stripe
6 Dtwo policies tagged "stripe", including Deny Stripe API-Write Escape Hatch, Human-Only Stripe Dispute Submission. Browse by what the control does rather than which app it targets.
Deny Stripe API-Write Escape HatchDenies the stripe api write meta-tool — the single raw passthrough on the official Stripe MCP server that can execute any Stripe POST, PATCH, PUT, or DELETE…Human-Only Stripe Dispute SubmissionStrips the irreversible submit flag from Stripe update dispute tool calls.Read-Only Stripe by Default (Role-Gate Billing Writes)Establishes a read-only-by-default Stripe posture over the MCP path. The named write and destructive billing tools —Scrub Unapproved Stripe Payment-Link RedirectsScrubs the post-payment redirect from Stripe payment-link creation calls.Stripe Refund Group Gate and Amount CapDenies Stripe refund tool calls — money out, irreversible — unless the caller's IdP groups include finance or billing-admin.Stripe: Redact Customer PII from Bulk ReadsMasks customer PII in the responses of Stripe's bulk PII egress channels before they reach the agent.