MCP compliance catalog

Every MCP tool in the SCOPE compliance index, grouped by server — risk posture, regulatory exposure, and the tools that warrant tighter governance.
387MCP servers
5470tools
Reset 387 of 387 servers
Intuit QuickBooks
51 tools · footprint 188
15 critical 10 high 17 med 9 low COSOGLBA+3 more
Zoho Books
25 tools · footprint 96
3 critical 14 high 7 med 1 low COSOPCI+1 more
PayPal
33 tools · footprint 86
6 critical 7 high 9 med 11 low COSOGLBA+3 more
Workable
25 tools · footprint 81
13 high 12 med COSOSOX
Vercel
25 tools · footprint 78
6 critical 4 high 7 med 8 low COSOPCI+1 more
Stripe
26 tools · footprint 77
3 critical 7 high 10 med 6 low COSOPCI+2 more
Qonto
25 tools · footprint 76
15 high 9 med 1 low COSOGLBA+3 more
Zoho Books
25 tools · footprint 73
3 critical 11 high 11 med COSOPCI+1 more
Xero
25 tools · footprint 72
3 critical 8 high 14 med COSOSOX
Port
25 tools · footprint 69
2 critical 11 high 8 med 4 low COSOSOX
PostHog
36 tools · footprint 69
6 high 22 med 8 low
Supabase
32 tools · footprint 69
4 critical 4 high 8 med 16 low COSOSOX
Datadog
25 tools · footprint 68
1 critical 12 high 11 med 1 low
Zoho CRM
25 tools · footprint 68
2 critical 10 high 12 med 1 low COSOSOX
Zoom
25 tools · footprint 68
11 high 14 med HIPAA
PostHog
25 tools · footprint 66
3 critical 12 high 10 med
‹ PrevPage 1 of 25Next ›
Microsoft OutlookDocs ↗
5 high 9 med 7 low · 21 tools · 0 SoD-flagged
regimes APPICCPAGDPRISO_27001LGPDPIPEDAPIPLPOPIASOC2UK_GDPR

Tools needing tighter control (5 of 21)

outlook.mcp_MailTools_graph_mail_sendMail high conf mediumOBO
Sends mail as the signed-in user to arbitrary recipients, allowing mailbox content to leave the organization and the account owner to be impersonated.
outlook.mcp_MailTools_graph_mail_reply high conf mediumOBO
Replies to an existing thread as the user, carrying the quoted original correspondence out to whoever is on the message.
outlook.mcp_MailTools_graph_mail_replyAll high conf mediumOBO
Replies to every participant on a thread, widening the audience for the quoted correspondence to all original recipients including external parties.
outlook.mcp_MailTools_graph_mail_searchMessages high conf mediumOBO
Runs KQL queries across the mailbox through the Graph Search API, surfacing contracts, credentials, and personal data buried anywhere in mail history.
outlook.mcp_MailTools_graph_mail_listSent high conf mediumOBO
Enumerates the Sent Items folder, exposing who the user has corresponded with and what was sent out over time.
All other tools (16)
outlook.mcp_CalendarTools_graph_acceptEvent low conf mediumallow
Accepts a meeting invitation for the user and notifies the organizer that they will attend.
outlook.mcp_CalendarTools_graph_cancelEvent medium conf mediumaudit
Cancels a meeting and pushes cancellation notices to every attendee, clearing it from all participants' calendars.
outlook.mcp_CalendarTools_graph_createEvent low conf mediumallow
Books a new event on a user's calendar, optionally recurring, that can invite attendees and provision an online meeting.
outlook.mcp_CalendarTools_graph_declineEvent low conf mediumallow
Declines a meeting invitation for the user and notifies the organizer that they will not attend.
outlook.mcp_CalendarTools_graph_deleteEvent medium conf mediumaudit
Removes an event from a user's calendar with no built-in undo, erasing the booking and its record for the owner.
outlook.mcp_CalendarTools_graph_findMeetingTimes low conf mediumallow
Proposes meeting slots and locations by reading organizer and attendee availability across their calendars.
outlook.mcp_CalendarTools_graph_getEvent low conf mediumallow
Reads one calendar event with its subject, body, and attendee list from a specified user's calendar.
outlook.mcp_CalendarTools_graph_getSchedule low conf mediumallow
Reads free/busy availability for a user, distribution list, or room resource, revealing when people and spaces are booked.
outlook.mcp_CalendarTools_graph_listCalendarView medium conf mediumaudit
Retrieves every calendar occurrence over a date range for a user, exposing meeting subjects, locations, and participants across the window.
outlook.mcp_CalendarTools_graph_listEvents medium conf mediumaudit
Lists a user's calendar events in bulk; subjects, bodies, and attendee lists can reveal confidential meetings and personal data at scale.
outlook.mcp_CalendarTools_graph_updateEvent low conf mediumallow
Changes an existing event's time, attendees, or content, which reschedules the meeting for everyone invited.
outlook.mcp_MailTools_graph_mail_createMessage medium conf mediumaudit
Composes a draft email with HTML body support in the user's mailbox, staging outgoing correspondence attributed to the account owner.
outlook.mcp_MailTools_graph_mail_deleteMessage medium conf mediumaudit
Removes a message from the signed-in user's mailbox, taking correspondence out of the active folder set and any workflow that depended on it.
outlook.mcp_MailTools_graph_mail_getMessage medium conf mediumaudit
Pulls a single message's full body and headers into agent context, including any personal or confidential content it carries.
outlook.mcp_MailTools_graph_mail_sendDraft medium conf mediumaudit
Transmits an already-composed draft from the mailbox; once sent the message cannot be recalled.
outlook.mcp_MailTools_graph_mail_updateMessage medium conf mediumaudit
Rewrites the subject, body, or categories of a stored message, altering the record of correspondence held in the mailbox.