MCP compliance catalog

Every MCP tool in the SCOPE compliance index, grouped by server — risk posture, regulatory exposure, and the tools that warrant tighter governance.
303MCP servers
4476tools
Reset 303 of 303 servers
Intuit QuickBooks
51 tools · footprint 188
15 critical 10 high 17 med 9 low COSOGLBA+3 more
PayPal
33 tools · footprint 86
6 critical 7 high 9 med 11 low COSOGLBA+3 more
Stripe
26 tools · footprint 77
3 critical 7 high 10 med 6 low COSOPCI+2 more
Qonto
25 tools · footprint 76
15 high 9 med 1 low COSOGLBA+3 more
PostHog
36 tools · footprint 69
6 high 22 med 8 low
Supabase
32 tools · footprint 69
4 critical 4 high 8 med 16 low COSOSOX
Datadog
25 tools · footprint 68
1 critical 12 high 11 med 1 low
PostHog
25 tools · footprint 66
3 critical 12 high 10 med
Adobe Workfront
25 tools · footprint 65
2 critical 7 high 13 med 3 low
MailerLite
25 tools · footprint 63
1 critical 11 high 12 med 1 low
MongoDB
25 tools · footprint 63
2 critical 7 high 12 med 4 low
MotherDuck
21 tools · footprint 62
4 critical 5 high 9 med 3 low
Salesforce
32 tools · footprint 60
4 critical 2 high 9 med 17 low COSOSOX
Close
64 tools · footprint 59
5 high 22 med 37 low COSOSOX
Cloudflare
26 tools · footprint 58
3 critical 4 high 6 med 13 low
Webflow
23 tools · footprint 57
2 critical 5 high 10 med 6 low
‹ PrevPage 1 of 19Next ›
MongoDBDocs ↗
2 critical 7 high 12 med 4 low · 25 tools · 6 SoD-flagged
regimes APPICCPAGDPRISO_27001LGPDNIST_CSFPIPEDAPIPLPOPIASOC2UK_GDPR

Tools needing tighter control (9 of 25)

mongodb.drop-database critical conf mediumhuman approval
Permanently deletes an entire database and every collection it holds, an irreversible loss of all stored records.
mongodb.drop-collection critical conf mediumhuman approval
Permanently deletes a collection and all of its documents, destroying customer data with no undo.
mongodb.atlas-create-db-user high conf mediumhuman approval
Creates an Atlas database user, provisioning new credentials and access to cluster data without a second approver.
mongodb.atlas-create-access-list high conf mediumhuman approval
Opens an Atlas cluster to additional IP or CIDR ranges, widening the network attack surface that can reach the database.
mongodb.atlas-connect-cluster high conf mediumhuman approval
Connects to an Atlas cluster and, when no connection string is set, mints a temporary database user with a random password.
mongodb.delete-many high conf mediumhuman approval
Removes every document matching a filter in one call, capable of wiping large swaths of a collection at once.
mongodb.update-many high conf mediumOBO
Modifies every document matching a filter in a single call, rewriting business data across a collection at scale.
mongodb.export high conf mediumOBO
Saves query or aggregation results as a JSON file on the MCP host, a channel for exfiltrating collection data.
mongodb.atlas-streams-teardown high conf mediumOBO
Deletes an Atlas Stream Processing workspace, processor, or connection, tearing down live data pipelines.
All other tools (16)
mongodb.aggregate medium conf mediumaudit
Runs an arbitrary aggregation pipeline over a collection, capable of reading and transforming sensitive data at scale.
mongodb.atlas-create-cluster medium conf mediumaudit
Provisions a dedicated M10-M80 Atlas cluster with autoscaling enabled, incurring ongoing compute and storage costs.
mongodb.atlas-create-free-cluster low conf mediumallow
Creates a free-tier Atlas cluster for development, adding a new deployment to the project.
mongodb.atlas-create-project low conf mediumallow
Creates a new Atlas project, a container that scopes clusters, users, and access rules.
mongodb.atlas-list-db-users low conf mediumallow
Enumerates all Atlas database users, exposing the roster of principals with credentialed access to the cluster.
mongodb.atlas-local-delete-deployment medium conf mediumaudit
Deletes a local Atlas deployment, discarding its data and configuration.
mongodb.atlas-pause-resume-cluster medium conf mediumaudit
Pauses or resumes a dedicated Atlas cluster, making it unavailable for connections or restoring service.
mongodb.atlas-upgrade-cluster medium conf mediumaudit
Upgrades an Atlas cluster tier (Free to Flex, Flex to M10, and similar), changing capacity and billing.
mongodb.create-collection low conf mediumallow
Creates a new empty collection in a database, establishing a new store for documents.
mongodb.create-index medium conf mediumaudit
Builds an index on a collection, altering query performance and supporting vector-search workloads.
mongodb.drop-index medium conf mediumaudit
Drops an index from a collection, degrading query performance until the index is rebuilt.
mongodb.find medium conf mediumaudit
Runs an arbitrary query against a collection, returning matching documents that may include personal or sensitive data.
mongodb.insert-many medium conf mediumaudit
Adds documents to a collection in bulk, optionally generating vector embeddings from the supplied text.
mongodb.mongodb-logs medium conf mediumaudit
Returns recent mongod server log events, which can surface query contents, connection details, and operational internals.
mongodb.rename-collection medium conf mediumaudit
Renames a collection, which can silently break application code and queries that reference the old name.
mongodb.update-one medium conf mediumaudit
Modifies a single document in a collection, changing stored business or customer data.