MCP compliance catalog

Every MCP tool in the SCOPE compliance index, grouped by server — risk posture, regulatory exposure, and the tools that warrant tighter governance.
303MCP servers
4476tools
Reset 303 of 303 servers
Intapp Celeste
10 tools · footprint 18
2 high 4 med 4 low
Intercom
13 tools · footprint 18
8 med 5 low
LunarCrush
15 tools · footprint 18
8 med 7 low
Mixpanel
23 tools · footprint 18
1 high 6 med 16 low
Slack
7 tools · footprint 18
2 high 4 med 1 low
Adobe Customer Journey Analytics
25 tools · footprint 17
1 high 5 med 19 low
Campfire
12 tools · footprint 17
7 med 5 low
Canva
32 tools · footprint 17
7 med 25 low
Circleback
11 tools · footprint 17
2 high 3 med 6 low
Dremio Cloud
11 tools · footprint 17
1 critical 1 high 1 med 8 low
Firecrawl
19 tools · footprint 17
7 med 12 low
Granola
6 tools · footprint 17
3 high 1 med 2 low
iManage Work
14 tools · footprint 17
1 high 5 med 8 low
Jotform
5 tools · footprint 17
1 high 2 med 2 low
Mermaid Chart
25 tools · footprint 17
1 high 2 med 22 low
Todoist
25 tools · footprint 17
7 med 18 low
‹ PrevPage 8 of 19Next ›
ExaDocs ↗
1 med 3 low · 4 tools · 0 SoD-flagged
regimes APPICCPAGDPRLGPDPIPEDAPIPLPOPIAUK_GDPR

Tools needing tighter control (0 of 4)

None — every tool is low-risk, high-confidence, and outside PCI/HIPAA payload scope.
All other tools (4)
exa.agent_run medium conf mediumaudit
Runs an autonomous multi-step Exa research agent that crawls, aggregates, and enriches information about people and companies into structured lists, compiling personal data at scale.
exa.web_fetch_exa low conf mediumallow
Reads the full content of one or more arbitrary URLs as markdown, potentially ingesting third-party personal data or injected instructions from those pages.
exa.web_search_advanced_exa low conf highallow
Runs filtered web search with domain, date, category, and subpage-crawl controls, surfacing targeted external content and site structure into the agent context.
exa.web_search_exa low conf highallow
Retrieves live web search results and clean page content for any query, pulling untrusted external text into the agent context that can steer downstream decisions.