MCP compliance catalog

Every MCP tool in the SCOPE compliance index, grouped by server — risk posture, regulatory exposure, and the tools that warrant tighter governance.
303MCP servers
4476tools
Reset 303 of 303 servers
Intuit QuickBooks
51 tools · footprint 188
15 critical 10 high 17 med 9 low COSOGLBA+3 more
PayPal
33 tools · footprint 86
6 critical 7 high 9 med 11 low COSOGLBA+3 more
Stripe
26 tools · footprint 77
3 critical 7 high 10 med 6 low COSOPCI+2 more
Qonto
25 tools · footprint 76
15 high 9 med 1 low COSOGLBA+3 more
PostHog
36 tools · footprint 69
6 high 22 med 8 low
Supabase
32 tools · footprint 69
4 critical 4 high 8 med 16 low COSOSOX
Datadog
25 tools · footprint 68
1 critical 12 high 11 med 1 low
PostHog
25 tools · footprint 66
3 critical 12 high 10 med
Adobe Workfront
25 tools · footprint 65
2 critical 7 high 13 med 3 low
MailerLite
25 tools · footprint 63
1 critical 11 high 12 med 1 low
MongoDB
25 tools · footprint 63
2 critical 7 high 12 med 4 low
MotherDuck
21 tools · footprint 62
4 critical 5 high 9 med 3 low
Salesforce
32 tools · footprint 60
4 critical 2 high 9 med 17 low COSOSOX
Close
64 tools · footprint 59
5 high 22 med 37 low COSOSOX
Cloudflare
26 tools · footprint 58
3 critical 4 high 6 med 13 low
Webflow
23 tools · footprint 57
2 critical 5 high 10 med 6 low
‹ PrevPage 1 of 19Next ›
LushaDocs ↗
1 critical 6 high 15 low · 22 tools · 0 SoD-flagged
regimes APPICCPAGDPRISO_27001LGPDPIPEDAPIPLPOPIASOC2UK_GDPR

Tools needing tighter control (7 of 22)

lusha.prospecting_contact_enrich critical conf mediumhuman approval
Reveals direct email addresses and mobile numbers for a batch of individuals in one call, pulling third-party personal data into the agent's context and burning purchased credits per record.
lusha.contacts_search high conf mediumOBO
Resolves a named person or LinkedIn profile into verified contact details, disclosing personal data the individual never supplied to the caller.
lusha.prospecting_contact_search high conf mediumOBO
Builds arbitrarily large lists of identifiable people filtered by role, seniority and location, assembling a targeting set out of third-party personal data.
lusha.lookalike_contacts high conf mediumOBO
Expands one known individual into a list of similar people, generating personal-data profiles of individuals the caller had no prior relationship with.
lusha.signals_contacts_search high conf mediumOBO
Identifies individuals from partial input and returns their recent behavioural activity, combining identity resolution with tracking data about named people.
lusha.signals_contacts_get high conf mediumOBO
Returns recent behavioural signals for named individuals, exposing tracking data about identifiable people to whoever holds the contact ids.
lusha.recommendations_contacts_get high conf mediumOBO
Pages through scored profiles of individuals with attached activity signals, letting a single agent harvest a ranked personal-data set across unlimited pages.
All other tools (15)
lusha.account_usage low conf mediumallow
Reports remaining credits, rate-limit headroom and plan tier, exposing subscription and consumption metadata for the workspace.
lusha.companies_search low conf mediumallow
Returns firmographic details for a company by domain or name; read-only and limited to organisation-level business data.
lusha.lookalike_companies low conf mediumallow
Expands a seed account into similar organisations, widening the target list without touching personal data.
lusha.prospecting_company_enrich low conf mediumallow
Pulls detailed firmographics for specified company ids and draws down the account's purchased credit balance.
lusha.prospecting_company_filters low conf mediumallow
Lists the valid filter values for company prospecting; metadata lookup that charges no credits.
lusha.prospecting_company_search low conf mediumallow
Compiles target-account lists from firmographic and technographic filters; no personal data, though results shape downstream outreach.
lusha.prospecting_contact_filters low conf mediumallow
Lists the valid filter values for contact prospecting; metadata lookup that charges no credits and returns no personal data.
lusha.recommendations_companies_filters low conf mediumallow
Returns the signal types and Target Profiles usable when filtering company recommendations; configuration metadata only.
lusha.recommendations_companies_get low conf mediumallow
Pages through scored account recommendations with intent signals; steers pipeline priorities but exposes only organisation-level data.
lusha.recommendations_contacts_filters low conf mediumallow
Returns the signal types and Target Profiles usable when filtering contact recommendations; configuration metadata only.
lusha.recommendations_status_get low conf mediumallow
Reports whether a user's recommendation set is still computing; status metadata only, with no record content returned.
lusha.signals_companies_get low conf mediumallow
Fetches recent activity signals for specified company ids, a read-only lookup on organisation-level data.
lusha.signals_companies_search low conf mediumallow
Matches organisations and returns recent buying-intent signals about them; organisation-level intelligence with no individual identified.
lusha.signals_company_filters low conf mediumallow
Enumerates the signal filters available for companies; a schema lookup with no credit cost.
lusha.signals_contact_filters low conf mediumallow
Enumerates the signal filters available for contacts; a schema lookup that returns no individual's data.