Every MCP tool in the SCOPE compliance index, grouped by server — risk posture, regulatory exposure, and the tools that warrant tighter governance.
Zoho CRM
2 critical 10 high 12 med 1 low · 25 tools · 5 SoD-flagged
regimes APPICCPACOSOGDPRISO_27001LGPDNIST_CSFPIPEDAPIPLPOPIASOC2SOXUK_GDPR
Tools needing tighter control (12 of 25)
zoho-crm.Update_Users critical conf mediumhuman approval
Changes profile, role, and status across multiple CRM users in one call, so a single invocation can escalate privileges or deactivate accounts org-wide.
zoho-crm.Delete_Records critical conf highhuman approval
Deletes many CRM records at once, wiping leads, contacts, or deals in bulk with no second approver and only a time-limited recycle-bin window.
zoho-crm.Update_User high conf mediumhuman approval
Reassigns one user's role, profile, or active state, altering what CRM data and records that principal can reach without an access review.
zoho-crm.convertInventory high conf mediumhuman approval
Converts a quote or sales order into the next inventory document, creating a revenue-bearing record and skipping the normal quote-to-invoice approval chain.
zoho-crm.Create_Field high conf mediumhuman approval
Adds a custom field to a live CRM module, changing the schema that reports, pipeline forecasts, and downstream integrations read from.
zoho-crm.putVariableById high conf mediumOBO
Overwrites an org-level variable that functions and integrations depend on, which can redirect outbound calls or replace stored connection values.
zoho-crm.Delete_Record high conf highOBO
Removes a single customer record and its personal data from the active CRM, breaking any reports or automations keyed to that record.
zoho-crm.Update_Records high conf highOBO
Rewrites fields across many records in one call, so a bad mapping can corrupt contact details or deal values throughout a module.
zoho-crm.Upsert_Records high conf highOBO
Creates or overwrites records by matching key, which silently replaces existing customer data when the duplicate-check field resolves to a live record.
zoho-crm.executeCOQLQuery high conf highOBO
Runs an arbitrary COQL query across CRM modules, letting a caller pull field combinations and customer data well beyond the record it was asked about.
zoho-crm.Get_Records high conf highOBO
Pages through every record in a module, producing a bulk dump of contact and deal data including the personal fields on each record.
zoho-crm.getBulkReadJobDetails high conf mediumOBO
Exposes the state and result location of a bulk read job, the path by which entire CRM modules are exported as downloadable files.
All other tools (13)
zoho-crm.Add_Tags_To_Multiple_Records medium conf mediumaudit
Applies tags across a batch of records, which can pull them into tag-driven segments, campaigns, or automation filters unexpectedly.
zoho-crm.Create_Notes low conf highallow
Attaches a note to a CRM record, adding agent-authored commentary that reps will read as part of the customer history.
zoho-crm.Create_Records medium conf highaudit
Inserts new leads, contacts, or deals carrying personal data into the CRM, triggering assignment rules and workflow automations on creation.
zoho-crm.Delete_Notes medium conf highaudit
Erases notes attached to CRM records, destroying the written account of customer conversations and commitments kept against that record.
zoho-crm.delinkRelatedRecord medium conf mediumaudit
Breaks the link between two records, detaching a contact, product, or campaign from its parent and removing that relationship from reports.
zoho-crm.Get_Record medium conf highaudit
Retrieves one CRM record with all its fields, surfacing that individual's contact details and deal history to the agent context.
zoho-crm.Get_Users medium conf highaudit
Returns the full CRM user directory including names, email addresses, roles, and profiles — a ready-made map of staff identities and their access levels.
zoho-crm.getTimelines medium conf mediumaudit
Reads the change history of a record, revealing who edited which field and when — the audit trail admins rely on for CRM disputes.
zoho-crm.getVariables medium conf mediumaudit
Reads every org-level variable, which commonly holds integration endpoints and API credentials placed there by admins and custom functions.
zoho-crm.Search_Records medium conf highaudit
Searches a module by criteria, email, or phone number and returns matching records in full, including the personal fields they hold.
zoho-crm.Update_Record medium conf highaudit
Edits one CRM record's fields, changing customer detail or deal stage and firing any workflow tied to that field.
zoho-crm.updateRelatedRecords medium conf mediumaudit
Rewrites the association data between a parent record and its related list, changing product lines, contact roles, or campaign membership on a deal.
zoho-crm.updateSpecificRelatedRecord medium conf mediumaudit
Modifies one related-record link, adjusting details such as line-item quantity or contact role on the parent record.