Every MCP tool in the SCOPE compliance index, grouped by server — risk posture, regulatory exposure, and the tools that warrant tighter governance.
3 critical 14 high 7 med 1 low · 25 tools · 12 SoD-flagged
regimes APPICCPACOSOGDPRISO_27001LGPDPCIPIPEDAPIPLPOPIASOC2SOXUK_GDPR
Tools needing tighter control (18 of 25)
zoho-books-api.create_customer_payment critical conf mediumhuman approval redact
Posts cash receipt to the ledger and settles the referenced invoices, moving revenue out of accounts receivable without a second approver.
zoho-books-api.delete_customer_payment critical conf mediumhuman approval redact
Erases a cash receipt from the books, reopening settled invoices and destroying the audit trail that ties bank deposits to customer accounts.
zoho-books-api.delete_invoice critical conf mediumhuman approval
Removes a revenue document from the books entirely, breaking invoice-number continuity and leaving no record of the billing event for auditors.
zoho-books-api.update_customer_payment high conf mediumhuman approval redact
Alters a recorded cash receipt — amount, date, or invoice allocation — so bank reconciliation and AR aging no longer match what was originally booked.
zoho-books-api.create_invoice high conf mediumOBO
Issues a billable invoice that recognizes revenue and creates a receivable against the customer, feeding directly into reported financials.
zoho-books-api.update_invoice high conf mediumOBO
Changes amounts or terms on an issued invoice, restating the receivable and the revenue already recognized against it.
zoho-books-api.create_expense high conf mediumOBO
Books a new expense to the general ledger, reducing reported profit and creating a payable or reimbursement obligation.
zoho-books-api.update_expense high conf mediumOBO
Restates a booked expense's amount, account, or date, shifting costs between periods or expense categories after the fact.
zoho-books-api.delete_expense high conf mediumhuman approval
Destroys a posted cost entry and its supporting detail, understating expenses and leaving a gap no reviewer can reconstruct.
zoho-books-api.create_tax high conf mediumOBO
Adds a tax rate that becomes selectable on invoices and bills, directly determining the tax liability computed on future transactions.
zoho-books-api.update_tax high conf mediumhuman approval
Changes a tax rate used across transactions, silently altering computed tax liability on new documents with no change-management gate.
zoho-books-api.delete_tax high conf mediumhuman approval
Removes a configured tax rate from the accounting system, breaking documents that reference it and the filing trail that depends on it.
zoho-books-api.create_purchase_order high conf mediumhuman approval
Commits company funds to a vendor under an approved-looking document, with no second signer in the loop before the order is placed.
zoho-books-api.delete_purchase_order high conf mediumhuman approval
Erases a procurement commitment record, defeating three-way match between order, receipt, and vendor bill.
zoho-books-api.delete_sales_order high conf mediumhuman approval
Destroys an open customer order record, so committed pricing, terms, and fulfilment obligations vanish with no recovery path.
zoho-books-api.delete_contact high conf mediumhuman approval
Purges a customer or vendor's personal data and severs it from historical transactions, with no undo and no second-party review.
zoho-books-api.list_contacts high conf mediumhuman approval
Pulls the entire customer and vendor directory — names, emails, phone numbers, and addresses — in one call, a bulk personal-data extract.
zoho-books-api.list_customer_payments medium conf mediumaudit redact
Returns the organization's cash receipts history, including payer, amount, date, and payment mode for every recorded transaction.
All other tools (7)
zoho-books-api.create_contact medium conf mediumaudit
Adds a customer or vendor record holding names, email, phone, and billing addresses into the accounting system's personal-data store.
zoho-books-api.create_sales_order medium conf mediumaudit
Opens a customer commitment that drives fulfilment and later invoicing; reversible, but it sets pricing and terms the customer can hold you to.
zoho-books-api.delete_item medium conf mediumaudit
Removes a billable item from the catalog, breaking templates and recurring documents that price against it.
zoho-books-api.get_user low conf mediumallow
Returns one user's name, email, and role within the accounting organization.
zoho-books-api.list_invoices medium conf mediumaudit
Returns the full accounts-receivable picture, exposing customer names, billing addresses, amounts owed, and payment status across the book of business.
zoho-books-api.list_users medium conf mediumaudit
Enumerates everyone with access to the books along with their role, mapping the accounting system's privilege surface for a caller.
zoho-books-api.update_contact medium conf mediumaudit
Rewrites a customer or vendor's contact and billing details, which redirects where invoices and remittances are sent.