MCP compliance catalog

Every MCP tool in the SCOPE compliance index, grouped by server — risk posture, regulatory exposure, and the tools that warrant tighter governance.
387MCP servers
5470tools
Reset 387 of 387 servers
Intuit QuickBooks
51 tools · footprint 188
15 critical 10 high 17 med 9 low COSOGLBA+3 more
Zoho Books
25 tools · footprint 96
3 critical 14 high 7 med 1 low COSOPCI+1 more
PayPal
33 tools · footprint 86
6 critical 7 high 9 med 11 low COSOGLBA+3 more
Workable
25 tools · footprint 81
13 high 12 med COSOSOX
Vercel
25 tools · footprint 78
6 critical 4 high 7 med 8 low COSOPCI+1 more
Stripe
26 tools · footprint 77
3 critical 7 high 10 med 6 low COSOPCI+2 more
Qonto
25 tools · footprint 76
15 high 9 med 1 low COSOGLBA+3 more
Zoho Books
25 tools · footprint 73
3 critical 11 high 11 med COSOPCI+1 more
Xero
25 tools · footprint 72
3 critical 8 high 14 med COSOSOX
Port
25 tools · footprint 69
2 critical 11 high 8 med 4 low COSOSOX
PostHog
36 tools · footprint 69
6 high 22 med 8 low
Supabase
32 tools · footprint 69
4 critical 4 high 8 med 16 low COSOSOX
Datadog
25 tools · footprint 68
1 critical 12 high 11 med 1 low
Zoho CRM
25 tools · footprint 68
2 critical 10 high 12 med 1 low COSOSOX
Zoom
25 tools · footprint 68
11 high 14 med HIPAA
PostHog
25 tools · footprint 66
3 critical 12 high 10 med
‹ PrevPage 1 of 25Next ›
UpworkDocs ↗
1 critical 5 high 9 med 4 low · 19 tools · 1 SoD-flagged
regimes APPICCPACOSOCO_AI_ACTEU_AI_ACTGDPRISO_27001LGPDNIST_AI_RMFPIPEDAPIPLPOPIASOC2SOXUK_GDPR

Tools needing tighter control (6 of 19)

upwork.milestones_and_payments critical conf mediumhuman approval
Approving or rejecting a contract milestone authorizes release of escrowed funds to a freelancer, moving money and changing recognized project cost in a single step.
upwork.financials_and_time_reports high conf mediumOBO
Pulls timesheets, work-diary activity records, and transaction history across every active contract, exposing worker-monitoring data and spend history in bulk.
upwork.offers_and_contracts high conf mediumOBO
Prepares a contract offer carrying scope and rate, committing the client to spend once confirmed on upwork.com, and reads terms of every active contract.
upwork.respond_to_invitations_and_offers high conf mediumOBO
Accepts or declines direct offers and invitations, which starts or forfeits a revenue-bearing contract at the stated rate once confirmed on upwork.com.
upwork.messaging high conf mediumOBO
Reads private message threads with freelancers and applicants and sends messages under the account holder's identity, exposing and impersonating confidential correspondence.
upwork.agency_dashboard high conf mediumOBO
Returns one aggregated view of every agency member's invitations, offers, messages, and contracts, concentrating the whole organization's client data into a single response.
All other tools (13)
upwork.account_and_access low conf mediumallow
Enumerates which Upwork accounts the connected credential can act as — freelancer, client, or agency — plus company details, revealing the agent's effective reach.
upwork.contracts_and_work_delivery medium conf mediumaudit
Submits milestone deliverables and reports logged time against active contracts, which is the billing input a client reviews before funds are released.
upwork.dashboard_overview low conf mediumallow
Summarizes new proposals, pending offers, messages, and contract updates in one read; a status roll-up that changes nothing but reveals current pipeline state.
upwork.draft_and_submit_proposals medium conf mediumaudit
Submits a proposal to a job posting, spending Connects credits and putting a binding rate and pitch in front of a prospective client.
upwork.earnings_and_profile medium conf mediumaudit
Reads earnings and available balance, and rewrites profile fields including employment history, education, and languages — personal data that drives marketplace matching.
upwork.file_attachments medium conf mediumaudit
Uploads and downloads attachments bound to proposals, offers, jobs, and messages — files that routinely carry resumes, identity documents, and client deliverables.
upwork.find_and_shortlist_talent medium conf mediumaudit
Searches freelancers by skill, rate, and location and returns ranked profiles with full work history, producing an automated shortlist that shapes who gets hired.
upwork.find_the_right_jobs low conf mediumallow
Searches and saves marketplace job listings by skill, budget, or type; read-only discovery over publicly posted jobs with no state change beyond favorites.
upwork.invitations_and_proposals medium conf mediumaudit
Invites specific freelancers to apply and declines received proposals off ranked summaries, an adverse hiring decision recorded against a named applicant.
upwork.post_and_manage_jobs medium conf mediumaudit
Publishes and edits live job postings on the public Upwork marketplace, so drafted scope, budget, and requirements become externally visible under the company's name.
upwork.profile_visibility medium conf mediumaudit
Toggles the availability badge and manages profile boost ads, which are paid placements — changes here incur marketplace ad spend and alter inbound lead volume.
upwork.talent_lists low conf mediumallow
Creates talent lists and saves freelancers into them for later consideration; a reversible bookmarking write over already-published marketplace profiles.
upwork.teams_and_members medium conf mediumaudit
Returns the agency's team structure and full member roster, exposing the identities and affiliations of everyone working under the organization.