MCP compliance catalog

Every MCP tool in the SCOPE compliance index, grouped by server — risk posture, regulatory exposure, and the tools that warrant tighter governance.
80MCP servers
1695tools
Reset 80 of 80 servers
Intuit QuickBooks
51 tools · footprint 188
15 critical 10 high 17 med 9 low COSOGLBA+3 more
PayPal
33 tools · footprint 86
6 critical 7 high 9 med 11 low COSOGLBA+3 more
Stripe
26 tools · footprint 77
3 critical 7 high 10 med 6 low COSOPCI+2 more
PostHog
36 tools · footprint 69
6 high 22 med 8 low
Supabase
32 tools · footprint 69
4 critical 4 high 8 med 16 low COSOSOX
Salesforce
32 tools · footprint 60
4 critical 2 high 9 med 17 low COSOSOX
Close
64 tools · footprint 59
5 high 22 med 37 low COSOSOX
Cloudflare
26 tools · footprint 58
3 critical 4 high 6 med 13 low
Webflow
23 tools · footprint 57
2 critical 5 high 10 med 6 low
PagerDuty
64 tools · footprint 55
5 high 16 med 43 low
Box
37 tools · footprint 50
10 high 14 med 13 low COSOHIPAA+1 more
Gusto
36 tools · footprint 48
12 high 11 med 13 low COSOGLBA+1 more
ActiveCampaign
58 tools · footprint 47
4 high 15 med 39 low COSOSOX
Sanity
36 tools · footprint 47
1 critical 5 high 12 med 18 low
Amplitude
43 tools · footprint 44
6 high 16 med 21 low
Sentry
25 tools · footprint 43
3 high 14 med 8 low
‹ PrevPage 1 of 5Next ›
ActiveCampaign
4 high 15 med 39 low · 58 tools · 4 SoD-flagged
regimes APPICCPACOSOGDPRISO_27001LGPDPIPEDAPIPLPOPIASOC2SOXUK_GDPR

Tools needing tighter control (5 of 58)

activecampaign.bulk_import_contacts high conf highOBO
Mass-imports contacts; consent and source-of-record obligations apply at scale.
activecampaign.update_deal high conf highhuman approval
Modifies deal value, stage, or owner; direct effect on revenue forecast.
activecampaign.deal_owner_bulk_update high conf highhuman approval
Reassigns ownership of many deals at once; reshapes commission attribution and access.
activecampaign.move_deals_to_stage high conf highhuman approval
Bulk-changes the pipeline stage of multiple deals; can materially shift recognized forecast.
activecampaign.create_list_group_permission medium conf mediumhuman approval
Grants a group access to a marketing list; broadens who can view contact data.
All other tools (53)
activecampaign.add_contact_to_automation medium conf highaudit
Enrolls a contact in an automation; can trigger outbound messaging at scale.
activecampaign.add_contact_to_list medium conf highaudit
Subscribes a contact to a list; consent and unsubscribe obligations apply.
activecampaign.add_tag_to_contact low conf highallow
Applies a tag to a contact, affecting downstream segmentation and automations.
activecampaign.bulk_import_status_list low conf highallow
Reads the status of recent bulk-import jobs.
activecampaign.create_contact_custom_field low conf highallow
Adds a new custom field to the contact schema.
activecampaign.create_contact_field_relationship low conf highallow
Associates a custom field with a list scope.
activecampaign.create_contact_field_value low conf highallow
Sets a custom-field value on a contact.
activecampaign.create_contact_tag low conf highallow
Creates a new tag for use in segmentation.
activecampaign.create_deal medium conf highaudit
Creates a deal in the pipeline; affects forecast totals.
activecampaign.create_deal_note low conf highallow
Adds a note to a deal record.
activecampaign.create_deal_pipeline medium conf highaudit
Adds a new sales pipeline; changes how forecast is grouped.
activecampaign.create_deal_stage medium conf highaudit
Adds a stage; affects probability-weighted forecast math.
activecampaign.create_field_options low conf highallow
Defines option values for a select-style custom field.
activecampaign.create_list low conf highallow
Creates a new marketing list.
activecampaign.create_or_update_contact medium conf highaudit
Upserts contact PII; can introduce non-consented contacts if used carelessly.
activecampaign.get_campaign low conf highallow
Reads campaign configuration and performance metrics.
activecampaign.get_campaign_links low conf highallow
Reads the trackable links embedded in a campaign.
activecampaign.get_contact medium conf highaudit
Reads a single contact's PII and engagement profile.
activecampaign.get_contact_automation low conf highallow
Reads enrollment details for a contact-automation pair.
activecampaign.get_contact_custom_field low conf highallow
Reads a custom-field definition.
activecampaign.get_contact_field_value low conf highallow
Reads a single custom-field value for a contact.
activecampaign.get_contact_field_values medium conf highaudit
Reads custom field values which often contain sensitive contact attributes.
activecampaign.get_contact_list_memberships low conf highallow
Reads which lists a contact belongs to.
activecampaign.get_contact_score_values low conf highallow
Reads engagement / lead-scoring values per contact.
activecampaign.get_contact_tags low conf highallow
Reads tags assigned to a contact for segmentation context.
activecampaign.get_deal low conf highallow
Reads a single CRM deal.
activecampaign.get_deal_pipeline low conf highallow
Reads a pipeline configuration.
activecampaign.get_deal_stage low conf highallow
Reads a stage configuration.
activecampaign.get_list low conf highallow
Reads metadata for a marketing list.
activecampaign.get_tag low conf highallow
Reads a tag definition.
activecampaign.is_phone_only_contacts_enabled low conf highallow
Reads an account-level toggle controlling phone-only contact handling.
activecampaign.list_automations low conf highallow
Lists configured marketing automations.
activecampaign.list_campaigns low conf highallow
Lists email campaigns and their status.
activecampaign.list_contact_activities medium conf highaudit
Reads engagement event history per contact (opens, clicks, page visits).
activecampaign.list_contact_automations low conf highallow
Lists automations a contact is currently enrolled in.
activecampaign.list_contact_custom_fields low conf highallow
Lists custom-field definitions on the contact object.
activecampaign.list_contact_field_values medium conf highaudit
Bulk-reads custom-field values across contacts.
activecampaign.list_contacts medium conf highaudit
Returns paginated contact records including names, emails, and custom field values.
activecampaign.list_deal_activities low conf highallow
Reads activity history on deals.
activecampaign.list_deal_pipelines low conf highallow
Lists pipeline configurations.
activecampaign.list_deal_stages low conf highallow
Lists stage definitions for a pipeline.
activecampaign.list_deals low conf highallow
Lists CRM deals; reflects pipeline state.
activecampaign.list_email_activities low conf highallow
Reads email-send activity records.
activecampaign.list_groups low conf highallow
Lists user groups configured on the account.
activecampaign.list_lists low conf highallow
Enumerates marketing lists in the account.
activecampaign.list_tags low conf highallow
Lists tag definitions in the account.
activecampaign.remove_contact_from_automation low conf highallow
Removes a contact from an automation enrollment.
activecampaign.update_contact medium conf highaudit
Modifies existing contact PII (email, phone, address, identifiers).
activecampaign.update_contact_field_value low conf highallow
Updates a custom-field value on a contact.
activecampaign.update_deal_note low conf highallow
Edits a note on a deal record.
activecampaign.update_deal_pipeline medium conf highaudit
Modifies pipeline configuration; alters forecasting structure.
activecampaign.update_deal_stage medium conf highaudit
Edits a stage definition; shifts forecast weighting.
activecampaign.update_list low conf highallow
Modifies marketing-list configuration.