MCP compliance catalog

Every MCP tool in the SCOPE compliance index, grouped by server — risk posture, regulatory exposure, and the tools that warrant tighter governance.
387MCP servers
5470tools
Reset 387 of 387 servers
YugabyteDB
3 tools · footprint 21
2 critical 1 low
Amazon Selling Partner
8 tools · footprint 20
1 critical 1 high 1 med 5 low COSOSOX
Notion
18 tools · footprint 20
2 high 6 med 10 low
PandaDoc
4 tools · footprint 20
1 critical 3 low COSOSOX
Vani by Zoho
12 tools · footprint 20
4 high 3 med 5 low
Zoom for Claude
13 tools · footprint 20
3 high 3 med 7 low HIPAA
Asana
23 tools · footprint 19
1 high 4 med 18 low
monday.com
17 tools · footprint 19
1 high 4 med 12 low
Orion by Gravity
20 tools · footprint 19
2 high 6 med 12 low
PitchBook Premium
16 tools · footprint 19
2 high 4 med 10 low GLBA
Whimsical
17 tools · footprint 19
1 high 4 med 12 low
10x Genomics Cloud
27 tools · footprint 18
1 high 5 med 21 low HIPAA
Airtable
25 tools · footprint 18
1 high 6 med 18 low
Base44
7 tools · footprint 18
2 high 1 med 4 low
ClickHouse
4 tools · footprint 18
1 critical 1 med 2 low
DataGrail (Vera)
23 tools · footprint 18
8 med 15 low
‹ PrevPage 9 of 25Next ›
AddeparDocs ↗
1 critical 1 high 7 med 6 low · 15 tools · 2 SoD-flagged
regimes CCPAGDPRGLBAISO_27001PIPEDASOC2UK_GDPR

Tools needing tighter control (2 of 15)

addepar.get_all_entities critical conf mediumhuman approval
Enumerates every entity in the firm — clients, households, trusts, legal entities and accounts — handing a single caller the complete advised-client roster in one call.
addepar.get_portfolio_data high conf mediumhuman approval
Runs arbitrary portfolio queries returning holdings, positions and valuations at any scope the caller's access permits, up to the firm's entire book of client assets.
All other tools (13)
addepar.get_current_user low conf mediumallow
Identifies the authenticated Addepar user and the firm context the session operates in.
addepar.get_exposure medium conf mediumaudit
Reports allocation and exposure breakdowns across asset classes, sectors and geographies for the selected portfolios.
addepar.get_ownership_graph medium conf mediumaudit
Exposes the beneficial-ownership structure linking individuals, trusts and entities to accounts — the sensitive family-wealth topology behind a client relationship.
addepar.get_performance_attribution medium conf mediumaudit
Returns performance and attribution analytics for client portfolios; figures surfaced here can end up in client-facing reporting without review.
addepar.get_portfolio_attribute_metadata low conf mediumallow
Describes the portfolio attributes and columns available for querying, with no client data returned.
addepar.get_private_fund_cash_movements medium conf mediumaudit
Returns capital calls and distributions moving cash between client accounts and private funds, revealing commitment sizes and money-movement history.
addepar.get_transaction_attribute_metadata low conf mediumallow
Describes the transaction attributes available for querying, returning schema definitions rather than account activity.
addepar.get_transactions medium conf mediumaudit
Pulls transaction-level activity for client accounts — trades, contributions and distributions that constitute nonpublic personal financial records.
addepar.get_upcoming_private_fund_capital_activity medium conf mediumaudit
Discloses scheduled capital calls and distributions per client account, including forward-looking liquidity obligations not yet reported to the client.
addepar.search_addepar_product_docs low conf mediumallow
Searches Addepar's product documentation; returns vendor help content only.
addepar.search_entities medium conf mediumaudit
Finds client entities by name or attribute, returning identifying details about individuals, trusts and households held by the advisory firm.
addepar.search_portfolio_query_attributes low conf mediumallow
Searches the catalog of portfolio query attributes to build a later data request.
addepar.search_transaction_query_attributes low conf mediumallow
Searches the catalog of transaction query attributes to build a later data request.