MCP compliance catalog

Every MCP tool in the SCOPE compliance index, grouped by server — risk posture, regulatory exposure, and the tools that warrant tighter governance.
387MCP servers
5470tools
Reset 387 of 387 servers
Intuit QuickBooks
51 tools · footprint 188
15 critical 10 high 17 med 9 low COSOGLBA+3 more
Zoho Books
25 tools · footprint 96
3 critical 14 high 7 med 1 low COSOPCI+1 more
PayPal
33 tools · footprint 86
6 critical 7 high 9 med 11 low COSOGLBA+3 more
Workable
25 tools · footprint 81
13 high 12 med COSOSOX
Vercel
25 tools · footprint 78
6 critical 4 high 7 med 8 low COSOPCI+1 more
Stripe
26 tools · footprint 77
3 critical 7 high 10 med 6 low COSOPCI+2 more
Qonto
25 tools · footprint 76
15 high 9 med 1 low COSOGLBA+3 more
Zoho Books
25 tools · footprint 73
3 critical 11 high 11 med COSOPCI+1 more
Xero
25 tools · footprint 72
3 critical 8 high 14 med COSOSOX
Port
25 tools · footprint 69
2 critical 11 high 8 med 4 low COSOSOX
PostHog
36 tools · footprint 69
6 high 22 med 8 low
Supabase
32 tools · footprint 69
4 critical 4 high 8 med 16 low COSOSOX
Datadog
25 tools · footprint 68
1 critical 12 high 11 med 1 low
Zoho CRM
25 tools · footprint 68
2 critical 10 high 12 med 1 low COSOSOX
Zoom
25 tools · footprint 68
11 high 14 med HIPAA
PostHog
25 tools · footprint 66
3 critical 12 high 10 med
‹ PrevPage 1 of 25Next ›
PigmentDocs ↗
9 high 14 med 2 low · 25 tools · 4 SoD-flagged
regimes APPICCPACOSOGDPRISO_27001LGPDPIPEDAPIPLPOPIASOC2SOXUK_GDPR

Tools needing tighter control (9 of 25)

pigment.update_metric high conf mediumhuman approval
Rewrites the formula or structure of a live planning metric, changing every downstream figure that depends on it without any review step.
pigment.set_metric_input high conf mediumOBO
Writes a value straight into a plan input cell, altering the budget and forecast figures leadership reports against.
pigment.create_metric_copy_config high conf mediumOBO
Saves a standing copy rule that overwrites one metric's values with another's, for example pushing actuals over a forecast baseline.
pigment.calendar_remove_time_dimension high conf mediumhuman approval
Removes a calendar-derived time dimension, discarding the granularity every metric and View built on it depends on.
pigment.batch_share_blocks high conf mediumOBO
Shares many metrics and blocks with a Library or another Application in a single call, widening who can read the underlying planning data.
pigment.update_view high conf mediumOBO
Flips a View's sharing status alongside its name and template, which can expose a private analysis to everyone with Application access.
pigment.create_frame high conf mediumOBO
Deploys custom JavaScript as a full-page Frame in the workspace, running unreviewed code against the planning data bound to it.
pigment.update_frame high conf mediumhuman approval
Replaces a live Frame's code, bindings, and data sources in one push, shipping a production change with no review gate.
pigment.delete_views high conf mediumhuman approval
Deletes one or more Views outright, destroying saved reporting configurations that boards and their consumers depend on.
All other tools (16)
pigment.add_list_items medium conf mediumaudit
Adds items to a dimension list, which for employee or customer dimensions means writing personal identifiers into the model.
pigment.calendar_add_time_dimension medium conf mediumaudit
Adds a calendar-derived time dimension, expanding the granularity at which metrics can be modeled and reported.
pigment.calendar_create medium conf mediumaudit
Creates the calendar an Application's periods derive from, fixing fiscal boundaries for every time-based metric built on it.
pigment.calendar_expand medium conf mediumaudit
Extends calendar coverage so metrics hold periods beyond the current range, growing model size and computation cost.
pigment.create_cycle medium conf mediumaudit
Establishes a planning cycle across a set of metrics, defining how forecast iterations get captured and compared.
pigment.create_list low conf mediumallow
Creates a new dimension list, adding a structural axis that metrics and Views can then be built on.
pigment.create_metric medium conf highaudit
Adds a new calculated metric to the planning model, introducing figures that feed boards and reported totals.
pigment.enable_application_library medium conf mediumaudit
Activates a Library inside a consuming Application, making that Library's shared blocks and their data usable there.
pigment.fetch_metric_data medium conf mediumaudit
Reads the stored values of a named metric, exposing the figures behind a budget, forecast, or actuals series.
pigment.get_list_items medium conf mediumaudit
Returns every item of a dimension list, which in workforce models is a full roster of named employees and their identifiers.
pigment.query_data medium conf highaudit
Pulls metric values across arbitrary breakdowns and filters from a plain-language prompt, which can surface compensation, headcount, and customer figures in volume.
pigment.search low conf highallow
Scans an entire Application's block metadata — names, data types, dimensions — returning model structure without the underlying values.
pigment.update_cycle medium conf mediumaudit
Adds or drops metrics from an active planning cycle, changing which figures are captured for each forecast iteration.
pigment.update_list_property medium conf mediumaudit
Changes a dimension list property such as the unique-key Employee ID, which can break identity matching everywhere the list is used.
pigment.update_view_aggregations medium conf mediumaudit
Changes what a View's totals compute, so the same underlying metric can present materially different reported numbers.
pigment.write_file medium conf mediumaudit
Authors the JavaScript a Frame will execute, staging arbitrary code for deployment into the workspace.