MCP compliance catalog

Every MCP tool in the SCOPE compliance index, grouped by server — risk posture, regulatory exposure, and the tools that warrant tighter governance.
303MCP servers
4476tools
Reset 303 of 303 servers
Intuit QuickBooks
51 tools · footprint 188
15 critical 10 high 17 med 9 low COSOGLBA+3 more
PayPal
33 tools · footprint 86
6 critical 7 high 9 med 11 low COSOGLBA+3 more
Stripe
26 tools · footprint 77
3 critical 7 high 10 med 6 low COSOPCI+2 more
Qonto
25 tools · footprint 76
15 high 9 med 1 low COSOGLBA+3 more
PostHog
36 tools · footprint 69
6 high 22 med 8 low
Supabase
32 tools · footprint 69
4 critical 4 high 8 med 16 low COSOSOX
Datadog
25 tools · footprint 68
1 critical 12 high 11 med 1 low
PostHog
25 tools · footprint 66
3 critical 12 high 10 med
Adobe Workfront
25 tools · footprint 65
2 critical 7 high 13 med 3 low
MailerLite
25 tools · footprint 63
1 critical 11 high 12 med 1 low
MongoDB
25 tools · footprint 63
2 critical 7 high 12 med 4 low
MotherDuck
21 tools · footprint 62
4 critical 5 high 9 med 3 low
Salesforce
32 tools · footprint 60
4 critical 2 high 9 med 17 low COSOSOX
Close
64 tools · footprint 59
5 high 22 med 37 low COSOSOX
Cloudflare
26 tools · footprint 58
3 critical 4 high 6 med 13 low
Webflow
23 tools · footprint 57
2 critical 5 high 10 med 6 low
‹ PrevPage 1 of 19Next ›
JiraDocs ↗
4 med 10 low · 14 tools · 0 SoD-flagged
regimes APPICCPAGDPRISO_27001LGPDPIPEDAPIPLPOPIASOC2UK_GDPR

Tools needing tighter control (0 of 14)

None — every tool is low-risk, high-confidence, and outside PCI/HIPAA payload scope.
All other tools (14)
jira.addCommentToJiraIssue low conf mediumallow
Adds a new comment to an issue or overwrites an existing one when a comment ID is supplied; reversible and visible to all issue watchers.
jira.addWorklogToJiraIssue low conf mediumallow
Logs time against an issue, updating time-tracking totals that may feed downstream reporting or billing.
jira.createJiraIssue low conf mediumallow
Creates a new Jira issue or issue link, adding a tracked work item visible to the project's members.
jira.editJiraIssue medium conf mediumaudit
Updates fields on an existing issue, changing tracked work-item state that other users and automation rules depend on.
jira.getIssueLinkTypes low conf mediumallow
Lists the issue link types configured in the instance; read-only reference data.
jira.getJiraIssue low conf mediumallow
Retrieves the full content of a single Jira issue, including its fields, status, and participants.
jira.getJiraIssueRemoteIssueLinks low conf mediumallow
Lists remote links attached to an issue, revealing connected Confluence pages and external resources.
jira.getJiraIssueTypeMetaWithFields low conf mediumallow
Returns create-field metadata for a project and issue type; configuration data only, no record content.
jira.getJiraProjectIssueTypesMetadata low conf mediumallow
Lists the issue types configured in a project; read-only schema information.
jira.getTransitionsForJiraIssue low conf mediumallow
Lists the workflow transitions currently available on an issue; read-only workflow metadata.
jira.getVisibleJiraProjects low conf mediumallow
Lists the Jira projects the caller can access, revealing project keys and names across the instance.
jira.lookupJiraAccountId medium conf mediumaudit
Resolves user names or email addresses to Jira account IDs, exposing directory-level personal data and enabling enumeration of individuals in the workspace.
jira.searchJiraIssuesUsingJql medium conf mediumaudit
Runs an arbitrary JQL query across every issue the caller can see, potentially returning large result sets containing reporter, assignee, and comment personal data.
jira.transitionJiraIssue medium conf mediumaudit
Advances an issue through a workflow transition, changing its status and potentially triggering notifications, SLAs, or automation rules.