MCP compliance catalog

Every MCP tool in the SCOPE compliance index, grouped by server — risk posture, regulatory exposure, and the tools that warrant tighter governance.
387MCP servers
5470tools
Reset 387 of 387 servers
Outlook Mail
10 tools · footprint 26
6 high 4 med
Airwallex Developer MCP
18 tools · footprint 25
1 critical 8 med 9 low COSOGLBA+3 more
Calendly
22 tools · footprint 25
15 med 7 low
Metabase
13 tools · footprint 25
1 critical 4 high 8 low
Atlassian Rovo
54 tools · footprint 24
13 med 41 low
Cognito Forms
9 tools · footprint 24
2 high 6 med 1 low HIPAA
Local Falcon
25 tools · footprint 24
1 high 9 med 15 low
ZoomInfo
15 tools · footprint 24
5 high 4 med 6 low
Braze
40 tools · footprint 23
1 high 5 med 34 low COSOSOX
Glean
11 tools · footprint 23
3 high 7 med 1 low
Jam
22 tools · footprint 23
1 high 11 med 10 low
Lattice
18 tools · footprint 23
1 high 8 med 9 low
Miro
25 tools · footprint 23
17 med 8 low
Phoenix by HG Insights
25 tools · footprint 23
3 high 5 med 17 low
Turkish Airlines
23 tools · footprint 23
3 high 6 med 14 low PCI
Aiwyn Tax
10 tools · footprint 22
4 high 1 med 5 low COSOGLBA+1 more
‹ PrevPage 7 of 25Next ›
UpworkDocs ↗
1 critical 5 high 9 med 4 low · 19 tools · 1 SoD-flagged
regimes APPICCPACOSOCO_AI_ACTEU_AI_ACTGDPRISO_27001LGPDNIST_AI_RMFPIPEDAPIPLPOPIASOC2SOXUK_GDPR

Tools needing tighter control (6 of 19)

upwork.milestones_and_payments critical conf mediumhuman approval
Approving or rejecting a contract milestone authorizes release of escrowed funds to a freelancer, moving money and changing recognized project cost in a single step.
upwork.financials_and_time_reports high conf mediumOBO
Pulls timesheets, work-diary activity records, and transaction history across every active contract, exposing worker-monitoring data and spend history in bulk.
upwork.offers_and_contracts high conf mediumOBO
Prepares a contract offer carrying scope and rate, committing the client to spend once confirmed on upwork.com, and reads terms of every active contract.
upwork.respond_to_invitations_and_offers high conf mediumOBO
Accepts or declines direct offers and invitations, which starts or forfeits a revenue-bearing contract at the stated rate once confirmed on upwork.com.
upwork.messaging high conf mediumOBO
Reads private message threads with freelancers and applicants and sends messages under the account holder's identity, exposing and impersonating confidential correspondence.
upwork.agency_dashboard high conf mediumOBO
Returns one aggregated view of every agency member's invitations, offers, messages, and contracts, concentrating the whole organization's client data into a single response.
All other tools (13)
upwork.account_and_access low conf mediumallow
Enumerates which Upwork accounts the connected credential can act as — freelancer, client, or agency — plus company details, revealing the agent's effective reach.
upwork.contracts_and_work_delivery medium conf mediumaudit
Submits milestone deliverables and reports logged time against active contracts, which is the billing input a client reviews before funds are released.
upwork.dashboard_overview low conf mediumallow
Summarizes new proposals, pending offers, messages, and contract updates in one read; a status roll-up that changes nothing but reveals current pipeline state.
upwork.draft_and_submit_proposals medium conf mediumaudit
Submits a proposal to a job posting, spending Connects credits and putting a binding rate and pitch in front of a prospective client.
upwork.earnings_and_profile medium conf mediumaudit
Reads earnings and available balance, and rewrites profile fields including employment history, education, and languages — personal data that drives marketplace matching.
upwork.file_attachments medium conf mediumaudit
Uploads and downloads attachments bound to proposals, offers, jobs, and messages — files that routinely carry resumes, identity documents, and client deliverables.
upwork.find_and_shortlist_talent medium conf mediumaudit
Searches freelancers by skill, rate, and location and returns ranked profiles with full work history, producing an automated shortlist that shapes who gets hired.
upwork.find_the_right_jobs low conf mediumallow
Searches and saves marketplace job listings by skill, budget, or type; read-only discovery over publicly posted jobs with no state change beyond favorites.
upwork.invitations_and_proposals medium conf mediumaudit
Invites specific freelancers to apply and declines received proposals off ranked summaries, an adverse hiring decision recorded against a named applicant.
upwork.post_and_manage_jobs medium conf mediumaudit
Publishes and edits live job postings on the public Upwork marketplace, so drafted scope, budget, and requirements become externally visible under the company's name.
upwork.profile_visibility medium conf mediumaudit
Toggles the availability badge and manages profile boost ads, which are paid placements — changes here incur marketplace ad spend and alter inbound lead volume.
upwork.talent_lists low conf mediumallow
Creates talent lists and saves freelancers into them for later consideration; a reversible bookmarking write over already-published marketplace profiles.
upwork.teams_and_members medium conf mediumaudit
Returns the agency's team structure and full member roster, exposing the identities and affiliations of everyone working under the organization.