MCP compliance catalog

Every MCP tool in the SCOPE compliance index, grouped by server — risk posture, regulatory exposure, and the tools that warrant tighter governance.

80MCP servers

1695tools

Intuit QuickBooks

51 tools · footprint 188

15 critical 10 high 17 med 9 low COSOGLBA+3 more

33 tools · footprint 86

6 critical 7 high 9 med 11 low COSOGLBA+3 more

26 tools · footprint 77

3 critical 7 high 10 med 6 low COSOPCI+2 more

36 tools · footprint 69

6 high 22 med 8 low

32 tools · footprint 69

4 critical 4 high 8 med 16 low COSOSOX

32 tools · footprint 60

4 critical 2 high 9 med 17 low COSOSOX

64 tools · footprint 59

5 high 22 med 37 low COSOSOX

26 tools · footprint 58

3 critical 4 high 6 med 13 low

23 tools · footprint 57

2 critical 5 high 10 med 6 low

64 tools · footprint 55

5 high 16 med 43 low

37 tools · footprint 50

10 high 14 med 13 low COSOHIPAA+1 more

36 tools · footprint 48

12 high 11 med 13 low COSOGLBA+1 more

58 tools · footprint 47

4 high 15 med 39 low COSOSOX

36 tools · footprint 47

1 critical 5 high 12 med 18 low

43 tools · footprint 44

6 high 16 med 21 low

25 tools · footprint 43

3 high 14 med 8 low

Google Drive

2 high 2 med 3 low · 7 tools · 0 SoD-flagged

regimes APPICCPAGDPRISO_27001LGPDPIPEDAPIPLPOPIASOC2UK_GDPR

Tools needing tighter control (2 of 7)

google-drive.read_file_content high conf highOBO

Pulls a Drive file's contents into the agent context; high exposure if the file contains PII, financial, or regulated data.

google-drive.download_file_content high conf highOBO

Downloads a binary file from Drive; same exfiltration profile as content read.

All other tools (5)

google-drive.create_file medium conf highaudit

Writes new content into the user's Drive; can introduce malicious or noncompliant material.

google-drive.get_file_metadata low conf highallow

Reads metadata (name, owner, mtime) for a single file.

google-drive.get_file_permissions low conf highallow

Reads who has access to a file.

google-drive.list_recent_files low conf highallow

Lists files recently touched by the user.

google-drive.search_files medium conf highaudit

Searches across the user's Drive; can surface regulated documents the agent wasn't intended to see.