dtwo Policy Store

Policies tagged "deny-escape-hatches"

ms365 · ingress

Deny Graph API Batch Escape Hatch

Blocks the Microsoft 365 MCP server's raw-Graph passthrough tool (graph-batch, observed live as ms365-graph-batch).

ms365deny-escape-hatchesingressiso27001-nistsoc2

stripe · ingress

Deny Stripe API-Write Escape Hatch

Denies the stripe api write meta-tool — the single raw passthrough on the official Stripe MCP server that can execute any Stripe POST, PATCH, PUT, or DELETE…

stripedeny-escape-hatchesingresssoxsoc2

salesforce · ingress

Salesforce Deny API Escape Hatches

Unconditionally denies the raw-code and raw-API tools exposed by the community Salesforce MCP servers — tools that bypass every object- and argument-level…

salesforcedeny-escape-hatchesaccess-controlingresssoc2iso27001-nist

snowflake · ingress

Snowflake Deny Composite & Generic Tools

Denies the opaque composite and generic passthrough tools on the Snowflake-managed MCP server whose execution the gateway cannot inspect one SQL statement at…

snowflakedeny-escape-hatchesaccess-controlcortexingresssoc2iso27001-nist