MCP compliance catalog

Every MCP tool in the SCOPE compliance index, grouped by server — risk posture, regulatory exposure, and the tools that warrant tighter governance.
387MCP servers
5470tools
Reset 387 of 387 servers
Intuit QuickBooks
51 tools · footprint 188
15 critical 10 high 17 med 9 low COSOGLBA+3 more
Zoho Books
25 tools · footprint 96
3 critical 14 high 7 med 1 low COSOPCI+1 more
PayPal
33 tools · footprint 86
6 critical 7 high 9 med 11 low COSOGLBA+3 more
Workable
25 tools · footprint 81
13 high 12 med COSOSOX
Vercel
25 tools · footprint 78
6 critical 4 high 7 med 8 low COSOPCI+1 more
Stripe
26 tools · footprint 77
3 critical 7 high 10 med 6 low COSOPCI+2 more
Qonto
25 tools · footprint 76
15 high 9 med 1 low COSOGLBA+3 more
Zoho Books
25 tools · footprint 73
3 critical 11 high 11 med COSOPCI+1 more
Xero
25 tools · footprint 72
3 critical 8 high 14 med COSOSOX
Port
25 tools · footprint 69
2 critical 11 high 8 med 4 low COSOSOX
PostHog
36 tools · footprint 69
6 high 22 med 8 low
Supabase
32 tools · footprint 69
4 critical 4 high 8 med 16 low COSOSOX
Datadog
25 tools · footprint 68
1 critical 12 high 11 med 1 low
Zoho CRM
25 tools · footprint 68
2 critical 10 high 12 med 1 low COSOSOX
Zoom
25 tools · footprint 68
11 high 14 med HIPAA
PostHog
25 tools · footprint 66
3 critical 12 high 10 med
‹ PrevPage 1 of 25Next ›
TropicDocs ↗
3 med 11 low · 14 tools · 0 SoD-flagged
regimes ISO_27001SOC2

Tools needing tighter control (2 of 14)

tropic.run_price_benchmark medium conf lowaudit
Executes a benchmarking job that compares the company's negotiated pricing against Tropic's market data, consuming benchmark entitlements and creating a record of internal rates.
tropic.get_supplier_intelligence low conf lowallow
Returns Tropic's profile of a single supplier — pricing patterns, negotiation history and vendor risk signals used to prepare a deal.
All other tools (12)
tropic.create_manual_benchmark_request low conf mediumallow
Files a benchmark request with Tropic that names a supplier and the pricing the team wants analyzed; reversible and reviewable before any commercial decision.
tropic.get_negotiation_playbook low conf mediumallow
Returns Tropic's recommended negotiation tactics and leverage points for a supplier; advisory content with no state change.
tropic.get_price_benchmark low conf mediumallow
Returns one benchmark with its rate ranges and comparable deals, used as an input to negotiation rather than a change to any record.
tropic.get_redundant_spend low conf mediumallow
Returns one duplicate-spend finding with its associated vendors and amounts; scope is a single record.
tropic.get_server_status low conf mediumallow
Reports whether the Tropic MCP server is reachable and healthy; diagnostic output only, no business data returned.
tropic.list_contracts low conf mediumallow
Returns the supplier contract portfolio with counterparties, terms and renewal dates — a read-only view of vendor commitments.
tropic.list_expert_insights low conf mediumallow
Returns Tropic's analyst commentary on suppliers and categories; editorial reference material with no customer data involved.
tropic.list_market_insights low conf mediumallow
Returns aggregate market pricing trends for software categories; benchmark context that does not touch the customer's own records.
tropic.list_price_benchmarks low conf mediumallow
Returns the set of completed price benchmarks so the agent can compare supplier rates; read-only reference data.
tropic.list_redundant_spend medium conf mediumaudit
Exposes organization-wide spend analysis identifying duplicate vendor purchases, aggregating confidential budget and contract-value data in a single response.
tropic.list_supplier_products low conf mediumallow
Returns a supplier's product catalog and SKUs so purchases can be matched to the right line items; read-only catalog data.
tropic.query_contract_documents medium conf mediumaudit
Surfaces the text of executed supplier agreements, exposing negotiated rates, termination terms and confidentiality clauses to whoever drives the agent.