MCP compliance catalog

Every MCP tool in the SCOPE compliance index, grouped by server — risk posture, regulatory exposure, and the tools that warrant tighter governance.
303MCP servers
4476tools
Reset 303 of 303 servers
Intuit QuickBooks
51 tools · footprint 188
15 critical 10 high 17 med 9 low COSOGLBA+3 more
PayPal
33 tools · footprint 86
6 critical 7 high 9 med 11 low COSOGLBA+3 more
Stripe
26 tools · footprint 77
3 critical 7 high 10 med 6 low COSOPCI+2 more
Qonto
25 tools · footprint 76
15 high 9 med 1 low COSOGLBA+3 more
PostHog
36 tools · footprint 69
6 high 22 med 8 low
Supabase
32 tools · footprint 69
4 critical 4 high 8 med 16 low COSOSOX
Datadog
25 tools · footprint 68
1 critical 12 high 11 med 1 low
PostHog
25 tools · footprint 66
3 critical 12 high 10 med
Adobe Workfront
25 tools · footprint 65
2 critical 7 high 13 med 3 low
MailerLite
25 tools · footprint 63
1 critical 11 high 12 med 1 low
MongoDB
25 tools · footprint 63
2 critical 7 high 12 med 4 low
MotherDuck
21 tools · footprint 62
4 critical 5 high 9 med 3 low
Salesforce
32 tools · footprint 60
4 critical 2 high 9 med 17 low COSOSOX
Close
64 tools · footprint 59
5 high 22 med 37 low COSOSOX
Cloudflare
26 tools · footprint 58
3 critical 4 high 6 med 13 low
Webflow
23 tools · footprint 57
2 critical 5 high 10 med 6 low
‹ PrevPage 1 of 19Next ›
CData Connect AIDocs ↗
1 critical 1 high 6 low · 8 tools · 0 SoD-flagged
regimes APPICCPAGDPRISO_27001LGPDPIPEDAPIPLPOPIASOC2UK_GDPR

Tools needing tighter control (2 of 8)

cdata-connect-ai.queryData critical conf mediumhuman approval
Runs arbitrary SQL against any connected data source and returns the rows, enabling bulk extraction of customer, financial, or other sensitive records across every federated system.
cdata-connect-ai.executeProcedure high conf mediumOBO
Executes a stored procedure against a connected data source, running server-side logic whose effects may include modifying or deleting downstream production data.
All other tools (6)
cdata-connect-ai.getCatalogs low conf mediumallow
Lists the data-source connections registered in Connect AI, revealing which downstream systems (CRMs, databases, warehouses) are reachable through the gateway.
cdata-connect-ai.getColumns low conf mediumallow
Returns column definitions for a table, exposing field names and data types that can indicate where sensitive or personal data resides in a connected source.
cdata-connect-ai.getProcedureParameters low conf mediumallow
Returns parameter metadata for a stored procedure, exposing the inputs required to invoke server-side logic against a connected source.
cdata-connect-ai.getProcedures low conf mediumallow
Lists the stored procedures defined in a connected catalog and schema, surfacing executable server-side logic reachable through the gateway.
cdata-connect-ai.getSchemas low conf mediumallow
Enumerates database schemas within a catalog, exposing how a connected source organizes its tables and stored procedures.
cdata-connect-ai.getTables low conf mediumallow
Enumerates the tables available in a connected catalog and schema, mapping the queryable surface of a downstream data source.