iso27001-nist
19 Dtwo policies tagged "iso27001-nist", including Block Secrets in Slack Messages, Deny Graph API Batch Escape Hatch. Browse by what the control does rather than which app it targets.
Jira
JIRA: Deny Sensitive Project Search and ViewKeeps issues that belong to a configurable set of "sensitive" JIRA projects out of read access through the JIRA MCP server.JIRA: Protect Sensitive Projects from WritesBlocks write operations against issues that belong to a configurable set of "sensitive" JIRA projects.JIRA: Redact Sensitive Information from Issue ViewsRedacts sensitive content from the responses of JIRA issue-view tools before they reach the caller.
Microsoft 365
Deny Graph API Batch Escape HatchBlocks the Microsoft 365 MCP server's raw-Graph passthrough tool (graph-batch, observed live as ms365-graph-batch).Freeze M365 Identity PlaneFreezes directory and membership mutations on the Microsoft 365 MCP surface. The policy denies, by tool-name suffix:Guard OneDrive/SharePoint Share LinksStops agents from opening OneDrive/SharePoint files to the whole internet. It guards the two Microsoft 365 sharing tools:
Power BI
Salesforce
Salesforce Deny API Escape HatchesUnconditionally denies the raw-code and raw-API tools exposed by the community Salesforce MCP servers — tools that bypass every object- and argument-level…Salesforce Protect Contact FieldsBlocks Salesforce Contact updates that modify protected fields — ownership, account linkage, contact PII, name, and consent flags.Salesforce Query AllowlistRestricts Salesforce SOQL queries so only Account, Contact, and Opportunity records can be retrieved.Salesforce Read-Only AccessRestricts the Salesforce MCP server to read-only access.Salesforce Redact PIIRedacts personal contact information from Salesforce tool responses before they reach the caller.
ServiceNow
Slack
Block Secrets in Slack MessagesBlocks Slack send-message tool calls whose message body looks like it contains a secret — API keys, passwords, tokens, or PEM-formatted private keys.Slack: Deny Channel CreationBlocks Slack channel-creation tool calls at ingress. Every other Slack tool — and every non-Slack tool — passes through untouched.Slack: Deny Read/Search/Summarize of Sensitive ChannelsBlocks read, search, and summarize operations that target a configurable set of "sensitive" Slack channels.Slack: Deny Sending Direct MessagesBlocks Slack message-write calls whose destination resolves to a direct conversation — a 1:1 DM, a message posted to a user ID (which Slack auto-opens as a…Slack: Redact Sensitive Information from MessagesRedacts sensitive content from outgoing Slack message arguments before the call reaches Slack.