MCP compliance catalog

Every MCP tool in the SCOPE compliance index, grouped by server — risk posture, regulatory exposure, and the tools that warrant tighter governance.
303MCP servers
4476tools
Reset 303 of 303 servers
Intuit QuickBooks
51 tools · footprint 188
15 critical 10 high 17 med 9 low COSOGLBA+3 more
PayPal
33 tools · footprint 86
6 critical 7 high 9 med 11 low COSOGLBA+3 more
Stripe
26 tools · footprint 77
3 critical 7 high 10 med 6 low COSOPCI+2 more
Qonto
25 tools · footprint 76
15 high 9 med 1 low COSOGLBA+3 more
PostHog
36 tools · footprint 69
6 high 22 med 8 low
Supabase
32 tools · footprint 69
4 critical 4 high 8 med 16 low COSOSOX
Datadog
25 tools · footprint 68
1 critical 12 high 11 med 1 low
PostHog
25 tools · footprint 66
3 critical 12 high 10 med
Adobe Workfront
25 tools · footprint 65
2 critical 7 high 13 med 3 low
MailerLite
25 tools · footprint 63
1 critical 11 high 12 med 1 low
MongoDB
25 tools · footprint 63
2 critical 7 high 12 med 4 low
MotherDuck
21 tools · footprint 62
4 critical 5 high 9 med 3 low
Salesforce
32 tools · footprint 60
4 critical 2 high 9 med 17 low COSOSOX
Close
64 tools · footprint 59
5 high 22 med 37 low COSOSOX
Cloudflare
26 tools · footprint 58
3 critical 4 high 6 med 13 low
Webflow
23 tools · footprint 57
2 critical 5 high 10 med 6 low
‹ PrevPage 1 of 19Next ›
GleanDocs ↗
3 high 7 med 1 low · 11 tools · 0 SoD-flagged
regimes APPICCPAGDPRISO_27001LGPDPIPEDAPIPLPOPIASOC2UK_GDPR

Tools needing tighter control (3 of 11)

glean.search high conf highOBO
Queries every connected enterprise source at once — documents, tickets, email indexes, HR content — so a single query can surface personal and confidential material from systems the agent was never pointed at directly.
glean.gmail_search high conf mediumOBO
Reads private mailbox threads, exposing correspondent identities, message bodies, and attachments that routinely carry personal data and privileged business discussion.
glean.outlook_search high conf mediumOBO
Reads Outlook mail and calendar entries, revealing private correspondence plus meeting attendees, times, and subjects that map an individual's relationships and movements.
All other tools (8)
glean.chat medium conf mediumaudit
Routes a free-form prompt through Glean's assistant, which synthesizes answers from indexed corporate content and can restate confidential material outside its original access context.
glean.code_search medium conf mediumaudit
Returns proprietary source code and repository contents, exposing implementation details and any credentials or keys that were committed into the codebase.
glean.employee_search medium conf mediumaudit
Reads employee directory profiles — names, roles, reporting lines, and expertise signals — producing staff personal data that feeds org-chart reconstruction and targeting.
glean.meeting_lookup medium conf mediumaudit
Surfaces meeting recordings and notes containing recorded speech and named participants, a category of personal data that often carries consent obligations of its own.
glean.memory medium conf mediumaudit
Reads and rewrites the persisted memory store for a user, so personal preferences and retained facts can be disclosed, altered, or erased without the user's involvement.
glean.memory_schema low conf mediumallow
Returns memory category and schema metadata only; no personal content is read, though it maps what personalization data the tenant stores.
glean.read_document medium conf highaudit
Pulls the full body of a named internal document into the agent context, where confidential contract, roadmap, or HR content can be reproduced downstream.
glean.user_activity medium conf mediumaudit
Returns a behavioral trail of what the user recently searched, opened, and worked on, which doubles as a productivity-monitoring record if repurposed.