MCP compliance catalog

Every MCP tool in the SCOPE compliance index, grouped by server — risk posture, regulatory exposure, and the tools that warrant tighter governance.
387MCP servers
5470tools
Reset 387 of 387 servers
Intuit QuickBooks
51 tools · footprint 188
15 critical 10 high 17 med 9 low COSOGLBA+3 more
Zoho Books
25 tools · footprint 96
3 critical 14 high 7 med 1 low COSOPCI+1 more
PayPal
33 tools · footprint 86
6 critical 7 high 9 med 11 low COSOGLBA+3 more
Workable
25 tools · footprint 81
13 high 12 med COSOSOX
Vercel
25 tools · footprint 78
6 critical 4 high 7 med 8 low COSOPCI+1 more
Stripe
26 tools · footprint 77
3 critical 7 high 10 med 6 low COSOPCI+2 more
Qonto
25 tools · footprint 76
15 high 9 med 1 low COSOGLBA+3 more
Zoho Books
25 tools · footprint 73
3 critical 11 high 11 med COSOPCI+1 more
Xero
25 tools · footprint 72
3 critical 8 high 14 med COSOSOX
Port
25 tools · footprint 69
2 critical 11 high 8 med 4 low COSOSOX
PostHog
36 tools · footprint 69
6 high 22 med 8 low
Supabase
32 tools · footprint 69
4 critical 4 high 8 med 16 low COSOSOX
Datadog
25 tools · footprint 68
1 critical 12 high 11 med 1 low
Zoho CRM
25 tools · footprint 68
2 critical 10 high 12 med 1 low COSOSOX
Zoom
25 tools · footprint 68
11 high 14 med HIPAA
PostHog
25 tools · footprint 66
3 critical 12 high 10 med
‹ PrevPage 1 of 25Next ›
CandidDocs ↗
1 med 5 low · 6 tools · 0 SoD-flagged
regimes CCPAGDPRUK_GDPR

Tools needing tighter control (0 of 6)

None — every tool is low-risk, high-confidence, and outside PCI/HIPAA payload scope.
All other tools (6)
candid.current_date low conf highallow
Returns the current date so time-sensitive grant and deadline queries resolve correctly; carries no business or personal data.
candid.identify_locations low conf highallow
Converts a location description into Candid's geographic codes so organization searches can be filtered by place; read-only lookup with no record access.
candid.identify_mentioned_organizations low conf highallow
Resolves organization names appearing in a response to official Candid profiles and links them, adding reference data without changing any record.
candid.knowledge_resources low conf highallow
Searches Candid's published knowledge base — research reports, training material, blog posts, curated news, IssueLab papers and video transcripts — returning editorial content only.
candid.search_organizations medium conf mediumaudit
Queries millions of nonprofit and foundation profiles with filters that include leader demographics, so results can surface demographic attributes of named individuals across many organizations at once.
candid.taxonomy_terms low conf highallow
Maps a free-text description to Philanthropy Classification System codes, shaping how downstream searches are scoped but writing nothing.