MCP compliance catalog
Every MCP tool in the SCOPE compliance index, grouped by server — risk posture, regulatory exposure, and the tools that warrant tighter governance.
387
MCP servers
5470
tools
All risk
Has critical
High & up
Medium & up
All regimes
APPI
CCPA
COSO
CO_AI_ACT
EU_AI_ACT
FDA_PART_11
GDPR
GLBA
HIPAA
ISO_27001
ISO_42001
LGPD
NIST_AI_RMF
NIST_CSF
NY_DFS_500
PCI
PIPEDA
PIPL
POPIA
PSD2
SOC2
SOX
UK_GDPR
Sort: footprint
Sort: tools
Sort: regimes
Sort: name
SoD only
Filter
Reset
387 of 387 servers
YugabyteDB
3 tools · footprint 21
2 critical
1 low
Amazon Selling Partner
8 tools · footprint 20
1 critical
1 high
1 med
5 low
COSO
SOX
Notion
18 tools · footprint 20
2 high
6 med
10 low
PandaDoc
4 tools · footprint 20
1 critical
3 low
COSO
SOX
Vani by Zoho
12 tools · footprint 20
4 high
3 med
5 low
Zoom for Claude
13 tools · footprint 20
3 high
3 med
7 low
HIPAA
Asana
23 tools · footprint 19
1 high
4 med
18 low
monday.com
17 tools · footprint 19
1 high
4 med
12 low
Orion by Gravity
20 tools · footprint 19
2 high
6 med
12 low
PitchBook Premium
16 tools · footprint 19
2 high
4 med
10 low
GLBA
Whimsical
17 tools · footprint 19
1 high
4 med
12 low
10x Genomics Cloud
27 tools · footprint 18
1 high
5 med
21 low
HIPAA
Airtable
25 tools · footprint 18
1 high
6 med
18 low
Base44
7 tools · footprint 18
2 high
1 med
4 low
ClickHouse
4 tools · footprint 18
1 critical
1 med
2 low
DataGrail (Vera)
23 tools · footprint 18
8 med
15 low
‹ Prev
Page 9 of 25
Next ›
StubHub
Docs ↗
3 low
· 3 tools · 0 SoD-flagged
regimes
none
Tools needing tighter control
(1 of 3)
stubhub.highlight_listing
low
conf low
allow
Puts one specific ticket listing in front of the user as the recommended option, steering purchase choice without committing any order or payment.
All other tools (2)
stubhub.event_search
low
conf medium
allow
Returns public event listings matching a query; read-only discovery over marketplace inventory with no customer or payment data involved.
stubhub.fetch_listings
low
conf medium
allow
Reads live ticket availability and pricing for an event, exposing marketplace inventory data but no cardholder or account information.