MCP compliance catalog

Every MCP tool in the SCOPE compliance index, grouped by server — risk posture, regulatory exposure, and the tools that warrant tighter governance.
80MCP servers
1695tools
Reset 80 of 80 servers
Intuit QuickBooks
51 tools · footprint 188
15 critical 10 high 17 med 9 low COSOGLBA+3 more
PayPal
33 tools · footprint 86
6 critical 7 high 9 med 11 low COSOGLBA+3 more
Stripe
26 tools · footprint 77
3 critical 7 high 10 med 6 low COSOPCI+2 more
PostHog
36 tools · footprint 69
6 high 22 med 8 low
Supabase
32 tools · footprint 69
4 critical 4 high 8 med 16 low COSOSOX
Salesforce
32 tools · footprint 60
4 critical 2 high 9 med 17 low COSOSOX
Close
64 tools · footprint 59
5 high 22 med 37 low COSOSOX
Cloudflare
26 tools · footprint 58
3 critical 4 high 6 med 13 low
Webflow
23 tools · footprint 57
2 critical 5 high 10 med 6 low
PagerDuty
64 tools · footprint 55
5 high 16 med 43 low
Box
37 tools · footprint 50
10 high 14 med 13 low COSOHIPAA+1 more
Gusto
36 tools · footprint 48
12 high 11 med 13 low COSOGLBA+1 more
ActiveCampaign
58 tools · footprint 47
4 high 15 med 39 low COSOSOX
Sanity
36 tools · footprint 47
1 critical 5 high 12 med 18 low
Amplitude
43 tools · footprint 44
6 high 16 med 21 low
Sentry
25 tools · footprint 43
3 high 14 med 8 low
‹ PrevPage 1 of 5Next ›
PagerDutyDocs ↗
5 high 16 med 43 low · 64 tools · 6 SoD-flagged
regimes APPICCPAGDPRISO_27001LGPDNIST_CSFPIPEDAPIPLPOPIASOC2UK_GDPR

Tools needing tighter control (7 of 64)

pagerduty.manage_incidents high conf highhuman approval
Bulk-acknowledges, resolves, or reassigns incidents; can suppress alerts during a real outage.
pagerduty.update_schedule high conf highhuman approval
Changes who is on call and when; misconfiguration delays response to outages.
pagerduty.update_event_orchestration_router high conf highhuman approval
Replaces routing rules that decide which alerts page which services; misroute can swallow outages.
pagerduty.create_status_page_post high conf highOBO
Publishes a customer-facing incident notice; reputational and reg-disclosure implications if inaccurate.
pagerduty.delete_team high conf highhuman approval
Deletes a team; ownership of services and schedules must be reassigned.
pagerduty.create_schedule_override medium conf highhuman approval
Temporarily reassigns on-call coverage; immediate effect on paging.
pagerduty.add_team_member medium conf highhuman approval
Adds a user to a team; expands their access to that team's services and rotations.
All other tools (57)
pagerduty.add_note_to_incident low conf highallow
Appends a note to an incident's timeline.
pagerduty.add_responders medium conf highaudit
Pages additional responders into an incident.
pagerduty.append_event_orchestration_router_rule medium conf highaudit
Adds a routing rule to the router; affects which incidents are paged.
pagerduty.create_alert_grouping_setting medium conf highaudit
Creates an alert-grouping configuration that affects how raw alerts are deduplicated into incidents.
pagerduty.create_incident medium conf highaudit
Pages on-call responders; mistaken creation wakes engineers.
pagerduty.create_schedule medium conf highaudit
Defines a new on-call rotation.
pagerduty.create_service medium conf highaudit
Creates a service definition that downstream alerts route into.
pagerduty.create_status_page_post_update medium conf highaudit
Appends an update to an existing customer-facing status post.
pagerduty.create_team medium conf highaudit
Creates a team that owns services and schedules.
pagerduty.delete_alert_grouping_setting medium conf highaudit
Removes an alert-grouping setting; can change incident behavior immediately.
pagerduty.get_alert_from_incident low conf highallow
Returns one alert tied to an incident.
pagerduty.get_alert_grouping_setting low conf highallow
Returns one alert-grouping setting.
pagerduty.get_change_event low conf highallow
Returns one change event.
pagerduty.get_escalation_policy low conf highallow
Returns one escalation policy.
pagerduty.get_event_orchestration low conf highallow
Returns an orchestration definition.
pagerduty.get_event_orchestration_global low conf highallow
Returns the global event orchestration.
pagerduty.get_event_orchestration_router low conf highallow
Returns the router orchestration definition.
pagerduty.get_event_orchestration_service low conf highallow
Returns the service-specific orchestration definition.
pagerduty.get_incident low conf highallow
Returns details for a single incident.
pagerduty.get_incident_workflow low conf highallow
Returns one incident workflow definition.
pagerduty.get_log_entry low conf highallow
Returns one incident log entry.
pagerduty.get_outlier_incident low conf highallow
Returns analytics on whether an incident is an outlier vs. baseline.
pagerduty.get_past_incidents low conf highallow
Returns historical incidents similar to the current one.
pagerduty.get_related_incidents low conf highallow
Returns incidents related to a given one.
pagerduty.get_schedule low conf highallow
Returns a schedule definition.
pagerduty.get_service low conf highallow
Returns details for one service.
pagerduty.get_status_page_post low conf highallow
Returns one status page post.
pagerduty.get_team low conf highallow
Returns one team.
pagerduty.get_user_data low conf highallow
Returns one user's profile.
pagerduty.list_alert_grouping_settings low conf highallow
Lists alert-grouping settings.
pagerduty.list_alerts_from_incident low conf highallow
Lists alerts associated with an incident.
pagerduty.list_change_events low conf highallow
Lists tracked change events from CI/CD or deploys.
pagerduty.list_escalation_policies low conf highallow
Lists escalation policies.
pagerduty.list_event_orchestrations low conf highallow
Lists event orchestration rule sets.
pagerduty.list_incident_change_events low conf highallow
Lists change events correlated with an incident.
pagerduty.list_incident_notes low conf highallow
Lists notes on an incident.
pagerduty.list_incident_workflows low conf highallow
Lists incident workflows.
pagerduty.list_incidents low conf highallow
Lists incidents matching filters.
pagerduty.list_log_entries low conf highallow
Reads PagerDuty's incident log entries (audit trail of incident lifecycle events).
pagerduty.list_oncalls low conf highallow
Returns who is currently on call.
pagerduty.list_schedule_users low conf highallow
Lists users on a schedule.
pagerduty.list_schedules low conf highallow
Lists on-call schedules.
pagerduty.list_service_change_events low conf highallow
Lists change events tied to a service.
pagerduty.list_services low conf highallow
Lists services in the account.
pagerduty.list_status_page_impacts low conf highallow
Lists impact levels available on the status page.
pagerduty.list_status_page_post_updates low conf highallow
Lists updates on a status post.
pagerduty.list_status_page_severities low conf highallow
Lists severity levels available on the status page.
pagerduty.list_status_page_statuses low conf highallow
Lists statuses available on the status page.
pagerduty.list_status_pages low conf highallow
Lists configured status pages.
pagerduty.list_team_members low conf highallow
Lists members of a team.
pagerduty.list_teams low conf highallow
Lists teams in the account.
pagerduty.list_users low conf highallow
Lists users in the account.
pagerduty.remove_team_member medium conf highaudit
Removes a user from a team; can drop coverage if the user is on a rotation.
pagerduty.start_incident_workflow medium conf highaudit
Triggers a defined incident-response automation; downstream actions depend on the workflow.
pagerduty.update_alert_grouping_setting medium conf highaudit
Modifies an alert-grouping setting.
pagerduty.update_service medium conf highaudit
Modifies how a service routes alerts and to whom.
pagerduty.update_team medium conf highaudit
Modifies team metadata.