MCP compliance catalog
Every MCP tool in the SCOPE compliance index, grouped by server — risk posture, regulatory exposure, and the tools that warrant tighter governance.
387
MCP servers
5470
tools
All risk
Has critical
High & up
Medium & up
All regimes
APPI
CCPA
COSO
CO_AI_ACT
EU_AI_ACT
FDA_PART_11
GDPR
GLBA
HIPAA
ISO_27001
ISO_42001
LGPD
NIST_AI_RMF
NIST_CSF
NY_DFS_500
PCI
PIPEDA
PIPL
POPIA
PSD2
SOC2
SOX
UK_GDPR
Sort: footprint
Sort: tools
Sort: regimes
Sort: name
SoD only
Filter
Reset
387 of 387 servers
Ashby
17 tools · footprint 22
1 high
8 med
8 low
Lucid
18 tools · footprint 22
2 high
8 med
8 low
Outreach
17 tools · footprint 22
2 high
6 med
9 low
COSO
SOX
PlanetScale
16 tools · footprint 22
1 critical
1 high
14 low
COSO
SOX
Square
3 tools · footprint 22
1 critical
2 low
COSO
GLBA
+3 more
Square
3 tools · footprint 22
1 critical
2 low
COSO
GLBA
+3 more
Airtable
19 tools · footprint 21
11 med
8 low
BrightHire
11 tools · footprint 21
1 high
6 med
4 low
Customer.io
8 tools · footprint 21
1 critical
2 high
5 low
Customer.io
8 tools · footprint 21
1 critical
2 high
5 low
Customer.io
8 tools · footprint 21
1 critical
2 high
5 low
Customer.io
8 tools · footprint 21
1 critical
2 high
5 low
Harness
11 tools · footprint 21
1 critical
3 high
7 low
COSO
SOX
Klaviyo
29 tools · footprint 21
2 high
7 med
20 low
Mercury
13 tools · footprint 21
3 high
8 med
2 low
COSO
GLBA
+2 more
Webex Meetings
8 tools · footprint 21
1 critical
2 high
3 med
2 low
‹ Prev
Page 8 of 25
Next ›
StubHub
Docs ↗
3 low
· 3 tools · 0 SoD-flagged
regimes
none
Tools needing tighter control
(1 of 3)
stubhub.highlight_listing
low
conf low
allow
Puts one specific ticket listing in front of the user as the recommended option, steering purchase choice without committing any order or payment.
All other tools (2)
stubhub.event_search
low
conf medium
allow
Returns public event listings matching a query; read-only discovery over marketplace inventory with no customer or payment data involved.
stubhub.fetch_listings
low
conf medium
allow
Reads live ticket availability and pricing for an event, exposing marketplace inventory data but no cardholder or account information.