoenix by HG Insights
25 tools · footprint 23
3 high 5 med 17 low
Turkish Airlines
23 tools · footprint 23
3 high 6 med 14 low PCI
Aiwyn Tax
10 tools · footprint 22
4 high 1 med 5 low COSOGLBA+1 more
‹ PrevPage 7 of 25Next ›
QuickNodeDocs ↗
5 critical 1 high 10 med 6 low · 22 tools · 5 SoD-flagged
regimes APPICCPACOSOGDPRISO_27001LGPDNIST_CSFPCIPIPEDAPIPLPOPIASOC2SOXUK_GDPR

Tools needing tighter control (7 of 22)

quicknode.enable-tooling-access critical conf mediumhuman approval
Turns on RPC access for developer tooling across the entire account, widening who and what can reach every blockchain endpoint without a per-endpoint review.
quicknode.update-endpoint-security-options critical conf highhuman approval
Toggles endpoint security features such as authentication and validation, so a single call can leave a production RPC endpoint unprotected.
quicknode.create-security-rule critical conf highhuman approval
Writes endpoint access controls including auth tokens and IP allowlists, which decides who can call the endpoint and mints a credential in the process.
quicknode.delete-security-rule critical conf highhuman approval
Removes an access-control rule from an endpoint; dropping the last allowlist or JWT rule exposes the RPC endpoint to any caller.
quicknode.delete-endpoint critical conf highhuman approval
Destroys a production RPC endpoint; every application pointed at that URL loses chain access immediately and the endpoint cannot be restored at the same address.
quicknode.disable-tooling-access high conf mediumOBO
Switches off Tooling Access for the whole account, cutting every dependent developer tool off from RPC until someone re-enables it.
quicknode.get-billing medium conf mediumaudit redact
Exposes the account's invoices and payment history, including transaction records and payment-instrument metadata that sit inside the financial audit trail.
All other tools (15)
quicknode.call-rpc low conf mediumallow
Executes an arbitrary read-only JSON-RPC call against any supported chain, returning public on-chain state such as balances, blocks, and transactions.
quicknode.create-endpoint medium conf highaudit
Provisions new billable RPC infrastructure on a chosen chain and network, adding a reachable production surface that inherits account-level defaults.
quicknode.create-endpoint-method-rate-limit low conf highallow
Adds a throttle for one RPC method on an endpoint, capping how often callers can invoke that method.
quicknode.delete-endpoint-method-rate-limit medium conf highaudit
Removes a per-method throttle, letting an expensive RPC method run unbounded against the endpoint and the usage bill.
quicknode.get-endpoint medium conf mediumaudit
Returns one endpoint's configuration and connection details, which are enough for a caller to reach the chain through it.
quicknode.get-endpoint-log-details medium conf mediumaudit
Opens one log entry in full, including the originating IP and request body of a single RPC call — traceable back to an individual user of the application.
quicknode.get-endpoint-metrics low conf highallow
Reports latency and throughput metrics for an endpoint, an aggregate operational read with no customer data attached.
quicknode.get-rpc-usage low conf highallow
Returns metered RPC consumption broken down by endpoint, method, or chain — the same counters that drive the invoice.
quicknode.list-chains low conf highallow
Lists the chains and networks QuickNode supports, a static catalog lookup with no account or customer data.
quicknode.list-endpoint-logs medium conf mediumaudit
Pulls recent request logs for an endpoint, which carry caller IP addresses, wallet addresses, and request payloads that identify who queried what on-chain.
quicknode.list-endpoint-method-rate-limits low conf highallow
Lists the per-method throttles configured on an endpoint, a read-only view of its traffic policy.
quicknode.list-endpoint-security medium conf highaudit
Reveals an endpoint's live security posture — allowlists, token rules, referrer restrictions — which is exactly the reconnaissance an attacker wants before probing it.
quicknode.list-endpoints medium conf highaudit
Enumerates every endpoint on the account, mapping the organization's full blockchain infrastructure footprint and connection details in one call.
quicknode.update-endpoint-method-rate-limit medium conf highaudit
Changes an existing per-method throttle on a live endpoint, shifting either the cost ceiling or the failure threshold for callers of that method.
quicknode.update-endpoint-rate-limits medium conf highaudit
Rewrites an endpoint's overall throughput ceilings, so a bad value either throttles live traffic into failure or removes the guard against runaway usage cost.