MCP compliance catalog

Every MCP tool in the SCOPE compliance index, grouped by server — risk posture, regulatory exposure, and the tools that warrant tighter governance.
80MCP servers
1695tools
Reset 80 of 80 servers
Intuit QuickBooks
51 tools · footprint 188
15 critical 10 high 17 med 9 low COSOGLBA+3 more
PayPal
33 tools · footprint 86
6 critical 7 high 9 med 11 low COSOGLBA+3 more
Stripe
26 tools · footprint 77
3 critical 7 high 10 med 6 low COSOPCI+2 more
PostHog
36 tools · footprint 69
6 high 22 med 8 low
Supabase
32 tools · footprint 69
4 critical 4 high 8 med 16 low COSOSOX
Salesforce
32 tools · footprint 60
4 critical 2 high 9 med 17 low COSOSOX
Close
64 tools · footprint 59
5 high 22 med 37 low COSOSOX
Cloudflare
26 tools · footprint 58
3 critical 4 high 6 med 13 low
Webflow
23 tools · footprint 57
2 critical 5 high 10 med 6 low
PagerDuty
64 tools · footprint 55
5 high 16 med 43 low
Box
37 tools · footprint 50
10 high 14 med 13 low COSOHIPAA+1 more
Gusto
36 tools · footprint 48
12 high 11 med 13 low COSOGLBA+1 more
ActiveCampaign
58 tools · footprint 47
4 high 15 med 39 low COSOSOX
Sanity
36 tools · footprint 47
1 critical 5 high 12 med 18 low
Amplitude
43 tools · footprint 44
6 high 16 med 21 low
Sentry
25 tools · footprint 43
3 high 14 med 8 low
‹ PrevPage 1 of 5Next ›
Sanity
1 critical 5 high 12 med 18 low · 36 tools · 6 SoD-flagged
regimes ISO_27001NIST_CSFSOC2

Tools needing tighter control (6 of 36)

sanity.deploy_schema critical conf highhuman approval
Deploys a new schema to the workspace; can break every consumer of the content API.
sanity.publish_documents high conf highhuman approval
Pushes content live to the public dataset; bypasses staged review.
sanity.unpublish_documents high conf highhuman approval
Pulls live documents from the public dataset; can break consuming sites.
sanity.version_unpublish_document high conf highhuman approval
Unpublishes a versioned document from the live dataset.
sanity.add_cors_origin high conf highhuman approval
Allows a new origin to call the content API; unauthorized origins can read drafts.
sanity.update_dataset high conf highhuman approval
Modifies dataset visibility/access settings; can expose or hide content broadly.
All other tools (30)
sanity.create_dataset medium conf highaudit
Creates a new dataset; affects content visibility and billing.
sanity.create_documents_from_json medium conf highaudit
Creates structured content documents from JSON; can publish unverified content.
sanity.create_documents_from_markdown medium conf highaudit
Creates content documents from Markdown input.
sanity.create_project medium conf highaudit
Provisions a new Sanity project; may incur billing and create a new content surface.
sanity.create_release medium conf highaudit
Creates a content release bundle for coordinated publishing.
sanity.create_version medium conf highaudit
Creates a new release version of a document.
sanity.discard_drafts medium conf highaudit
Permanently removes draft documents.
sanity.generate_image low conf highallow
Generates an AI image asset for use in content.
sanity.get_document low conf highallow
Reads a single document's contents.
sanity.get_project_studios low conf highallow
Lists studio deployments associated with a project.
sanity.get_sanity_rules low conf highallow
Returns details of a Sanity assistant rule.
sanity.get_schema low conf highallow
Returns the document schema for a workspace.
sanity.list_datasets low conf highallow
Lists datasets within a project.
sanity.list_embeddings_indices low conf highallow
Lists semantic-search indices.
sanity.list_organizations low conf highallow
Lists Sanity organizations the caller belongs to.
sanity.list_projects low conf highallow
Returns the project directory.
sanity.list_releases low conf highallow
Lists planned and published content releases.
sanity.list_sanity_rules low conf highallow
Lists configured Sanity assistant rules.
sanity.list_workspace_schemas low conf highallow
Lists workspace schemas available to the caller.
sanity.migration_guide low conf highallow
Returns Sanity migration guidance docs.
sanity.patch_document_from_json medium conf highaudit
Patches an existing document with new field values.
sanity.patch_document_from_markdown medium conf highaudit
Patches a document using Markdown content.
sanity.query_documents medium conf highaudit
Runs GROQ queries that may return arbitrary content fields including drafts.
sanity.read_docs low conf highallow
Reads a Sanity documentation page.
sanity.search_docs low conf highallow
Searches Sanity public documentation.
sanity.semantic_search low conf highallow
Runs semantic search over content embeddings.
sanity.transform_image low conf highallow
Applies transformations to an existing image asset.
sanity.version_discard medium conf highaudit
Discards an in-progress version; loses unpublished work.
sanity.version_replace_document medium conf highaudit
Replaces a versioned document's contents wholesale.
sanity.whoami low conf highallow
Returns the authenticated principal's identity.