Sign in

access-control

40 Dtwo policies tagged "access-control", including Apollo Read-Only, Box: Role-Gated Writes (Read-Only Default). Browse by what the control does rather than which app it targets.

On this page
  1. Apollo
  2. BigQuery
  3. Box
  4. Clay
  5. Confluence
  6. Databricks
  7. Glean
  8. Gmail
  9. HubSpot
  10. Jira
  11. NetSuite
  12. Notion
  13. Salesforce
  14. ServiceNow
  15. Slack
  16. Snowflake
  17. Tableau

Apollo

Apollo Read-Onlyingress · ApolloMakes the Apollo connection read-only for agents.

BigQuery

Default-Deny Unaudited BigQuery Toolsingress · BigQueryMaintains a per-tenant allowlist of audited BigQuery tool-name suffixes and denies any call whose tool name does not end with an allowlisted entry.

Box

Box: Role-Gated Writes (Read-Only Default)ingress · BoxMakes Box read-only by default on the MCP path.

Clay

Clay Subroutine Allowlistingress · ClayLets the agent run Clay's built-in enrichment functions (Work Email, Person Job Title, Enrich Company, Tech Stack and the rest) and blocks every other Clay…

Confluence

Fence Confluence Reads & Search to Non-Restricted Spacesingress · ConfluenceFences a configurable set of restricted Confluence spaces (placeholder keys: HR, LEGAL, SEC) out of the agent's read and search paths unless the caller's IdP…

Databricks

Databricks Default-Deny Unknown Toolsingress · DatabricksPins an allowlist of the exact Databricks tool names your team audited and denies every other tool name on the Databricks MCP server(s).Databricks: Role-Gate Compute & Job Controlingress · DatabricksThe community JustTryAI/databricks-mcp-server exposes cluster and job control — create cluster, start cluster, terminate cluster, run job, and export…

Glean

Fence Glean Search by Datasourceingress · GleanGlean's search tool fans out across every system the tenant has indexed (Drive, Confluence, Slack, Jira, Gmail/Outlook, GitHub, Salesforce, Gong, HR…Glean Default-Deny Unknown Toolsingress · GleanPins a per-tenant allowlist of the verified built-in read tools on the Glean managed remote MCP server and denies every other tool suffix on the Glean server…Glean: Gate Memory Writes (Read-Only Default)ingress · GleanGates mutating calls to Glean's long-term memory surface — the built-in tool exposed as memory (and as read memory in Glean's own client guide).

Gmail

Gmail: Role-Gated Writes (Read-Only Default)ingress · GmailMakes Gmail read-only by default on the MCP path. Verified read tools pass for everyone.

HubSpot

HubSpot Block Deal Closureingress · HubSpotBlocks HubSpot CRM-object calls that move a deal into a closed stage (closedwon or closedlost). Both create and update requests are inspected.HubSpot Protect Associationsingress · HubSpotBlocks HubSpot CRM-object calls that create or change associations between objects (deal↔company, contact↔company, etc.).HubSpot Protect Deal Owneringress · HubSpotBlocks HubSpot CRM-object update calls that set or change a deal's owner.HubSpot Protect Lifecycle Stageingress · HubSpotBlocks HubSpot CRM-object calls that set or change a contact's lifecycle stage.HubSpot Read-Onlyingress · HubSpotMakes the HubSpot connection read-only by blocking the write tool.HubSpot Read-Only Except Call Notesingress · HubSpotKeeps the HubSpot connection read-only for agents, with one exception: the agent can log a call note against a contact.HubSpot Role-Gate Schema and Consentingress · HubSpotSits one privilege tier above hubspot/role-gate-writes: ordinary crm-writers can create and edit CRM records, but two higher-blast-radius write classes are…HubSpot Role-Gate Writesingress · HubSpotGates every HubSpot write tool behind an IdP group: callers whose JWT groups claim contains crm-writers may create and update CRM records; everyone else gets…

Jira

JIRA: Deny Sensitive Project Search and Viewingress · JiraKeeps issues that belong to a configurable set of "sensitive" JIRA projects out of read access through the JIRA MCP server.JIRA: Protect Sensitive Projects from Writesingress · JiraBlocks write operations against issues that belong to a configurable set of "sensitive" JIRA projects.JIRA: Role-Gated Writes (Read-Only Default)ingress · JiraMakes Jira read-only by default on the MCP path.

NetSuite

NetSuite Default-Deny Unknown MCP Toolsingress · NetSuitePins an allowlist of the audited NetSuite MCP Standard Tools and denies every other tool call before it reaches the NetSuite AI Connector.

Notion

Fence Notion Member Directory to Admin & ITingress · NotionDenies calls to the Notion member-directory tool (notion-get-users, matched by the -get-users suffix) unless the caller's IdP groups include an admin or IT…

Salesforce

Salesforce Deny API Escape Hatchesingress · SalesforceUnconditionally denies the raw-code and raw-API tools exposed by the community Salesforce MCP servers — tools that bypass every object- and argument-level…Salesforce Guard Opportunity Pipeline Fieldsingress · SalesforceKeeps revenue-pipeline moves human-approved.Salesforce Protect Contact Fieldsingress · SalesforceBlocks Salesforce Contact updates that modify protected fields — ownership, account linkage, contact PII, name, and consent flags.Salesforce Query Allowlistingress · SalesforceRestricts Salesforce SOQL queries so only Account, Contact, and Opportunity records can be retrieved.Salesforce Read-Only Accessingress · SalesforceRestricts the Salesforce MCP server to read-only access.Salesforce Read-Only Except Call Notesingress · SalesforceKeeps the Salesforce connection read-only for agents, with one exception: the agent can log a call note against a contact.Salesforce Role-Gated Writesingress · SalesforceThe PF-12 least-privilege baseline for Salesforce.

ServiceNow

ServiceNow: Role-Gated Writes (Read-Only Default)ingress · ServiceNowelse fails closed

Slack

Slack Role-Gate Writesingress · SlackGates every Slack write-class tool behind an IdP group: callers whose JWT groups claim contains slack-writers may send and schedule messages, add or remove…Slack: Deny Channel Creationingress · SlackBlocks Slack channel-creation tool calls at ingress. Every other Slack tool — and every non-Slack tool — passes through untouched.Slack: Deny DM and Private-Conversation Reads and Searchingress · SlackDenies the agent read reach into Slack DMs and private conversations on the paths below — the workspace's highest concentration of PII/PHI (HR issues, health…Slack: Deny Read/Search/Summarize of Sensitive Channelsingress · SlackBlocks read, search, and summarize operations that target a configurable set of "sensitive" Slack channels.Slack: Deny Sending Direct Messagesingress · SlackBlocks Slack message-write calls whose destination resolves to a direct conversation — a 1:1 DM, a message posted to a user ID (which Slack auto-opens as a…

Snowflake

Snowflake Default-Deny Unknown Toolsingress · SnowflakePins an allowlist of the exact Snowflake tool names your team audited and denies every other tool name on the Snowflake MCP server(s).Snowflake Deny Composite & Generic Toolsingress · SnowflakeDenies the opaque composite and generic passthrough tools on the Snowflake-managed MCP server whose execution the gateway cannot inspect one SQL statement at…

Tableau

Fence Tableau Datasource Scopeingress · TableauTableau's MCP server is a warehouse proxy: query-datasource runs a VizQL Data Service (VDS) query and returns raw row-level data — PII, PHI, payroll,…

↑↓ to navigate ↵ to open

Get in touch

Tell us what you need to govern.

A few lines is plenty — what you're deploying, and what you need control over. We read every one.