MCP compliance catalog

Every MCP tool in the SCOPE compliance index, grouped by server — risk posture, regulatory exposure, and the tools that warrant tighter governance.
80MCP servers
1695tools
Reset 80 of 80 servers
Intuit QuickBooks
51 tools · footprint 188
15 critical 10 high 17 med 9 low COSOGLBA+3 more
PayPal
33 tools · footprint 86
6 critical 7 high 9 med 11 low COSOGLBA+3 more
Stripe
26 tools · footprint 77
3 critical 7 high 10 med 6 low COSOPCI+2 more
PostHog
36 tools · footprint 69
6 high 22 med 8 low
Supabase
32 tools · footprint 69
4 critical 4 high 8 med 16 low COSOSOX
Salesforce
32 tools · footprint 60
4 critical 2 high 9 med 17 low COSOSOX
Close
64 tools · footprint 59
5 high 22 med 37 low COSOSOX
Cloudflare
26 tools · footprint 58
3 critical 4 high 6 med 13 low
Webflow
23 tools · footprint 57
2 critical 5 high 10 med 6 low
PagerDuty
64 tools · footprint 55
5 high 16 med 43 low
Box
37 tools · footprint 50
10 high 14 med 13 low COSOHIPAA+1 more
Gusto
36 tools · footprint 48
12 high 11 med 13 low COSOGLBA+1 more
ActiveCampaign
58 tools · footprint 47
4 high 15 med 39 low COSOSOX
Sanity
36 tools · footprint 47
1 critical 5 high 12 med 18 low
Amplitude
43 tools · footprint 44
6 high 16 med 21 low
Sentry
25 tools · footprint 43
3 high 14 med 8 low
‹ PrevPage 1 of 5Next ›
PostHogDocs ↗
6 high 22 med 8 low · 36 tools · 8 SoD-flagged
regimes APPICCPAGDPRISO_27001LGPDNIST_CSFPIPEDAPIPLPOPIASOC2UK_GDPR

Tools needing tighter control (10 of 36)

posthog.update-feature-flag high conf highhuman approval
Changes who sees a feature in production; can ship or break experiences without code review.
posthog.delete-feature-flag high conf highhuman approval
Removes a flag; dependent code may fail open or closed unexpectedly.
posthog.experiment-launch high conf highhuman approval
Activates an experiment in production; immediately affects user experience.
posthog.experiment-ship-variant high conf highhuman approval
Promotes a variant to all traffic without further review.
posthog.execute-sql high conf highOBO
Runs arbitrary HogQL/SQL across event and person data; can return PII at scale.
posthog.query-run high conf highOBO
Executes saved or ad-hoc queries that may return identified user data.
posthog.scheduled-changes-create medium conf highhuman approval
Schedules a future flag change without re-review at execution time.
posthog.experiment-delete medium conf highhuman approval
Removes experiment configuration and historical results from the UI.
posthog.alert-delete medium conf highhuman approval
Removes a monitoring alert; can blind operators to incidents.
posthog.survey-delete medium conf highhuman approval
Deletes a survey and its responses; may destroy collected feedback.
All other tools (26)
posthog.action-create low conf highallow
Defines a new tracked action for analytics; no production user impact.
posthog.action-delete medium conf highaudit
Removes a tracked action; downstream insights and dashboards may break silently.
posthog.action-update low conf highallow
Updates the definition of an existing tracked action.
posthog.alert-create low conf highallow
Adds a metric alert; no immediate user impact.
posthog.alert-update medium conf highaudit
Modifies thresholds or recipients on a monitoring alert.
posthog.annotation-create low conf highallow
Adds an annotation to time-series charts.
posthog.annotation-delete low conf highallow
Removes a chart annotation.
posthog.cohorts-add-persons-to-static-cohort-partial-update medium conf highaudit
Adds identified persons to a static cohort used for targeting and analysis.
posthog.cohorts-create medium conf highaudit
Defines a user cohort that may target campaigns or feature rollouts.
posthog.cohorts-rm-person-from-static-cohort-partial-update low conf highallow
Removes a person from a static cohort definition.
posthog.create-feature-flag medium conf highaudit
Creates a new feature flag that can gate production behavior on rollout.
posthog.dashboard-create low conf highallow
Creates a new analytics dashboard.
posthog.dashboard-delete medium conf highaudit
Removes a shared dashboard; may disrupt downstream reporting.
posthog.dashboard-update low conf highallow
Modifies dashboard layout or filters.
posthog.experiment-create medium conf highaudit
Starts a new A/B experiment that splits production traffic.
posthog.experiment-end medium conf highaudit
Concludes an experiment and locks the result of record.
posthog.experiment-pause medium conf highaudit
Halts an active experiment mid-run; can invalidate ongoing measurement.
posthog.experiment-resume medium conf highaudit
Restarts a paused experiment, reapplying traffic split.
posthog.experiment-update medium conf highaudit
Modifies an experiment's targeting or variants while running.
posthog.feature-flags-copy-flags-create medium conf highaudit
Copies flags between projects/environments; can replicate untested rollout state.
posthog.query-llm-trace medium conf mediumaudit
Returns LLM trace details including prompts that may contain customer or PII content.
posthog.query-llm-traces-list medium conf mediumaudit
Bulk-lists LLM traces; potential PII exposure depending on prompt content.
posthog.query-logs medium conf highaudit
Searches application logs that can include user identifiers and request payloads.
posthog.scheduled-changes-delete medium conf highaudit
Cancels a scheduled flag change; can leave intended rollout undone.
posthog.survey-create medium conf highaudit
Publishes a survey targeted to identified users; collects new PII responses.
posthog.survey-update medium conf highaudit
Edits a live survey; can change consent text or targeting after launch.