Every MCP tool in the SCOPE compliance index, grouped by server — risk posture, regulatory exposure, and the tools that warrant tighter governance.
2 high 6 med 1 low · 9 tools · 1 SoD-flagged
regimes APPICCPAGDPRHIPAAISO_27001LGPDPIPEDAPIPLPOPIASOC2UK_GDPR
Tools needing tighter control (5 of 9)
cognito-forms.get_form_entries high conf mediumhuman approval redact
Retrieves many submissions from a form view in one call, enabling bulk export of respondents' personal data.
cognito-forms.delete_entry high conf mediumOBO redact
Permanently removes a submission and its collected data, destroying the record irreversibly.
cognito-forms.get_entry medium conf mediumaudit redact
Returns a single submission's full field data, exposing that respondent's personal information to the caller.
cognito-forms.get_document medium conf mediumaudit redact
Fetches a generated document such as an invoice or contract, which can embed the submitter's personal details.
cognito-forms.get_file medium conf mediumaudit redact
Downloads uploaded attachments and electronic signatures from a submission, exposing sensitive personal files.
All other tools (4)
cognito-forms.create_entry medium conf mediumaudit
Writes a new submission into a form, injecting respondent data that flows into downstream workflows and notifications.
cognito-forms.generate_form low conf mediumallow
Builds a new form structure from a natural-language description, adding a data-collection surface to the organization.
cognito-forms.set_form_availability medium conf mediumaudit
Opens or closes a form to new submissions and sets its closed message, controlling public data intake.
cognito-forms.update_entry medium conf mediumaudit
Overwrites fields on an existing submission, altering the recorded account of what a respondent provided.