MCP compliance catalog

Every MCP tool in the SCOPE compliance index, grouped by server — risk posture, regulatory exposure, and the tools that warrant tighter governance.

387MCP servers

5470tools

10 tools · footprint 26

Airwallex Developer MCP

18 tools · footprint 25

1 critical 8 med 9 low COSOGLBA+3 more

22 tools · footprint 25

13 tools · footprint 25

1 critical 4 high 8 low

54 tools · footprint 24

9 tools · footprint 24

2 high 6 med 1 low HIPAA

25 tools · footprint 24

1 high 9 med 15 low

15 tools · footprint 24

5 high 4 med 6 low

40 tools · footprint 23

1 high 5 med 34 low COSOSOX

11 tools · footprint 23

3 high 7 med 1 low

22 tools · footprint 23

1 high 11 med 10 low

18 tools · footprint 23

1 high 8 med 9 low

25 tools · footprint 23

Phoenix by HG Insights

25 tools · footprint 23

3 high 5 med 17 low

Turkish Airlines

23 tools · footprint 23

3 high 6 med 14 low PCI

10 tools · footprint 22

4 high 1 med 5 low COSOGLBA+1 more

YugabyteDBDocs ↗

2 critical 1 low · 3 tools · 1 SoD-flagged

regimes APPICCPAGDPRISO_27001LGPDPIPEDAPIPLPOPIASOC2UK_GDPR

Tools needing tighter control (2 of 3)

yugabytedb.run_write_query critical conf highhuman approval

Mutates or destroys production data — a single TRUNCATE or DDL statement can wipe a table the connection role owns, with no undo beyond a cluster backup.

yugabytedb.run_read_only_query critical conf highhuman approval

Reads arbitrary SQL results from the cluster, so one unbounded SELECT can pull every row of customer data the connection role can reach into the agent's context.

All other tools (1)

yugabytedb.summarize_database low conf highallow

Returns the table, column, and row-count inventory for a schema, exposing the data model an attacker would need to target specific tables.