MCP compliance catalog

Every MCP tool in the SCOPE compliance index, grouped by server — risk posture, regulatory exposure, and the tools that warrant tighter governance.

387MCP servers

5470tools

3 tools · footprint 21

2 critical 1 low

Amazon Selling Partner

8 tools · footprint 20

1 critical 1 high 1 med 5 low COSOSOX

18 tools · footprint 20

2 high 6 med 10 low

4 tools · footprint 20

1 critical 3 low COSOSOX

12 tools · footprint 20

4 high 3 med 5 low

Zoom for Claude

13 tools · footprint 20

3 high 3 med 7 low HIPAA

23 tools · footprint 19

1 high 4 med 18 low

17 tools · footprint 19

1 high 4 med 12 low

Orion by Gravity

20 tools · footprint 19

2 high 6 med 12 low

PitchBook Premium

16 tools · footprint 19

2 high 4 med 10 low GLBA

17 tools · footprint 19

1 high 4 med 12 low

10x Genomics Cloud

27 tools · footprint 18

1 high 5 med 21 low HIPAA

25 tools · footprint 18

1 high 6 med 18 low

7 tools · footprint 18

2 high 1 med 4 low

4 tools · footprint 18

1 critical 1 med 2 low

DataGrail (Vera)

23 tools · footprint 18

YugabyteDBDocs ↗

2 critical 1 low · 3 tools · 1 SoD-flagged

regimes APPICCPAGDPRISO_27001LGPDPIPEDAPIPLPOPIASOC2UK_GDPR

Tools needing tighter control (2 of 3)

yugabytedb.run_write_query critical conf highhuman approval

Mutates or destroys production data — a single TRUNCATE or DDL statement can wipe a table the connection role owns, with no undo beyond a cluster backup.

yugabytedb.run_read_only_query critical conf highhuman approval

Reads arbitrary SQL results from the cluster, so one unbounded SELECT can pull every row of customer data the connection role can reach into the agent's context.

All other tools (1)

yugabytedb.summarize_database low conf highallow

Returns the table, column, and row-count inventory for a schema, exposing the data model an attacker would need to target specific tables.