MCP compliance catalog

Every MCP tool in the SCOPE compliance index, grouped by server — risk posture, regulatory exposure, and the tools that warrant tighter governance.
303MCP servers
4476tools
Reset 303 of 303 servers
Intuit QuickBooks
51 tools · footprint 188
15 critical 10 high 17 med 9 low COSOGLBA+3 more
PayPal
33 tools · footprint 86
6 critical 7 high 9 med 11 low COSOGLBA+3 more
Stripe
26 tools · footprint 77
3 critical 7 high 10 med 6 low COSOPCI+2 more
Qonto
25 tools · footprint 76
15 high 9 med 1 low COSOGLBA+3 more
PostHog
36 tools · footprint 69
6 high 22 med 8 low
Supabase
32 tools · footprint 69
4 critical 4 high 8 med 16 low COSOSOX
Datadog
25 tools · footprint 68
1 critical 12 high 11 med 1 low
PostHog
25 tools · footprint 66
3 critical 12 high 10 med
Adobe Workfront
25 tools · footprint 65
2 critical 7 high 13 med 3 low
MailerLite
25 tools · footprint 63
1 critical 11 high 12 med 1 low
MongoDB
25 tools · footprint 63
2 critical 7 high 12 med 4 low
MotherDuck
21 tools · footprint 62
4 critical 5 high 9 med 3 low
Salesforce
32 tools · footprint 60
4 critical 2 high 9 med 17 low COSOSOX
Close
64 tools · footprint 59
5 high 22 med 37 low COSOSOX
Cloudflare
26 tools · footprint 58
3 critical 4 high 6 med 13 low
Webflow
23 tools · footprint 57
2 critical 5 high 10 med 6 low
‹ PrevPage 1 of 19Next ›
MailerLiteDocs ↗
1 critical 11 high 12 med 1 low · 25 tools · 5 SoD-flagged
regimes APPICCPAGDPRISO_27001LGPDPIPEDAPIPLPOPIASOC2UK_GDPR

Tools needing tighter control (12 of 25)

mailerlite.delete_field critical conf highhuman approval
Destroys a custom field and the values stored under it for every subscriber in the account, with no recovery path and no second approver.
mailerlite.list_subscribers high conf highhuman approval
Enumerates the account's subscriber base with email addresses, names, and status, giving an agent a direct path to pull the whole marketing list.
mailerlite.import_subscribers_to_group high conf highOBO
Loads a batch of personal records into the audience in one call, making an unvetted or purchased list immediately mailable.
mailerlite.get_segment_subscribers high conf highhuman approval
Returns every contact matching a segment's criteria, exposing a targeted slice of the audience along with its inferred attributes.
mailerlite.create_webhook high conf highOBO
Opens a standing egress channel that streams subscriber and campaign events to any external URL the caller names.
mailerlite.update_webhook high conf highOBO
Repoints or re-enables an existing webhook, which can silently redirect subscriber event data to a different destination.
mailerlite.batch_requests high conf mediumOBO
Executes an arbitrary set of API operations in one call, amplifying any write or delete and collapsing per-operation review into a single approval.
mailerlite.schedule_campaign high conf highOBO
Commits an email blast to the selected audience; once delivery starts the message cannot be recalled from recipients' inboxes, and any consent defect is already realised.
mailerlite.get_campaign_subscribers high conf highhuman approval
Returns the full recipient list for a send, exposing who was contacted along with their delivery status.
mailerlite.get_campaign_link_recipients high conf highhuman approval
Links click-tracking data back to named individuals, revealing interest signals that count as behavioural profiling under privacy law.
mailerlite.manage_ecommerce_customers high conf mediumOBO
Covers read, write, and delete on synced shop customer records, so one call can dump or destroy purchaser identity data.
mailerlite.manage_ecommerce_orders high conf mediumOBO
Reads and rewrites purchase records tied to named customers, including bulk import and deletion of order history used for revenue segmentation.
All other tools (13)
mailerlite.add_subscriber medium conf highaudit
Upserts a subscriber record, which can add contacts who never gave marketing consent and put them in scope for future sends.
mailerlite.create_automation low conf highallow
Adds a draft workflow that sends nothing until it is enabled, so the immediate effect is limited to account clutter.
mailerlite.create_campaign medium conf highaudit
Drafts a campaign with its audience, sender identity, and content, staging outbound messaging that carries the company's brand.
mailerlite.delete_automation medium conf highaudit
Tears down a live workflow, halting onboarding or nurture sequences for subscribers currently mid-journey.
mailerlite.delete_campaign medium conf highaudit
Removes a campaign along with the performance history marketers rely on for reporting and consent evidence.
mailerlite.delete_subscriber medium conf highaudit
Removes a person from the audience so they stop receiving mail; the vendor retains their record for re-subscription, so it is not a full erasure.
mailerlite.delete_webhook medium conf highaudit
Removes an event subscription, breaking downstream CRM or analytics sync without any visible failure in MailerLite itself.
mailerlite.get_subscriber medium conf highaudit
Reads one subscriber's contact details, custom fields, and subscription status.
mailerlite.get_subscriber_activity medium conf highaudit
Exposes one person's open, click, and send history — behavioural profiling data tied to an identifiable individual.
mailerlite.search medium conf mediumaudit
Queries across account resources and can surface subscriber records the caller did not know to ask for by ID.
mailerlite.update_automation_email medium conf highaudit
Changes the body of an email that fires automatically to every subscriber entering the workflow, with no per-send review.
mailerlite.update_campaign medium conf highaudit
Rewrites subject line, sender address, or body of a campaign, altering what recipients see and who it appears to come from.
mailerlite.update_subscriber medium conf highaudit
Modifies stored personal data on a subscriber record, including email, name, and custom field values used for targeting.