MCP compliance catalog

Every MCP tool in the SCOPE compliance index, grouped by server — risk posture, regulatory exposure, and the tools that warrant tighter governance.
387MCP servers
5470tools
Reset 387 of 387 servers
Intuit QuickBooks
51 tools · footprint 188
15 critical 10 high 17 med 9 low COSOGLBA+3 more
Zoho Books
25 tools · footprint 96
3 critical 14 high 7 med 1 low COSOPCI+1 more
PayPal
33 tools · footprint 86
6 critical 7 high 9 med 11 low COSOGLBA+3 more
Workable
25 tools · footprint 81
13 high 12 med COSOSOX
Vercel
25 tools · footprint 78
6 critical 4 high 7 med 8 low COSOPCI+1 more
Stripe
26 tools · footprint 77
3 critical 7 high 10 med 6 low COSOPCI+2 more
Qonto
25 tools · footprint 76
15 high 9 med 1 low COSOGLBA+3 more
Zoho Books
25 tools · footprint 73
3 critical 11 high 11 med COSOPCI+1 more
Xero
25 tools · footprint 72
3 critical 8 high 14 med COSOSOX
Port
25 tools · footprint 69
2 critical 11 high 8 med 4 low COSOSOX
PostHog
36 tools · footprint 69
6 high 22 med 8 low
Supabase
32 tools · footprint 69
4 critical 4 high 8 med 16 low COSOSOX
Datadog
25 tools · footprint 68
1 critical 12 high 11 med 1 low
Zoho CRM
25 tools · footprint 68
2 critical 10 high 12 med 1 low COSOSOX
Zoom
25 tools · footprint 68
11 high 14 med HIPAA
PostHog
25 tools · footprint 66
3 critical 12 high 10 med
‹ PrevPage 1 of 25Next ›
Turkish AirlinesDocs ↗
3 high 6 med 14 low · 23 tools · 0 SoD-flagged
regimes APPICCPAGDPRISO_27001LGPDPCIPIPEDAPIPLPOPIASOC2UK_GDPR

Tools needing tighter control (3 of 23)

turkish-airlines.create_business_upgrade_payment_link high conf highOBO redact
Commits a passenger to a specific priced upgrade option and hands back a live checkout URL, so a wrong option or passenger count turns into a real card or miles charge at completion.
turkish-airlines.pnr_finder high conf highOBO
Fires a booking-reference recovery message to the contact on file, an account-recovery primitive that can be abused to confirm a passenger's travel or spam their registered phone and email.
turkish-airlines.manage_booking_link high conf highOBO
Confirms that a PNR and surname pair is valid and issues an authenticated deeplink into the cancel, refund, rebook and check-in flows for that reservation.
All other tools (20)
turkish-airlines.add_message_to_baggage_case medium conf highaudit
Writes a statement into an official lost or damaged baggage claim under the customer's name, becoming part of the record the airline adjudicates the claim on.
turkish-airlines.check_stopover_eligibility medium conf mediumaudit
Validates a PNR and surname pair to test stopover entitlement, confirming that a named passenger holds a specific itinerary.
turkish-airlines.check_stopover_routes low conf highallow
Reads programme eligibility rules for up to ten routes; no reservation or passenger identity is involved.
turkish-airlines.find_flight_price_calendar low conf highallow
Reads a date-by-date fare calendar for flexible travellers; pricing data only, with no booking side effects.
turkish-airlines.flight-status low conf highallow
Reads publicly published operational status for one flight number; no reservation or passenger data is touched.
turkish-airlines.flight-status-by-route low conf highallow
Lists operational status for scheduled flights on a route; read-only public schedule data with no customer records involved.
turkish-airlines.generate_baggage_issue_link low conf highallow
Produces a localized URL to the baggage claim form; no passenger data is submitted or read by the call itself.
turkish-airlines.generate_holidays_search_link low conf highallow
Assembles a pre-filled shopping URL including traveller counts and children's ages; the data is supplied in the request, not retrieved from the airline.
turkish-airlines.get_airline_promotions low conf highallow
Reads published promotional offers for a market; marketing content with no data-protection exposure.
turkish-airlines.get_baggage_case_details medium conf mediumaudit
Surfaces the contents and status of a customer's lost-baggage claim, which typically carries their name, contact email and itinerary.
turkish-airlines.get_booking_baggage_allowance low conf highallow
Reads baggage entitlements for a ticketed passenger; limited data, but the lookup is keyed to a real reservation and confirms it exists.
turkish-airlines.get_booking_details medium conf highaudit
Returns passenger names, itinerary and ticket numbers for a single reservation, putting traveller identity and movement data in the agent's context.
turkish-airlines.get_business_upgrade_offers medium conf highaudit
Exposes per-passenger upgrade pricing and payment options tied to a named reservation, revealing who is travelling on the PNR and what they can be charged.
turkish-airlines.get_city_guide low conf highallow
Fetches editorial destination content; no airline or customer records are accessed.
turkish-airlines.get_contact_info low conf highallow
Looks up published corporate contact details; the only personal input is an optional country inferred from the caller's location.
turkish-airlines.get_feedback_status medium conf mediumaudit
Reveals the handling status of a named customer's complaint or application to anyone holding the reference number alone.
turkish-airlines.search_flights low conf highallow
Returns bookable itineraries and fares for a route and date; nothing is held or charged, but the results drive downstream purchase decisions.
turkish-airlines.search_hotel_packages low conf highallow
Returns a curated package catalog with prices and booking links; commercial content only, no customer record is read.
turkish-airlines.search_inbound_flights low conf highallow
Continues a flight search session to price the return leg; read-only fare shopping tied to a transient search id.
turkish-airlines.search_thy_faq low conf highallow
Retrieves official policy text so answers come from published rules rather than model memory; reduces the risk of misstating fare or baggage policy.