MCP compliance catalog

Every MCP tool in the SCOPE compliance index, grouped by server — risk posture, regulatory exposure, and the tools that warrant tighter governance.
387MCP servers
5470tools
Reset 387 of 387 servers
YugabyteDB
3 tools · footprint 21
2 critical 1 low
Amazon Selling Partner
8 tools · footprint 20
1 critical 1 high 1 med 5 low COSOSOX
Notion
18 tools · footprint 20
2 high 6 med 10 low
PandaDoc
4 tools · footprint 20
1 critical 3 low COSOSOX
Vani by Zoho
12 tools · footprint 20
4 high 3 med 5 low
Zoom for Claude
13 tools · footprint 20
3 high 3 med 7 low HIPAA
Asana
23 tools · footprint 19
1 high 4 med 18 low
monday.com
17 tools · footprint 19
1 high 4 med 12 low
Orion by Gravity
20 tools · footprint 19
2 high 6 med 12 low
PitchBook Premium
16 tools · footprint 19
2 high 4 med 10 low GLBA
Whimsical
17 tools · footprint 19
1 high 4 med 12 low
10x Genomics Cloud
27 tools · footprint 18
1 high 5 med 21 low HIPAA
Airtable
25 tools · footprint 18
1 high 6 med 18 low
Base44
7 tools · footprint 18
2 high 1 med 4 low
ClickHouse
4 tools · footprint 18
1 critical 1 med 2 low
DataGrail (Vera)
23 tools · footprint 18
8 med 15 low
‹ PrevPage 9 of 25Next ›
WrikeDocs ↗
1 high 8 med 16 low · 25 tools · 0 SoD-flagged
regimes APPICCPAGDPRISO_27001LGPDPIPEDASOC2UK_GDPR

Tools needing tighter control (1 of 25)

wrike.update_items high conf mediumOBO
Rewrites titles, descriptions, statuses, dates and custom fields across up to 20 work items in one call, so a single mistaken batch can distort project state and reporting for an entire team.
All other tools (24)
wrike.add_attachments_to_item medium conf mediumaudit
Publishes an uploaded file onto a work item, making its contents visible to everyone with access to that item.
wrike.create_item_comment low conf highallow
Posts commentary under the acting user's name and can @-mention colleagues, pushing agent-authored text into human discussion threads.
wrike.create_item_from_blueprint medium conf highaudit
Instantiates an entire blueprint tree of projects, folders and tasks in one call, which can flood a space with structure that must be cleaned up item by item.
wrike.create_project_folder_item low conf highallow
Adds folders and projects with assigned owners and dates, changing the shape of a space's work hierarchy.
wrike.create_task_item low conf highallow
Creates tasks and assigns them to named people, putting work on colleagues' queues without their involvement.
wrike.get_approvals low conf mediumallow
Exposes who was asked to approve a deliverable and what they decided, which is the review trail auditors rely on.
wrike.get_item_comments medium conf highaudit
Pulls entire internal discussion threads with author attribution, exposing candid team commentary and any personal data written into it.
wrike.get_item_details medium conf highaudit
Returns complete work-item records including custom fields and assignees, where teams routinely store client names, budgets and other confidential detail.
wrike.get_items_children low conf highallow
Traverses the work hierarchy level by level, mapping out how a space's projects and tasks are organized.
wrike.get_my_inbox low conf highallow
Reads the caller's notification stream, including mentions and replies written by colleagues.
wrike.get_requestform low conf highallow
Reveals a request form's full field, option and rule configuration, including how submissions are routed.
wrike.get_users medium conf highaudit
Resolves account holders to their profile and email address, exposing employee and collaborator contact details to the agent.
wrike.prefill_requestform low conf mediumallow
Builds a shareable link carrying prefilled form values; nothing is submitted, but the values ride in the URL and can leak if the link is forwarded.
wrike.prepare_attachment_upload low conf mediumallow
Moves file content into Wrike storage ahead of attachment, so whatever the agent uploads now lives in the customer's workspace.
wrike.search_approvals low conf mediumallow
Surfaces every pending and completed approval across the account, including who is holding up which decision.
wrike.search_blueprints low conf highallow
Lists reusable blueprints, showing the standardized project templates an organization runs on.
wrike.search_customitemtypes low conf highallow
Lists the account's custom item types and their usage ranking, exposing how the organization models its work.
wrike.search_item_customfields low conf highallow
Enumerates custom field definitions and their allowed values, revealing what business data the account tracks on work items.
wrike.search_items medium conf highaudit
Runs keyword search across every task, folder and project the caller can reach, making it the fastest route to locate sensitive work records at scale.
wrike.search_requestforms low conf highallow
Lists the intake forms available in the account, exposing which request workflows exist.
wrike.search_spaces low conf highallow
Lists the spaces the caller belongs to, outlining which teams and initiatives the account is organized around.
wrike.search_users medium conf highaudit
Enumerates the account's people directory and infers working relationships from collaboration frequency, handing an agent an internal org map.
wrike.search_workflows low conf highallow
Returns workflow definitions and custom status ids, which are the handles needed to drive work items through state changes.
wrike.submit_requestform medium conf mediumaudit
Files an intake request under the acting user's identity, creating the task or project the form configures and starting whatever downstream routing that form triggers.