AGENTFORCE-MCP-02: Broad Scope DevOps Pipeline Inheritance
🚨 Critical · Headless MCP Access
Detects when external coding agents (Cursor, Claude Code, Windsurf) are granted access to DevOps Center MCP deployment tools targeting production environments without explicit deterministic approval gates. Prevents autonomous metadata deployment driven by hallucinated or malicious prompts.
Details
| Field | Value |
|---|---|
| Rule ID | AGENTFORCE-MCP-02 |
| Severity | Critical |
| Category | Headless MCP Access |
Remediation
Restrict the DevOps Center MCP tool to Sandbox/Scratch orgs, or enforce a mandatory Agent Script transition block requiring cryptographic confirmation from a human release manager.