MCP compliance catalog

Every MCP tool in the SCOPE compliance index, grouped by server — risk posture, regulatory exposure, and the tools that warrant tighter governance.
303MCP servers
4476tools
Reset 303 of 303 servers
Ashby
17 tools · footprint 16
6 med 11 low
CData Connect AI
8 tools · footprint 16
1 critical 1 high 6 low
DataHub
24 tools · footprint 16
8 med 16 low
Google Compute Engine
25 tools · footprint 16
1 critical 6 med 18 low
Google Drive
7 tools · footprint 16
2 high 2 med 3 low
Guru
5 tools · footprint 16
3 med 2 low
HealthEx
15 tools · footprint 16
1 high 11 med 3 low HIPAA
Lumin PDF
7 tools · footprint 16
2 high 2 med 3 low
Microsoft OneDrive (Work IQ)
17 tools · footprint 16
1 high 4 med 12 low
Mintlify
17 tools · footprint 16
2 high 7 med 8 low
Sumble
25 tools · footprint 16
2 high 2 med 21 low
ThoughtSpot Spotter
12 tools · footprint 16
6 med 6 low
Coupler.io
4 tools · footprint 15
1 high 3 low
Digits
10 tools · footprint 15
5 med 5 low
Dovetail
9 tools · footprint 15
5 med 4 low
Gmail
10 tools · footprint 15
2 high 1 med 7 low
‹ PrevPage 9 of 19Next ›
AshbyDocs ↗
1 high 8 med 8 low · 17 tools · 0 SoD-flagged
regimes APPICCPAEU_AI_ACTGDPRISO_27001LGPDNIST_AI_RMFPIPEDAPIPLPOPIASOC2UK_GDPR

Tools needing tighter control (2 of 17)

ashby-api.filter_records high conf mediumOBO
Runs criteria-based queries across candidates, applications, and jobs, returning matching records in bulk — an exfiltration path for candidate PII at scale.
ashby-api.get_interview_plan low conf lowallow
Shows the configured candidate progression stages for an interview plan; largely structural pipeline configuration.
All other tools (15)
ashby-api.add_note_to_candidate low conf mediumallow
Drafts a profile note on a candidate for later confirmation; reversible and does not commit until the user approves it.
ashby-api.change_application_stage medium conf mediumaudit
Advances a candidate's application through interview stages, effecting a consequential step in an automated hiring pipeline.
ashby-api.consider_candidate_for_job medium conf mediumaudit
Creates a new application linking a candidate to a job, entering that person into the hiring pipeline for the role.
ashby-api.create_candidate medium conf mediumaudit
Adds a new candidate record with contact information, writing applicant personal data into the ATS.
ashby-api.describe_object_fields low conf mediumallow
Returns the filterable field metadata for an object type as a backend helper; exposes schema shape, not record data.
ashby-api.get_candidate medium conf mediumaudit
Pulls a comprehensive candidate profile including resume and interview feedback — a rich single-record disclosure of applicant personal data.
ashby-api.get_interview_details medium conf mediumaudit
Provides pre-interview briefing materials for a scheduled interview, including candidate-specific context.
ashby-api.get_job_pipeline low conf mediumallow
Displays aggregate candidate counts at each pipeline stage for a job; exposes summary metrics rather than individual records.
ashby-api.get_pending_tasks low conf mediumallow
Lists the caller's own outstanding scorecards and approvals; a personal task queue read scoped to the authenticated user.
ashby-api.get_record_details medium conf mediumaudit
Retrieves full information for a job, application, or offer, including offer compensation terms and applicant details.
ashby-api.get_submitted_feedback low conf mediumallow
Retrieves the caller's own submitted scorecard feedback, scoped to the authenticated interviewer.
ashby-api.get_upcoming_interviews medium conf mediumaudit
Lists scheduled interviews with candidate and job details, surfacing identifying applicant information and schedules.
ashby-api.search_product_docs low conf mediumallow
Queries Ashby's product documentation; a read of public help content with no customer data exposure.
ashby-api.search_records_by_name medium conf mediumaudit
Locates candidates, jobs, applications, and email templates by name, surfacing identifying candidate details to the caller.
ashby-api.submit_mcp_feedback low conf mediumallow
Sends a suggestion to the Ashby team about the MCP server; a low-impact outbound feedback message.