Policy Store
Govern what your agents do
195 reviewed OPA/Rego policies across 33 apps and 9 bundles. Each one is small and does a single thing — allow, deny, redact, or rewrite one kind of call — so you build a posture by attaching several.
Start with a problem — a leaked secret, exposed CRM data, an unwanted write — and the policies that address it
StoriesCreate a gateway and attach your first policy in minutes
Try it freeBrowse every policy by app, with the Rego source and the import path for each
195 policiesStories
Problem-first guides. Each takes a specific risk and names the policies that address it.
Stop AI agents from leaking secrets into SlackOnce an agent posts to Slack, an API key is in channel history and search. Catch it before the send, not after.Keep customer PII from walking out of your CRMAn agent reading Salesforce or HubSpot pulls emails, phone numbers, and addresses into its context and your chat logs. Mask them on the way out.Give AI agents read-only access to your CRMFor a low-risk CRM pilot, give the agent a one-way mirror: it reads every record and changes none. The read-only policies enforce that, and a query allowlist tightens it further.Guard the CRM writes your revenue depends onYou want agents logging activities and creating records, just not closing deals or reassigning owners on their own. Gate the few writes that matter.
CRM, sales & finance
Systems of record for revenue, billing, contracts and payroll.
SalesforceReusable DTwo policies for Salesforce MCP servers — the Salesforce-hosted sobject- servers that the Claude connector uses (sobject-all, sobject-reads,…
HubSpotReusable DTwo policies for HubSpot MCP servers — the HubSpot-hosted remote MCP server that the Claude connector uses, plus the older @hubspot/mcp-server…
StripeReusable DTwo policies for the Stripe MCP server — the official mcp.stripe.
DocuSignReusable DTwo policies for Docusign MCP servers — the official remote Docusign MCP Server (https://mcp.docusign.Engineering & project management
Issue trackers, code hosting, and planning tools.
JiraReusable DTwo policies for Jira MCP servers — the official Atlassian Rovo MCP server that the Claude connector uses (camelCase tools like getJiraIssue /…ConfluenceReusable DTwo policies for Confluence MCP servers — the official Atlassian Rovo MCP server that the Claude "Atlassian" connector is built on (camelCase tool…
GitHubReusable DTwo policies for the GitHub MCP server — the official github/github-mcp-server remote endpoint (https://api.githubcopilot.
LinearReusable DTwo policies for Linear MCP servers — the official Linear remote MCP server (mcp.linear.Communication & productivity
Messaging, calendars, mail, and office suites.
SlackReusable DTwo policies for Slack MCP servers — the official Slack (Salesforce) remote MCP server that the Claude connector uses, plus compatible community…
GmailReusable DTwo policies for Gmail MCP servers.
Google CalendarReusable DTwo policies for Google Calendar MCP servers — Google's official remote Calendar server (create event/update event/delete event/respond to event…
Google DriveReusable DTwo policies for Google Drive MCP servers (Google's official Drive MCP server, the Anthropic-hosted Claude "Google Drive" connector, and compatible…Storage, docs & search
File storage, knowledge bases, and enterprise search.
AirtableReusable DTwo policies for Airtable MCP servers — the official remote server that the Claude connector fronts (https://mcp.airtable.com/mcp, OAuth 2.
BoxReusable DTwo policies for Box MCP servers — the official hosted Box MCP server at https://mcp.box.
DropboxReusable DTwo policies for Dropbox MCP servers — the official Dropbox remote server (mcp.dropbox.
NotionReusable DTwo policies for Notion MCP servers — principally Notion's hosted MCP server (https://mcp.notion.Data & analytics
Warehouses, lakehouses, and BI tools.
SnowflakeReusable DTwo policies for Snowflake MCP servers — the Snowflake-managed remote MCP server (the GA implementation Anthropic co-announced and the one used as…
BigQueryReusable DTwo policies for Google BigQuery MCP servers — the official Google remote server that the Claude connector uses (https://bigquery.googleapis.
DatabricksReusable DTwo policies for Databricks MCP servers — the official Databricks managed servers that the Claude Databricks connector uses (Genie, Databricks SQL,…
TableauReusable DTwo policies for the official Tableau MCP server (tableau/tableau-mcp, Salesforce), the "Tableau Supported" analytics/BI connector that Claude and…Support & automation
Ticketing, customer messaging, and workflow automation.
ZapierReusable DTwo policies for the Zapier MCP server — the official, hosted aggregator at mcp.zapier.
ServiceNowReusable DTwo policies for ServiceNow MCP servers — the official ServiceNow MCP Server (behind the Claude connector) and the two community servers whose…
IntercomReusable DTwo policies for Intercom MCP servers — the official Intercom remote server (mcp.intercom.Getting started
App-agnostic starters that work the moment you connect anything.
Compliance frameworks
Policies that support alignment with a framework's controls on the MCP path.
SOC 2SOC 2 is not a law and not a data type — it is an attestation framework.HIPAAHIPAA governs how covered entities and their business associates use, disclose, and safeguard protected health information (PHI/ePHI) — the Privacy Rule (45…PCI DSSThe Payment Card Industry Data Security Standard (PCI DSS) v4.0.GDPR / CCPAThe General Data Protection Regulation (Regulation (EU) 2016/679) governs any processing of EU personal data; the California Consumer Privacy Act, as amended…
Use cases
Sensible default postures for a product surface.
CRMA curated bundle of policies for CRM MCP servers.AtlassianA curated bundle of policies for Atlassian MCP servers (JIRA today; Confluence and Bitbucket planned).SlackA curated bundle of policies for Slack MCP servers.IM messagingA curated bundle of policies for instant-messaging MCP servers (Slack today; Microsoft Teams and Discord planned).
Read it as data
Agents can read this catalog the same way people do.