dtwo Policy Store

Policies tagged "record-integrity"

airtable · ingress

Freeze Destructive Airtable Deletes

Denies every destructive Airtable tool call unless the caller's IdP token carries the placeholder group airtable-admins.

airtablefreeze-destructive-opsrecord-integrityingresssoc2

asana · ingress

Freeze Destructive Asana Operations

Denies every destructive Asana tool call unless the caller's IdP token carries the placeholder group asana-admins.

asanafreeze-destructive-opsrecord-integrityingresssoc2

gmail · ingress

Freeze Destructive Gmail Operations

Denies the irreversible destruction surface that community Gmail MCP servers expose — permanent email deletion, label deletion, and filter deletion — for…

gmailfreeze-destructive-opsrecord-integrityingresssoc2

linear · ingress

Freeze Destructive Linear Operations

Denies destructive Linear tool calls — the delete , archive , and session-logout classes — unless the caller's IdP token carries the placeholder group…

linearfreeze-destructive-opsrecord-integrityingresssoc2

ms365 · ingress

Freeze Destructive Microsoft 365 Operations

Denies every Microsoft 365 tool call whose verb segment is delete- or cancel- unless the caller's IdP token carries the placeholder group m365-admin.

ms365freeze-destructive-opsrecord-integrityingresssoxsoc2

monday · ingress

Freeze Destructive monday Operations

Splits monday's destructive tool surface into two tiers and treats each differently at ingress, before the call ever reaches the monday MCP server:

mondayfreeze-destructive-opsrecord-integrityingresssoc2

tableau · ingress

Freeze Destructive Tableau Content Ops

Denies the irreversible content-mutation tools on the official tableau/tableau-mcp web server unless the caller's IdP token carries the placeholder group…

tableaufreeze-destructive-opsrecord-integrityingresssoc2

notion · ingress

Freeze Notion Full-Page Content Overwrites

Denies notion-update-page calls whose command argument is replace content — the one edge on Notion's hosted MCP server that overwrites a page's entire body…

notionfreeze-destructive-opsrecord-integrityingresssoc2

jira · ingress

JIRA: Freeze Destructive Issue Operations

Freezes the three irreversible Jira operations on the agent channel: jira delete issue, jira remove issue link, and jira remove watcher.

jiraatlassianfreeze-destructive-opsrecord-integritydata-protectioningresssoc2