MCP compliance catalog

Every MCP tool in the SCOPE compliance index, grouped by server — risk posture, regulatory exposure, and the tools that warrant tighter governance.
387MCP servers
5470tools
Reset 387 of 387 servers
Intuit QuickBooks
51 tools · footprint 188
15 critical 10 high 17 med 9 low COSOGLBA+3 more
Zoho Books
25 tools · footprint 96
3 critical 14 high 7 med 1 low COSOPCI+1 more
PayPal
33 tools · footprint 86
6 critical 7 high 9 med 11 low COSOGLBA+3 more
Workable
25 tools · footprint 81
13 high 12 med COSOSOX
Vercel
25 tools · footprint 78
6 critical 4 high 7 med 8 low COSOPCI+1 more
Stripe
26 tools · footprint 77
3 critical 7 high 10 med 6 low COSOPCI+2 more
Qonto
25 tools · footprint 76
15 high 9 med 1 low COSOGLBA+3 more
Zoho Books
25 tools · footprint 73
3 critical 11 high 11 med COSOPCI+1 more
Xero
25 tools · footprint 72
3 critical 8 high 14 med COSOSOX
Port
25 tools · footprint 69
2 critical 11 high 8 med 4 low COSOSOX
PostHog
36 tools · footprint 69
6 high 22 med 8 low
Supabase
32 tools · footprint 69
4 critical 4 high 8 med 16 low COSOSOX
Datadog
25 tools · footprint 68
1 critical 12 high 11 med 1 low
Zoho CRM
25 tools · footprint 68
2 critical 10 high 12 med 1 low COSOSOX
Zoom
25 tools · footprint 68
11 high 14 med HIPAA
PostHog
25 tools · footprint 66
3 critical 12 high 10 med
‹ PrevPage 1 of 25Next ›
Microsoft Outlook Mail
5 high 8 med 9 low · 22 tools · 0 SoD-flagged
regimes APPICCPAGDPRISO_27001LGPDNIST_CSFPIPEDAPIPLPOPIASOC2UK_GDPR

Tools needing tighter control (5 of 22)

microsoft-outlook-mail.outlook_send_mail high conf mediumOBO
Sends an email as the user to arbitrary recipients, enabling disclosure of mailbox data to external parties and impersonation of the account owner.
microsoft-outlook-mail.outlook_forward_mail high conf mediumOBO
Forwards an existing message to new recipients, a direct path to exfiltrate internal correspondence outside the organization.
microsoft-outlook-mail.outlook_batch_delete_messages high conf mediumOBO
Moves many messages to Deleted Items in a single call; bulk removal of correspondence with broad blast radius.
microsoft-outlook-mail.outlook_email_search high conf mediumOBO
Searches the mailbox by sender and date; can surface PII, credentials, contracts, and confidential correspondence at scale.
microsoft-outlook-mail.outlook_create_filter high conf mediumOBO
Creates an inbox rule that can silently auto-forward, move, or delete incoming mail, a well-known exfiltration and evasion vector.
All other tools (17)
microsoft-outlook-mail.outlook_batch_modify_labels low conf mediumallow
Adds or removes categories on multiple messages in a single call; reversible mailbox organization at scale.
microsoft-outlook-mail.outlook_create_draft medium conf mediumaudit
Composes an email draft on the user's behalf; not auto-sent but staged as the user's outgoing correspondence.
microsoft-outlook-mail.outlook_create_label low conf mediumallow
Adds a new category to the mailbox master list for organizing mail.
microsoft-outlook-mail.outlook_create_reply_all_draft medium conf mediumaudit
Stages a reply-all draft on a message, widening the outgoing recipient set to every participant on the thread.
microsoft-outlook-mail.outlook_create_reply_draft medium conf mediumaudit
Stages a reply draft on an existing message, carrying the original thread's content into a new outgoing communication.
microsoft-outlook-mail.outlook_delete_draft low conf mediumallow
Moves an unsent draft to Deleted Items, discarding staged content that was never transmitted.
microsoft-outlook-mail.outlook_delete_filter medium conf mediumaudit
Deletes an inbox rule, potentially removing a mail-routing or security control the user relied on.
microsoft-outlook-mail.outlook_delete_label low conf mediumallow
Removes a category from the mailbox master list, unassigning it from any messages that carried it.
microsoft-outlook-mail.outlook_modify_labels low conf mediumallow
Adds or removes categories on a single message; minor mailbox organization change.
microsoft-outlook-mail.outlook_modify_thread_labels low conf mediumallow
Adds or removes categories across every message in a thread.
microsoft-outlook-mail.outlook_send_draft medium conf mediumaudit
Sends a previously composed draft as the user; the message leaves the mailbox and cannot be recalled.
microsoft-outlook-mail.outlook_set_vacation low conf mediumallow
Sets the automatic-reply message that responds to all incoming senders, including external parties.
microsoft-outlook-mail.outlook_trash_thread medium conf mediumaudit
Moves an entire conversation to Deleted Items; recoverable but removes correspondence from the active mailbox.
microsoft-outlook-mail.outlook_untrash_thread low conf mediumallow
Restores a conversation from Deleted Items back into the active mailbox.
microsoft-outlook-mail.outlook_update_draft medium conf mediumaudit
Modifies the content or recipients of an existing draft before it is sent as the user's correspondence.
microsoft-outlook-mail.outlook_update_label low conf mediumallow
Renames or recolors an existing category in the mailbox master list.
microsoft-outlook-mail.read_resource medium conf mediumaudit
Reads a file, email, or chat by URI, pulling its full body and attachments into agent context.