// SCAN REPORT

ComplianceCow MCP Server

209 tools. 70 can modify or destroy data without limits.

1 destructive tool with no built-in limits. Policy required.

Last updated:

70 can modify or destroy data
139 read-only
209 tools total

Community server · catalogue entry checked 12/06/2026

How to control ComplianceCow MCP Server ↓

TOOL MAP

What ComplianceCow MCP Server exposes to your agents

Read (139) Write / Execute (60) Destructive / Financial (1)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS
Critical Risk

The most dangerous ComplianceCow MCP Server tools

Destructive · High delete_asset_schedule This tool irreversibly removes an assessment schedule, which cannot be undone. Execute · High execute_action The tool name 'execute_action' combined with the server's stated support for 'automated remediation actions' (fixing policies, creating tickets) indicates this tool runs operations with side effects that depend on parame Execute · High execute_cypher_query This tool executes arbitrary Cypher queries against a compliance database containing sensitive policy, control, and audit information. Execute · High execute_rule Without a description, we rely on the tool name and server context.

70 of ComplianceCow MCP Server's 209 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control ComplianceCow MCP Server

PolicyLayer is an MCP gateway — it sits between your AI agents and ComplianceCow MCP Server, and nothing reaches the server without passing your rules. These are the rules we recommend:

Deny destructive operations
{
  "delete_asset_schedule": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations
{
  "add_cel_expression_to_metrics": {
    "limits": [
      {
        "counter": "add_cel_expression_to_metrics_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations
{
  "audit_fetch_assessment_run_details": {
    "limits": [
      {
        "counter": "audit_fetch_assessment_run_details_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

  1. Create a free account and register ComplianceCow MCP Server — nothing to install.
  2. Add these rules — paste them, or build them visually. Tune the limits to your setup.
  3. Point your MCP client (Claude, Cursor, anything) at your gateway URL.
ENFORCE POLICY ON COMPLIANCECOW →

Instant setup, no code required.

FULL CATALOGUE

All 209 ComplianceCow MCP Server tools

DESTRUCTIVE 1 tools
Destructive delete_asset_schedule Delete an existing assessment schedule.
EXECUTE 12 tools
Execute create_sql_query_evidence create_sql_query_evidence Execute execute_action execute_action Execute execute_cypher_query execute_cypher_query Execute execute_rule execute_rule Execute execute_shell_command execute_shell_command Execute execute_task execute_task Execute prepare_applications_for_execution prepare_applications_for_execution Execute run_metrics_assessment Trigger a new metrics assessment run. Execute schedule_asset_execution schedule_asset_execution Execute trigger_workflow trigger_workflow Execute validate_sql_query validate_sql_query Execute validate_sql_query_and_cel validate_sql_query_and_cel
WRITE 48 tools
Write add_cel_expression_to_metrics Add CEL expressions to an existing metric. Write add_check_to_asset add_check_to_asset Write add_citation_to_asset_control add_citation_to_asset_control Write add_metric add_metric Write add_unique_identifier_to_task add_unique_identifier_to_task Write assign_form assign_form Write attach_citation_to_control_config attach_citation_to_control_config Write attach_citation_to_metrics attach_citation_to_metrics Write attach_rule_to_control attach_rule_to_control Write audit_create_control_run_note audit_create_control_run_note Write clone_form clone_form Write configure_rule_output_schema configure_rule_output_schema Write create_assessment create_assessment Write create_asset_and_check create_asset_and_check Write create_control_config create_control_config Write create_control_config_note create_control_config_note Write create_control_note create_control_note Write create_design_notes create_design_notes Write create_downloadable_file create_downloadable_file Write create_form create_form Write create_form_response create_form_response Write create_metrics_note create_metrics_note Write create_rule create_rule Write create_rule_readme create_rule_readme Write create_support_ticket create_support_ticket Write create_workflow create_workflow Write link_source_metrics_to_target_metric Args: Write mark_control_ready_for_execution mark_control_ready_for_execution Write publish_rule publish_rule Write save_form_responses save_form_responses Write set_form_category set_form_category Write submit_user_form submit_user_form Write update_cel_expression_to_metrics Update CEL expressions to an existing metric. Write update_control_config_contexts update_control_config_contexts Write update_control_config_note update_control_config_note Write update_control_note update_control_note Write update_form update_form Write update_form_configuration update_form_configuration Write update_metric update_metric Write update_metric_sql_query_evidence update_metric_sql_query_evidence Write update_metrics_note update_metrics_note Write update_rule update_rule Write update_rule_readme update_rule_readme Write update_sql_query_evidence update_sql_query_evidence Write update_workflow_mermaid_diagram Args: Write update_workflow_summary Args: Write upload_evidence upload_evidence Write upload_file upload_file
READ 139 tools
Read audit_fetch_assessment_run_details audit_fetch_assessment_run_details Read audit_fetch_assessment_run_leaf_control_evidence audit_fetch_assessment_run_leaf_control_evidence Read audit_fetch_assessment_runs audit_fetch_assessment_runs Read audit_fetch_evidence_records audit_fetch_evidence_records Read audit_get_uses_by_ids Get the user by ids Read audit_list_all_assessment_categories audit_list_all_assessment_categories Read audit_list_all_assessments audit_list_all_assessments Read audit_list_assessment_control_configs audit_list_assessment_control_configs Read audit_list_control_config_audit_events List control config audit events Read audit_list_control_run_audit_events List control run audit events Read check_applications_publish_status check_applications_publish_status Read check_form_progress check_form_progress Read check_rule_publish_status check_rule_publish_status Read check_rule_status check_rule_status Read collect_template_input collect_template_input Read fetch_applications Fetch all available applications from the system. Read fetch_assessment_available_actions fetch_assessment_available_actions Read fetch_assessment_run_details fetch_assessment_run_details Read fetch_assessment_run_leaf_control_evidence fetch_assessment_run_leaf_control_evidence Read fetch_assessment_run_leaf_controls fetch_assessment_run_leaf_controls Read fetch_assessment_runs fetch_assessment_runs Read fetch_assessments fetch_assessments Read fetch_assets_summary fetch_assets_summary Read fetch_automated_controls_of_an_assessment fetch_automated_controls_of_an_assessment Read fetch_available_control_actions fetch_available_control_actions Read fetch_cc_rule_by_id Fetch rule details by rule id from the compliancecow. Read fetch_cc_rule_by_name Fetch rule details by rule name from the compliancecow. Read fetch_cc_rules_list fetch_cc_rules_list Read fetch_checks fetch_checks Read fetch_checks_summary fetch_checks_summary Read fetch_complete_form fetch_complete_form Read fetch_control_source_summary fetch_control_source_summary Read fetch_controls To fetch controls. Read fetch_cves fetch_cves Read fetch_dashboard_framework_controls fetch_dashboard_framework_controls Read fetch_dashboard_framework_summary fetch_dashboard_framework_summary Read fetch_dynamic_option fetch_dynamic_option Read fetch_evidence_available_actions fetch_evidence_available_actions Read fetch_evidence_record_schema fetch_evidence_record_schema Read fetch_evidence_records fetch_evidence_records Read fetch_execution_progress fetch_execution_progress Read fetch_form_category fetch_form_category Read fetch_general_available_actions fetch_general_available_actions Read fetch_leaf_controls_of_an_assessment fetch_leaf_controls_of_an_assessment Read fetch_metrics_source_summary fetch_metrics_source_summary Read fetch_output_file fetch_output_file Read fetch_recent_assessment_runs fetch_recent_assessment_runs Read fetch_resource_types fetch_resource_types Read fetch_resource_types_summary fetch_resource_types_summary Read fetch_resources fetch_resources Read fetch_resources_by_check_name fetch_resources_by_check_name Read fetch_resources_by_check_name_summary fetch_resources_by_check_name_summary Read fetch_resources_summary fetch_resources_summary Read fetch_rule fetch_rule Read fetch_rule_design_notes fetch_rule_design_notes Read fetch_rule_readme fetch_rule_readme Read fetch_rule_readme_documentaion fetch_rule_readme_documentaion Read fetch_rules_suggestions fetch_rules_suggestions Read fetch_run_control_meta_data fetch_run_control_meta_data Read fetch_run_controls fetch_run_controls Read fetch_sql_query_feedback fetch_sql_query_feedback Read fetch_task_readme fetch_task_readme Read fetch_tasks_suggestions fetch_tasks_suggestions Read fetch_unique_node_data_and_schema Fetch unique node data and schema Read fetch_workflow_details Args: Read fetch_workflow_resource_data fetch_workflow_resource_data Read fetch_workflow_rule fetch_workflow_rule Read get_all_assessment_metrics Get all metrics for an assessment id. Read get_all_metrics_categories Get all metrics categories for an assessment id. Read get_all_metrics_of_run Get transformed metrics for a metrics assessment run. Read get_all_recent_assessment_run_details get_all_recent_assessment_run_details Read get_application_info get_application_info Read get_applications_for_tag get_applications_for_tag Read get_asset_control_hierarchy get_asset_control_hierarchy Read get_asset_metrics_evidence_sample_data get_asset_metrics_evidence_sample_data Read get_assets_data get_assets_data Read get_ccf_control_last_run_date Get the ccf assessment controls last run date. Read get_cel_expression_for_metrics Get CEL expressions of an existing metric. Read get_configurations_for_forms Get all form configuration options available globally for UI customization. Read get_context_tables get_context_tables Read get_current_user Get the current authenticated user (id, email, username). Read get_dashboard_common_controls_details get_dashboard_common_controls_details Read get_dashboard_data get_dashboard_data Read get_dashboard_review_periods Fetch list of review periods Read get_default_ccf_assessment Get the default ccf assessment from CCow. Read get_entity_hierarchy get_entity_hierarchy Read get_evidence_sample_data get_evidence_sample_data Read get_graph_schema_relationship Retrieve the complete graph database schema and relationship structure Read get_metrics_assessment get_metrics_assessment Read get_metrics_evidence_sample_data get_metrics_evidence_sample_data Read get_rules_summary get_rules_summary Read get_task_details get_task_details Read get_tasks_summary get_tasks_summary Read get_template_guidance get_template_guidance Read get_top_non_compliant_controls_detail get_top_non_compliant_controls_detail Read get_top_over_due_controls_detail get_top_over_due_controls_detail Read get_workflow_by_name Get a workflow configuration by its name (exact, case-sensitive match). Read help help Read list_all_assessment_categories list_all_assessment_categories Read list_all_assessments list_all_assessments Read list_all_assets Get all assets Read list_assessment_control_configs list_assessment_control_configs Read list_assessments list_assessments Read list_asset_schedules List schedules for a given asset. Read list_assets Get all assets Read list_assets_cc list_assets_cc Read list_checks list_checks Read list_control_config_notes list_control_config_notes Read list_control_notes list_control_notes Read list_dynamic_options List dynamic options. Returns only id, name, and status. Read list_form_categories list_form_categories Read list_forms list_forms Read list_forms_assigned_to_me list_forms_assigned_to_me Read list_metric_sql_query_evidence list_metric_sql_query_evidence Read list_metrics_notes list_metrics_notes Read list_sql_query_evidence list_sql_query_evidence Read list_user_blocks List active user blocks/groups. Read list_workflow_activity_types list_workflow_activity_types Read list_workflow_condition_categories list_workflow_condition_categories Read list_workflow_conditions list_workflow_conditions Read list_workflow_event_categories list_workflow_event_categories Read list_workflow_events list_workflow_events Read list_workflow_function_categories list_workflow_function_categories Read list_workflow_functions list_workflow_functions Read list_workflow_predefined_variables list_workflow_predefined_variables Read list_workflow_rules list_workflow_rules Read list_workflow_tasks list_workflow_tasks Read list_workflows Retrieve a list of all available workflow configurations. Read prepare_input_collection_overview prepare_input_collection_overview Read read_file read_file Read read_resource Read content from a resource URI (primarily for local files). Read search_users_by_email_ids Search users by email ids. Read suggest_control_citations suggest_control_citations Read suggest_control_config_citations suggest_control_config_citations Read suggest_metrics_citations suggest_metrics_citations Read validate_user_ids validate_user_ids Read verify_collected_inputs verify_collected_inputs Read verify_control_automation verify_control_automation Read verify_control_in_assessment verify_control_in_assessment
OTHER 9 tools
Other collect_parameter_input collect_parameter_input Other confirm_parameter_input confirm_parameter_input Other confirm_template_input confirm_template_input Other create_metric_sql_query_evidence create_metric_sql_query_evidence Other create_workflow_custom_event create_workflow_custom_event Other generate_design_notes_preview generate_design_notes_preview Other generate_rule_readme_preview generate_rule_readme_preview Other modify_workflow modify_workflow Other publish_application publish_application
EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

UnClick 1658 tools
adminautomation
Nodebench 824 tools
adminautomation
Yaver 812 tools
adminautomation
Binance MCP Server 734 tools
adminautomation
Crow 587 tools
adminautomation
Fortimanager 584 tools
adminautomation
TinyFn 572 tools
adminautomation
Mcp 571 tools
adminautomation
FAQ

Questions about ComplianceCow MCP Server

Can an AI agent delete data through the ComplianceCow MCP Server MCP server? +

Yes. The ComplianceCow MCP Server server exposes 1 destructive tools including delete_asset_schedule. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through ComplianceCow MCP Server? +

The ComplianceCow MCP Server server has 48 write tools including add_cel_expression_to_metrics, add_check_to_asset, add_citation_to_asset_control. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach ComplianceCow MCP Server.

How many tools does the ComplianceCow MCP Server MCP server expose? +

209 tools across 4 categories: Destructive, Execute, Read, Write. 139 are read-only. 70 can modify, create, or delete data.

How do I enforce a policy on ComplianceCow MCP Server? +

Register the ComplianceCow MCP Server MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every ComplianceCow MCP Server tool call.

Deterministic rules across all 209 ComplianceCow MCP Server tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON COMPLIANCECOW →

Instant setup, no code required.

209 ComplianceCow MCP Server tools catalogued and risk-classified — across an index of 46,500+ MCP servers.

// WHERE THIS COMES FROM

These policies come from ComplianceCow MCP Server's registry record.

The record behind this page: verified identity, auth posture, risk grade, every tool classified, recommended policy — re-checked continuously.

Teams ship this data inside their own products. See what a licence covers →

// GET IN TOUCH

Have a question or want to learn more? Send us a message.

Message sent.

We'll get back to you soon.