MCP compliance catalog

Every MCP tool in the SCOPE compliance index, grouped by server — risk posture, regulatory exposure, and the tools that warrant tighter governance.
80MCP servers
1695tools
Reset 80 of 80 servers
Intuit QuickBooks
51 tools · footprint 188
15 critical 10 high 17 med 9 low COSOGLBA+3 more
PayPal
33 tools · footprint 86
6 critical 7 high 9 med 11 low COSOGLBA+3 more
Stripe
26 tools · footprint 77
3 critical 7 high 10 med 6 low COSOPCI+2 more
PostHog
36 tools · footprint 69
6 high 22 med 8 low
Supabase
32 tools · footprint 69
4 critical 4 high 8 med 16 low COSOSOX
Salesforce
32 tools · footprint 60
4 critical 2 high 9 med 17 low COSOSOX
Close
64 tools · footprint 59
5 high 22 med 37 low COSOSOX
Cloudflare
26 tools · footprint 58
3 critical 4 high 6 med 13 low
Webflow
23 tools · footprint 57
2 critical 5 high 10 med 6 low
PagerDuty
64 tools · footprint 55
5 high 16 med 43 low
Box
37 tools · footprint 50
10 high 14 med 13 low COSOHIPAA+1 more
Gusto
36 tools · footprint 48
12 high 11 med 13 low COSOGLBA+1 more
ActiveCampaign
58 tools · footprint 47
4 high 15 med 39 low COSOSOX
Sanity
36 tools · footprint 47
1 critical 5 high 12 med 18 low
Amplitude
43 tools · footprint 44
6 high 16 med 21 low
Sentry
25 tools · footprint 43
3 high 14 med 8 low
‹ PrevPage 1 of 5Next ›
Supabase
4 critical 4 high 8 med 16 low · 32 tools · 8 SoD-flagged
regimes APPICCPACOSOGDPRISO_27001LGPDNIST_CSFPIPEDAPIPLPOPIASOC2SOXUK_GDPR

Tools needing tighter control (8 of 32)

supabase.apply_migration critical conf highhuman approval
Applies a DDL migration to the live database; can alter or drop schema with no review gate.
supabase.execute_sql critical conf highhuman approval
Runs arbitrary SQL with project privileges; full read/write access to all tables including PII.
supabase.deploy_edge_function critical conf highhuman approval
Deploys server-side function code to production; arbitrary code execution path with database access.
supabase.merge_branch critical conf highhuman approval
Promotes branch migrations and edge functions into production.
supabase.pause_project high conf highhuman approval
Pauses a project; takes the database offline and breaks any apps depending on it.
supabase.delete_branch high conf highhuman approval
Deletes a branch and its data; irreversible.
supabase.reset_branch high conf highhuman approval
Resets branch migration state; destroys any uncommitted schema work.
supabase.update_storage_config high conf highhuman approval
Modifies storage limits and policies; can broaden public access to user-uploaded content.
All other tools (24)
supabase.confirm_cost medium conf mediumaudit
Acknowledges projected cost; precondition for paid resource creation.
supabase.create_branch medium conf highaudit
Creates an isolated database branch (paid feature); incurs cost.
supabase.create_project medium conf highaudit
Provisions a new Postgres project; incurs cost and expands the org's footprint.
supabase.generate_typescript_types low conf highallow
Generates TypeScript types from the database schema.
supabase.get_advisors low conf highallow
Reads security and performance advisor findings for the project.
supabase.get_cost low conf highallow
Returns the cost estimate for a planned action.
supabase.get_edge_function medium conf highaudit
Returns the source of an edge function; may expose business logic and embedded secrets.
supabase.get_logs medium conf highaudit
Returns service logs; may contain user identifiers, IPs, and request payloads.
supabase.get_organization low conf highallow
Returns details of a single organization including plan.
supabase.get_project low conf highallow
Returns details of a single project.
supabase.get_project_url low conf highallow
Returns the project API URL.
supabase.get_publishable_keys medium conf mediumaudit
Returns the project's anon/publishable keys; intended for client use but still credentials.
supabase.get_storage_config low conf highallow
Reads storage configuration including limits.
supabase.list_branches low conf highallow
Lists project branches.
supabase.list_edge_functions low conf highallow
Lists deployed edge functions for the project.
supabase.list_extensions low conf highallow
Lists installed Postgres extensions.
supabase.list_migrations low conf highallow
Lists database migrations applied to the project.
supabase.list_organizations low conf highallow
Lists organizations the user belongs to.
supabase.list_projects low conf highallow
Lists projects in the connected organization.
supabase.list_storage_buckets low conf highallow
Lists storage buckets.
supabase.list_tables low conf highallow
Enumerates database tables; schema-level read.
supabase.rebase_branch medium conf highaudit
Rebases a branch onto production; can introduce migration conflicts.
supabase.restore_project medium conf highaudit
Restores a paused project back to active; resumes billing.
supabase.search_docs low conf highallow
Searches Supabase documentation.