MCP compliance catalog

Every MCP tool in the SCOPE compliance index, grouped by server — risk posture, regulatory exposure, and the tools that warrant tighter governance.
80MCP servers
1695tools
Reset 80 of 80 servers
Intuit QuickBooks
51 tools · footprint 188
15 critical 10 high 17 med 9 low COSOGLBA+3 more
PayPal
33 tools · footprint 86
6 critical 7 high 9 med 11 low COSOGLBA+3 more
Stripe
26 tools · footprint 77
3 critical 7 high 10 med 6 low COSOPCI+2 more
PostHog
36 tools · footprint 69
6 high 22 med 8 low
Supabase
32 tools · footprint 69
4 critical 4 high 8 med 16 low COSOSOX
Salesforce
32 tools · footprint 60
4 critical 2 high 9 med 17 low COSOSOX
Close
64 tools · footprint 59
5 high 22 med 37 low COSOSOX
Cloudflare
26 tools · footprint 58
3 critical 4 high 6 med 13 low
Webflow
23 tools · footprint 57
2 critical 5 high 10 med 6 low
PagerDuty
64 tools · footprint 55
5 high 16 med 43 low
Box
37 tools · footprint 50
10 high 14 med 13 low COSOHIPAA+1 more
Gusto
36 tools · footprint 48
12 high 11 med 13 low COSOGLBA+1 more
ActiveCampaign
58 tools · footprint 47
4 high 15 med 39 low COSOSOX
Sanity
36 tools · footprint 47
1 critical 5 high 12 med 18 low
Amplitude
43 tools · footprint 44
6 high 16 med 21 low
Sentry
25 tools · footprint 43
3 high 14 med 8 low
‹ PrevPage 1 of 5Next ›
Atlassian RovoDocs ↗
13 med 41 low · 54 tools · 0 SoD-flagged
regimes APPICCPAGDPRISO_27001LGPDNIST_CSFPIPEDAPIPLPOPIASOC2UK_GDPR

Tools needing tighter control (0 of 54)

None — every tool is low-risk, high-confidence, and outside PCI/HIPAA payload scope.
All other tools (54)
atlassian.addCommentToJiraIssue low conf highallow
Posts a comment on a Jira issue under the authenticated user's identity.
atlassian.addWorklogToJiraIssue low conf highallow
Logs time against a Jira issue; affects time-tracking reports.
atlassian.atlassianUserInfo low conf highallow
Reads the authenticated Atlassian user's profile.
atlassian.bitbucketDeployment low conf mediumallow
Reads deployment information from Bitbucket Pipelines.
atlassian.bitbucketEnvironment low conf mediumallow
Reads deployment environment configuration.
atlassian.bitbucketPipeline low conf mediumallow
Reads pipeline run metadata and status.
atlassian.bitbucketPullRequest low conf mediumallow
Reads pull request metadata, comments, and review state.
atlassian.bitbucketRepoContent medium conf mediumaudit
Reads repository file content; source code may contain secrets or proprietary IP.
atlassian.bitbucketRepository low conf mediumallow
Reads Bitbucket repository metadata.
atlassian.bitbucketUser low conf mediumallow
Reads a Bitbucket user record.
atlassian.bitbucketWorkspace low conf mediumallow
Reads Bitbucket workspace metadata.
atlassian.createCompassComponent low conf mediumallow
Registers a new component in the Compass catalog.
atlassian.createCompassComponentRelationship low conf mediumallow
Creates a dependency or other relationship between Compass components.
atlassian.createCompassCustomFieldDefinition medium conf mediumaudit
Defines a new custom field in Compass; schema change applied workspace-wide.
atlassian.createConfluenceFooterComment low conf highallow
Posts a footer comment on a Confluence page.
atlassian.createConfluenceInlineComment low conf highallow
Posts an inline comment anchored to page content.
atlassian.createConfluencePage low conf highallow
Creates a new Confluence page in a space.
atlassian.createJiraIssue low conf highallow
Creates a new Jira issue.
atlassian.editJiraIssue medium conf highaudit
Modifies fields on a Jira issue including assignee, priority, or custom fields.
atlassian.fetchAtlassian medium conf highaudit
Generic fetch of an Atlassian resource by URL or id; PII exposure depends on target.
atlassian.getAccessibleAtlassianResources low conf highallow
Lists Atlassian sites/resources the authenticated user can access.
atlassian.getCompassComponent low conf mediumallow
Reads a Compass software component record.
atlassian.getCompassComponentActivityEvents low conf mediumallow
Reads activity event stream for a Compass component.
atlassian.getCompassComponentLabels low conf mediumallow
Reads labels attached to a Compass component.
atlassian.getCompassComponents low conf mediumallow
Lists Compass components.
atlassian.getCompassComponentsOwnedByMyTeams low conf mediumallow
Lists Compass components owned by the user's teams.
atlassian.getCompassComponentTypes low conf mediumallow
Reads available Compass component types.
atlassian.getCompassCustomFieldDefinitions low conf mediumallow
Reads Compass custom field schema.
atlassian.getConfluenceCommentChildren low conf highallow
Reads replies to a Confluence comment.
atlassian.getConfluencePage low conf highallow
Reads a single Confluence page's content.
atlassian.getConfluencePageDescendants medium conf highaudit
Reads all descendant pages under a parent; can pull a whole subtree of documentation.
atlassian.getConfluencePageFooterComments low conf highallow
Reads footer comments on a Confluence page.
atlassian.getConfluencePageInlineComments low conf highallow
Reads inline comments on a Confluence page.
atlassian.getConfluenceSpaces low conf highallow
Lists Confluence spaces accessible to the user.
atlassian.getIssueLinkTypes low conf highallow
Reads configured issue-link types in the instance.
atlassian.getJiraIssue low conf highallow
Reads a single Jira issue's fields, comments, and attachments.
atlassian.getJiraIssueRemoteIssueLinks low conf highallow
Reads remote links attached to a Jira issue.
atlassian.getJiraIssueTypeMetaWithFields low conf highallow
Reads issue-type schema metadata; configuration introspection.
atlassian.getJiraProjectIssueTypesMetadata low conf highallow
Reads available issue types for a Jira project.
atlassian.getJsmOpsAlerts low conf highallow
Reads JSM Ops on-call alerts.
atlassian.getJsmOpsScheduleInfo low conf highallow
Reads on-call schedule configuration.
atlassian.getJsmOpsTeamInfo low conf highallow
Reads JSM Ops team metadata.
atlassian.getPagesInConfluenceSpace medium conf highaudit
Lists all pages in a space; enables bulk traversal of internal docs.
atlassian.getTeamworkGraphContext medium conf mediumaudit
Reads contextual graph relationships across Atlassian work objects.
atlassian.getTeamworkGraphObject low conf mediumallow
Reads a single object from the Atlassian Teamwork Graph.
atlassian.getTransitionsForJiraIssue low conf highallow
Reads workflow transitions available for a specific issue.
atlassian.getVisibleJiraProjects low conf highallow
Lists Jira projects visible to the authenticated user.
atlassian.lookupJiraAccountId low conf highallow
Resolves a username or email to a Jira accountId.
atlassian.searchAtlassian medium conf highaudit
Cross-product search across Jira, Confluence, and Bitbucket; can surface confidential content.
atlassian.searchConfluenceUsingCql medium conf highaudit
Runs arbitrary CQL searches; can return large volumes of internal documentation.
atlassian.searchJiraIssuesUsingJql medium conf highaudit
Runs arbitrary JQL queries; can return large volumes of issue data.
atlassian.transitionJiraIssue medium conf highaudit
Moves an issue through workflow states; can close tickets or bypass review gates.
atlassian.updateConfluencePage medium conf highaudit
Edits an existing Confluence page; can overwrite knowledge-base content.
atlassian.updateJsmOpsAlert medium conf highaudit
Acknowledges, closes, or modifies an on-call alert; affects incident response state.