deny-escape-hatches

4 Dtwo policies tagged "deny-escape-hatches", including Deny Graph API Batch Escape Hatch, Deny Stripe API-Write Escape Hatch. Browse by what the control does rather than which app it targets.

On this page

Microsoft 365
Salesforce
Snowflake
Stripe

Microsoft 365

Deny Graph API Batch Escape Hatchingress · Microsoft 365Blocks the Microsoft 365 MCP server's raw-Graph passthrough tool (graph-batch, observed live as ms365-graph-batch).

Salesforce

Salesforce Deny API Escape Hatchesingress · SalesforceUnconditionally denies the raw-code and raw-API tools exposed by the community Salesforce MCP servers — tools that bypass every object- and argument-level…

Snowflake

Snowflake Deny Composite & Generic Toolsingress · SnowflakeDenies the opaque composite and generic passthrough tools on the Snowflake-managed MCP server whose execution the gateway cannot inspect one SQL statement at…

Stripe

Deny Stripe API-Write Escape Hatchingress · StripeDenies the stripe api write meta-tool — the single raw passthrough on the official Stripe MCP server that can execute any Stripe POST, PATCH, PUT, or DELETE…