docusign · ingress
Block Irreversible Docusign Void and Workflow Kills
Denies the irreversible destructive operations on the Docusign agent path:
Policies tagged "freeze-destructive-ops"
confluence · ingress
Confluence: Freeze Page & Attachment Deletion
Freezes the two irreversible Confluence deletion tools on the agent channel: confluence delete page and confluence delete attachment.
confluenceatlassianfreeze-destructive-opsdata-protectioningresssoc2
airtable · ingress
Freeze Destructive Airtable Deletes
Denies every destructive Airtable tool call unless the caller's IdP token carries the placeholder group airtable-admins.
google-calendar · ingress
Freeze Destructive and Series-Wide Calendar Changes
Denies irreversible Google Calendar mutations on the agent channel:
asana · ingress
Freeze Destructive Asana Operations
Denies every destructive Asana tool call unless the caller's IdP token carries the placeholder group asana-admins.
box · ingress
Freeze Destructive Box Operations
Freezes deletes and retention tampering on the community self-hosted Box MCP server (box-community/mcp-server-box).
dropbox · ingress
Freeze Destructive Dropbox Operations
Freezes the irreversible and bulk-mutation Dropbox tools on the agent channel, regardless of path. At ingress it denies, by tool-name suffix:
gmail · ingress
Freeze Destructive Gmail Operations
Denies the irreversible destruction surface that community Gmail MCP servers expose — permanent email deletion, label deletion, and filter deletion — for…
google-drive · ingress
Freeze Destructive Google Drive Operations
Blocks Google Drive delete operations issued by agents.
linear · ingress
Freeze Destructive Linear Operations
Denies destructive Linear tool calls — the delete , archive , and session-logout classes — unless the caller's IdP token carries the placeholder group…
ms365 · ingress
Freeze Destructive Microsoft 365 Operations
Denies every Microsoft 365 tool call whose verb segment is delete- or cancel- unless the caller's IdP token carries the placeholder group m365-admin.
monday · ingress
Freeze Destructive monday Operations
Splits monday's destructive tool surface into two tiers and treats each differently at ingress, before the call ever reaches the monday MCP server:
quickbooks · ingress
Freeze Destructive QuickBooks Operations
Denies every destructive QuickBooks Online (QBO) tool call on the agent channel before it reaches the MCP server.
tableau · ingress
Freeze Destructive Tableau Content Ops
Denies the irreversible content-mutation tools on the official tableau/tableau-mcp web server unless the caller's IdP token carries the placeholder group…
notion · ingress
Freeze Notion Full-Page Content Overwrites
Denies notion-update-page calls whose command argument is replace content — the one edge on Notion's hosted MCP server that overwrites a page's entire body…
gusto · ingress
Freeze Payroll Writes in Gusto
Freezes every write and delete operation on a Gusto pipeline.
salesforce · ingress
Freeze Salesforce Record Deletes
Denies all Salesforce record-deletion capability on the agent channel unless the caller's IdP groups claim contains the placeholder group sf-admins.
hubspot · ingress
HubSpot Freeze Destructive Ops
Blocks every archive/deletion-class HubSpot tool call, plus the consent-destroying contact unsubscribe, before it reaches the MCP server.
jira · ingress
JIRA: Block Change-History Actor Spoofing
Blocks any official Jira write call — transitionJiraIssue, editJiraIssue, or createJiraIssue — that carries a historyMetadata block, before it reaches the…
jiraatlassianfreeze-destructive-opsaudit-integrityingresssoc2
jira · ingress
JIRA: Freeze Destructive Issue Operations
Freezes the three irreversible Jira operations on the agent channel: jira delete issue, jira remove issue link, and jira remove watcher.
jiraatlassianfreeze-destructive-opsrecord-integritydata-protectioningresssoc2