MCP compliance catalog

Every MCP tool in the SCOPE compliance index, grouped by server — risk posture, regulatory exposure, and the tools that warrant tighter governance.
303MCP servers
4476tools
Reset 303 of 303 servers
Intuit QuickBooks
51 tools · footprint 188
15 critical 10 high 17 med 9 low COSOGLBA+3 more
PayPal
33 tools · footprint 86
6 critical 7 high 9 med 11 low COSOGLBA+3 more
Stripe
26 tools · footprint 77
3 critical 7 high 10 med 6 low COSOPCI+2 more
Qonto
25 tools · footprint 76
15 high 9 med 1 low COSOGLBA+3 more
PostHog
36 tools · footprint 69
6 high 22 med 8 low
Supabase
32 tools · footprint 69
4 critical 4 high 8 med 16 low COSOSOX
Datadog
25 tools · footprint 68
1 critical 12 high 11 med 1 low
PostHog
25 tools · footprint 66
3 critical 12 high 10 med
Adobe Workfront
25 tools · footprint 65
2 critical 7 high 13 med 3 low
MailerLite
25 tools · footprint 63
1 critical 11 high 12 med 1 low
MongoDB
25 tools · footprint 63
2 critical 7 high 12 med 4 low
MotherDuck
21 tools · footprint 62
4 critical 5 high 9 med 3 low
Salesforce
32 tools · footprint 60
4 critical 2 high 9 med 17 low COSOSOX
Close
64 tools · footprint 59
5 high 22 med 37 low COSOSOX
Cloudflare
26 tools · footprint 58
3 critical 4 high 6 med 13 low
Webflow
23 tools · footprint 57
2 critical 5 high 10 med 6 low
‹ PrevPage 1 of 19Next ›
Microsoft DataverseDocs ↗
1 critical 3 high 8 med 3 low · 15 tools · 2 SoD-flagged
regimes APPICCPAGDPRISO_27001LGPDNIST_CSFPIPEDAPIPLPOPIASOC2UK_GDPR

Tools needing tighter control (4 of 15)

dataverse.delete_table critical conf mediumhuman approval
Drops an entire Dataverse table and every row it holds — irreversible loss of all business and customer data stored in that table.
dataverse.read_query high conf mediumhuman approval
Runs arbitrary SQL SELECT queries across Dataverse tables, capable of returning large volumes of records including personal data in a single call.
dataverse.delete_record high conf mediumOBO
Permanently removes a row from a Dataverse table, destroying a business record that may contain personal data with no built-in recovery.
dataverse.file_download high conf mediumOBO
Generates a SAS URL that grants direct download access to a stored Dataverse file, whose contents may include personal or confidential data.
All other tools (11)
dataverse.commit_file_upload low conf mediumallow
Finalizes a previously staged file upload, attaching the uploaded content to Dataverse.
dataverse.create_record medium conf mediumaudit
Inserts a new row into a Dataverse table, creating a business record that may contain personal data about identifiable individuals.
dataverse.create_table medium conf mediumaudit
Adds a new table and schema to the Dataverse environment, altering the data model that downstream apps and flows depend on.
dataverse.delete_skill medium conf mediumaudit
Removes a Dataverse skill or playbook, disabling automation that dependent agents or apps rely on.
dataverse.describe low conf mediumallow
Retrieves detailed contents of tables, records, schemas, and skills from search results, which can expose personal data held in matched rows.
dataverse.init_file_upload medium conf mediumaudit
Generates a time-limited SAS URL granting write access to Dataverse file storage, staging content to be attached to records.
dataverse.search low conf mediumallow
Searches table schemas and business skills by keyword, returning metadata only without exposing row-level data.
dataverse.search_data medium conf mediumaudit
Searches structured and unstructured Dataverse data, surfacing matching records that may include personal or customer information.
dataverse.update_record medium conf mediumaudit
Overwrites fields on an existing Dataverse row, changing a business record that may hold personal or customer data.
dataverse.update_table medium conf mediumaudit
Alters the schema or metadata of an existing table, which can break dependent apps, forms, and integrations relying on the old shape.
dataverse.upsert_skill medium conf mediumaudit
Adds or updates a Dataverse skill or playbook, changing reusable automation logic that agents and apps execute against the environment.