MCP compliance catalog

Every MCP tool in the SCOPE compliance index, grouped by server — risk posture, regulatory exposure, and the tools that warrant tighter governance.
303MCP servers
4476tools
Reset 303 of 303 servers
Intuit QuickBooks
51 tools · footprint 188
15 critical 10 high 17 med 9 low COSOGLBA+3 more
PayPal
33 tools · footprint 86
6 critical 7 high 9 med 11 low COSOGLBA+3 more
Stripe
26 tools · footprint 77
3 critical 7 high 10 med 6 low COSOPCI+2 more
Qonto
25 tools · footprint 76
15 high 9 med 1 low COSOGLBA+3 more
PostHog
36 tools · footprint 69
6 high 22 med 8 low
Supabase
32 tools · footprint 69
4 critical 4 high 8 med 16 low COSOSOX
Datadog
25 tools · footprint 68
1 critical 12 high 11 med 1 low
PostHog
25 tools · footprint 66
3 critical 12 high 10 med
Adobe Workfront
25 tools · footprint 65
2 critical 7 high 13 med 3 low
MailerLite
25 tools · footprint 63
1 critical 11 high 12 med 1 low
MongoDB
25 tools · footprint 63
2 critical 7 high 12 med 4 low
MotherDuck
21 tools · footprint 62
4 critical 5 high 9 med 3 low
Salesforce
32 tools · footprint 60
4 critical 2 high 9 med 17 low COSOSOX
Close
64 tools · footprint 59
5 high 22 med 37 low COSOSOX
Cloudflare
26 tools · footprint 58
3 critical 4 high 6 med 13 low
Webflow
23 tools · footprint 57
2 critical 5 high 10 med 6 low
‹ PrevPage 1 of 19Next ›
AttentionDocs ↗
1 critical 6 high 18 med · 25 tools · 2 SoD-flagged
regimes APPICCPAGDPRISO_27001LGPDNIST_CSFPIPEDAPIPLPOPIASOC2UK_GDPR

Tools needing tighter control (7 of 25)

attention.create_api_key critical conf highhuman approval
Mints a new API key whose token is displayed only once, creating a long-lived credential that can authenticate full API access if leaked.
attention.delete_api_key high conf highOBO
Permanently revokes an API key, immediately breaking any integration or automation that authenticates with it.
attention.manage_user_role high conf highhuman approval
Assigns or removes a user's role, able to grant elevated privileges that bypass access-review controls.
attention.update_user high conf highhuman approval
Changes a user's profile, role, or seat type, potentially escalating permissions or altering billable seat allocation.
attention.delete_user high conf highOBO
Deactivates a user account, revoking their access to calls and coaching data; reversible via reactivation but disrupts the user immediately.
attention.delete_crm_account high conf highOBO
Disconnects a CRM account and removes its integrations, halting data sync and breaking field mappings across the org.
attention.ask_attention high conf highOBO
Runs AI analysis across up to 25 calls or every call in a deal, aggregating transcript content and insights at scale into a single response.
All other tools (18)
attention.add_team_member medium conf highaudit
Adds a user to a team, granting them visibility into that team's calls, scorecards, and metrics.
attention.connect_integration medium conf highaudit
Generates an OAuth link to connect Salesforce, HubSpot, or Microsoft, establishing a cross-system data flow of CRM and calendar records.
attention.create_crm_integration medium conf mediumaudit
Creates a CRM integration mapping that governs which entities and fields sync between Attention and the connected CRM.
attention.create_snippet medium conf mediumaudit
Creates a shareable clip from a call recording, producing a link that can expose customer conversation content outside the original access scope.
attention.delete_super_agent_session medium conf highaudit
Deletes a super agent session and all its messages, permanently discarding the interaction history for that session.
attention.get_call_details medium conf highaudit
Returns a single call's full transcript, scorecard results, and insights, exposing verbatim customer and prospect conversation content.
attention.get_super_agent_session_history medium conf mediumaudit
Retrieves the full message history of a super agent session, which may contain call excerpts and CRM data surfaced in prior responses.
attention.get_usage_report medium conf highaudit
Returns per-user activity metrics (calls, coaching, AI usage) for a date range, exposing individual reps' monitoring data over time.
attention.invite_user medium conf highaudit
Sends an email invitation that provisions a new user seat and grants access to the org's call and coaching data on acceptance.
attention.list_api_keys medium conf highaudit
Enumerates every API key configured for the org (metadata only, no token values), exposing the credential inventory and integration footprint.
attention.reactivate_user medium conf highaudit
Restores a previously deactivated user, re-granting access to call recordings, transcripts, and coaching data.
attention.remove_team_member medium conf highaudit
Removes a user from a team, revoking their visibility into that team's calls and metrics.
attention.search_calls medium conf highaudit
Searches call recordings by date, rep, team, keyword, opportunity, CRM field, or transcript content, surfacing sensitive customer conversations.
attention.send_super_agent_message medium conf mediumaudit
Sends an instruction to the super agent, which can act across the workspace's calls, CRM data, and configuration on the user's behalf.
attention.sync_crm_fields medium conf mediumaudit
Force-syncs entity and field definitions from the CRM, refreshing the mapping schema used to attach call data to CRM records.
attention.update_crm_integration medium conf mediumaudit
Updates a CRM integration's name, field mappings, or status, changing what data flows between Attention and the CRM.
attention.update_org_settings medium conf highaudit
Changes org-wide settings such as automatic call joining and recording-bot image, affecting how every meeting is captured.
attention.update_user_teams medium conf mediumaudit
Adds or removes a user's team memberships in one call, changing which teams' calls and metrics the user can see.