stripe · ingress
Deny Stripe API-Write Escape Hatch
Denies the stripe api write meta-tool — the single raw passthrough on the official Stripe MCP server that can execute any Stripe POST, PATCH, PUT, or DELETE…
Policies tagged "stripe"
stripe · ingress
Human-Only Stripe Dispute Submission
Strips the irreversible submit flag from Stripe update dispute tool calls.
striperequire-human-approvaldisputesseparation-of-dutiestransformingresssox
stripe · ingress
Read-Only Stripe by Default (Role-Gate Billing Writes)
Establishes a read-only-by-default Stripe posture over the MCP path. The named write and destructive billing tools —
striperole-gate-writesingressleast-privilegerbacsoc2pci-dsssoxgdpr-ccpa
stripe · ingress
Scrub Unapproved Stripe Payment-Link Redirects
Scrubs the post-payment redirect from Stripe payment-link creation calls.
stripeguard-share-linksingresstransformphishingprompt-injectionsoc2
stripe · ingress
Stripe Refund Group Gate and Amount Cap
Denies Stripe refund tool calls — money out, irreversible — unless the caller's IdP groups include finance or billing-admin.
stripe · egress
Stripe: Redact Customer PII from Bulk Reads
Masks customer PII in the responses of Stripe's bulk PII egress channels before they reach the agent.