Every MCP tool in the SCOPE compliance index, grouped by server — risk posture, regulatory exposure, and the tools that warrant tighter governance.
11 high 14 med · 25 tools · 6 SoD-flagged
regimes APPICCPAEU_AI_ACTGDPRHIPAAISO_27001LGPDNIST_AI_RMFNIST_CSFPIPEDAPIPLPOPIASOC2UK_GDPR
Tools needing tighter control (13 of 25)
zoom.zoom_chat_channel_member_role_update high conf highhuman approval
Promotes or demotes a channel member, handing one principal administrative control over a channel's membership and settings without an access review.
zoom.zoom_chat_channel_members_add high conf highOBO
Adds people to a channel, exposing its entire message and file history to the new members the moment they join.
zoom.canvas_transfer_file_ownership high conf mediumhuman approval
Moves a document to a new owner, stripping the original owner of control and handing the recipient full rights over its contents and sharing.
zoom.canvas_modify_file_general_access_setting high conf mediumOBO
Widens or narrows who can reach a document — a single call can turn an internal-only file into one every account member reads.
zoom.canvas_add_file_collaborators high conf mediumOBO
Grants named users access to a document's full contents and revision history, bypassing whatever sharing review the owner would normally apply.
zoom.canvas_modify_file_collaborator_role high conf mediumOBO
Escalates a viewer to an editor (or the reverse) on a document, changing who can rewrite or reshare its content.
zoom.search_zoom high conf mediumhuman approval
Sweeps multiple Zoom surfaces at once with a free-text query, letting one call surface private meeting content, chats, and documents the caller never had to locate individually.
zoom.zoom_chat_messages_search high conf highhuman approval
Searches private chat history across sessions, pulling back direct messages the caller would otherwise have to open one conversation at a time.
zoom.zoom_chat_channel_update high conf highOBO
Alters a channel's visibility and permission settings, which can turn a private channel discoverable or silence who is allowed to post.
zoom.canvas_delete_file high conf mediumhuman approval
Removes a document and the collaborative work inside it, with no second approver between the agent and the deletion.
zoom.get_customer_contacts high conf mediumhuman approval
Returns named buyer contacts with their CRM detail, a direct read of customer personal data outside the system of record.
zoom.get_recording_resource medium conf highaudit redact
Pulls the actual recorded audio, video, and transcript of a meeting, which routinely captures faces, voices, and whatever confidential or clinical matter was discussed.
zoom.get_meeting_assets medium conf highaudit redact
Returns meeting transcripts and AI summaries, reproducing everything said in the room including personal and potentially clinical detail.
All other tools (12)
zoom.get_conversation_analysis medium conf mediumaudit
Exposes machine-generated assessments of a customer call, including sentiment and talk-pattern judgments about named participants.
zoom.get_conversation_transcript medium conf mediumaudit
Reproduces a recorded sales call word for word, including anything a customer disclosed about pricing, people, or their own operations.
zoom.get_file_content medium conf highaudit
Exports a document's full text out of Zoom Docs, moving whatever the file holds into the agent's context.
zoom.get_scorecard_sessions medium conf mediumaudit
Reads automated performance scores attached to named employees, material that feeds coaching and evaluation decisions about those people.
zoom.recordings_list medium conf highaudit
Enumerates every cloud recording a named user holds, mapping out which meetings were recorded and when before any content is fetched.
zoom.search_deals medium conf mediumaudit
Lists pipeline opportunities with their values and stages, an account-wide view of forecast that is normally restricted by territory.
zoom.search_meetings medium conf highaudit
Surfaces meeting topics, times, and participants across the account, revealing who met whom about what.
zoom.zoom_chat_contacts_search medium conf highaudit
Returns directory entries for colleagues and external contacts, including names and email addresses usable for downstream targeting.
zoom.zoom_chat_files_search medium conf highaudit
Indexes the files circulating in chat, exposing attachments such as contracts or exports that were shared for a narrow audience.
zoom.zoom_chat_message_send medium conf highaudit
Posts under the authenticated user's identity, so a bad prompt speaks to colleagues or a whole channel as that person.
zoom.zoom_chat_message_update medium conf highaudit
Rewrites a message already delivered to recipients, changing the record of what was said after the fact.
zoom.zoom_chat_messages_fetch medium conf highaudit
Reads the message history of a chat session, including one-to-one conversations and anything colleagues shared in confidence.