Sign in

freeze-destructive-ops

20 Dtwo policies tagged "freeze-destructive-ops", including Block Irreversible Docusign Void and Workflow Kills, Confluence: Freeze Page & Attachment Deletion. Browse by what the control does rather than which app it targets.

On this page
  1. Airtable
  2. Asana
  3. Box
  4. Confluence
  5. DocuSign
  6. Dropbox
  7. Gmail
  8. Google Calendar
  9. Google Drive
  10. Gusto
  11. HubSpot
  12. Jira
  13. Linear
  14. Microsoft 365
  15. Monday.com
  16. Notion
  17. QuickBooks
  18. Salesforce
  19. Tableau

Airtable

Freeze Destructive Airtable Deletesingress · AirtableDenies every destructive Airtable tool call unless the caller's IdP token carries the placeholder group airtable-admins.

Asana

Freeze Destructive Asana Operationsingress · AsanaDenies every destructive Asana tool call unless the caller's IdP token carries the placeholder group asana-admins.

Box

Freeze Destructive Box Operationsingress · BoxFreezes deletes and retention tampering on the community self-hosted Box MCP server (box-community/mcp-server-box).

Confluence

Confluence: Freeze Page & Attachment Deletioningress · ConfluenceFreezes the two irreversible Confluence deletion tools on the agent channel: confluence delete page and confluence delete attachment.

DocuSign

Block Irreversible Docusign Void and Workflow Killsingress · DocuSignDenies the irreversible destructive operations on the Docusign agent path:

Dropbox

Freeze Destructive Dropbox Operationsingress · DropboxFreezes the irreversible and bulk-mutation Dropbox tools on the agent channel, regardless of path. At ingress it denies, by tool-name suffix:

Gmail

Freeze Destructive Gmail Operationsingress · GmailDenies the irreversible destruction surface that community Gmail MCP servers expose — permanent email deletion, label deletion, and filter deletion — for…

Google Calendar

Freeze Destructive and Series-Wide Calendar Changesingress · Google CalendarDenies irreversible Google Calendar mutations on the agent channel:

Google Drive

Freeze Destructive Google Drive Operationsingress · Google DriveBlocks Google Drive delete operations issued by agents.

Gusto

Freeze Payroll Writes in Gustoingress · GustoFreezes every write and delete operation on a Gusto pipeline.

HubSpot

HubSpot Freeze Destructive Opsingress · HubSpotBlocks every archive/deletion-class HubSpot tool call, plus the consent-destroying contact unsubscribe, before it reaches the MCP server.

Jira

JIRA: Block Change-History Actor Spoofingingress · JiraBlocks any official Jira write call — transitionJiraIssue, editJiraIssue, or createJiraIssue — that carries a historyMetadata block, before it reaches the…JIRA: Freeze Destructive Issue Operationsingress · JiraFreezes the three irreversible Jira operations on the agent channel: jira delete issue, jira remove issue link, and jira remove watcher.

Linear

Freeze Destructive Linear Operationsingress · LinearDenies destructive Linear tool calls — the delete , archive , and session-logout classes — unless the caller's IdP token carries the placeholder group…

Microsoft 365

Freeze Destructive Microsoft 365 Operationsingress · Microsoft 365Denies every Microsoft 365 tool call whose verb segment is delete- or cancel- unless the caller's IdP token carries the placeholder group m365-admin.

Monday.com

Freeze Destructive monday Operationsingress · Monday.comSplits monday's destructive tool surface into two tiers and treats each differently at ingress, before the call ever reaches the monday MCP server:

Notion

Freeze Notion Full-Page Content Overwritesingress · NotionDenies notion-update-page calls whose command argument is replace content — the one edge on Notion's hosted MCP server that overwrites a page's entire body…

QuickBooks

Freeze Destructive QuickBooks Operationsingress · QuickBooksDenies every destructive QuickBooks Online (QBO) tool call on the agent channel before it reaches the MCP server.

Salesforce

Freeze Salesforce Record Deletesingress · SalesforceDenies all Salesforce record-deletion capability on the agent channel unless the caller's IdP groups claim contains the placeholder group sf-admins.

Tableau

Freeze Destructive Tableau Content Opsingress · TableauDenies the irreversible content-mutation tools on the official tableau/tableau-mcp web server unless the caller's IdP token carries the placeholder group…

↑↓ to navigate ↵ to open