MCP compliance catalog

Every MCP tool in the SCOPE compliance index, grouped by server — risk posture, regulatory exposure, and the tools that warrant tighter governance.
303MCP servers
4476tools
Reset 303 of 303 servers
Intuit QuickBooks
51 tools · footprint 188
15 critical 10 high 17 med 9 low COSOGLBA+3 more
PayPal
33 tools · footprint 86
6 critical 7 high 9 med 11 low COSOGLBA+3 more
Stripe
26 tools · footprint 77
3 critical 7 high 10 med 6 low COSOPCI+2 more
Qonto
25 tools · footprint 76
15 high 9 med 1 low COSOGLBA+3 more
PostHog
36 tools · footprint 69
6 high 22 med 8 low
Supabase
32 tools · footprint 69
4 critical 4 high 8 med 16 low COSOSOX
Datadog
25 tools · footprint 68
1 critical 12 high 11 med 1 low
PostHog
25 tools · footprint 66
3 critical 12 high 10 med
Adobe Workfront
25 tools · footprint 65
2 critical 7 high 13 med 3 low
MailerLite
25 tools · footprint 63
1 critical 11 high 12 med 1 low
MongoDB
25 tools · footprint 63
2 critical 7 high 12 med 4 low
MotherDuck
21 tools · footprint 62
4 critical 5 high 9 med 3 low
Salesforce
32 tools · footprint 60
4 critical 2 high 9 med 17 low COSOSOX
Close
64 tools · footprint 59
5 high 22 med 37 low COSOSOX
Cloudflare
26 tools · footprint 58
3 critical 4 high 6 med 13 low
Webflow
23 tools · footprint 57
2 critical 5 high 10 med 6 low
‹ PrevPage 1 of 19Next ›
Malwarebytes
1 high 3 med 2 low · 6 tools · 0 SoD-flagged
regimes APPICCPAGDPRISO_27001LGPDPIPEDAPIPLPOPIASOC2UK_GDPR

Tools needing tighter control (1 of 6)

malwarebytes.reputation-scan_all high conf highOBO
Submits a batch of links, email addresses, and phone numbers to Malwarebytes in one call, sending personal identifiers for many individuals to an external threat service at once.
All other tools (5)
malwarebytes.reputation-check_email medium conf highaudit
Sends an email address to Malwarebytes for phishing and scam reputation lookup, disclosing a personal identifier to a third-party processor.
malwarebytes.reputation-check_link low conf highallow
Checks a URL against Malwarebytes reputation data; read-only, though the submitted link is shared with an external service.
malwarebytes.reputation-check_phone medium conf highaudit
Sends a phone number to Malwarebytes to test it against scam reputation data, disclosing a personal identifier to a third-party processor.
malwarebytes.reputation-report medium conf highaudit
Files a suspicious-content report with Malwarebytes, creating a durable third-party abuse record against the reported address, number, or domain that may affect its deliverability and reputation.
malwarebytes.reputation-whois low conf highallow
Retrieves public domain registration records to judge a site's legitimacy; results may include registrant contact details where the registry does not redact them.