Available batteries

Each battery contains policy for one service: its MCP servers or another set of tools.

Choose a battery to see what it covers and how to use it. You can also add one for your own server.

Slack→Rules for 19 Slack tools, with audiences from Slack channels, users, and groups; Slack Connect conversations are untrusted.Claude Code tools→Rules for Read, Grep, Write, Edit and Bash, with model annotators for Bash and a secret-masking sanitizer.GitHub→Rules for 44 repository, issue, pull request, and user tools; each repository's visibility decides its readers.Linear→Rules for 65 tools with per-issue, per-team, and per-project audiences, and reviewed writes.Grain→Rules for 49 meeting, transcript, deal, and admin tools.Google Workspace→Rules for 11 Google Drive tools and reviewed sharing, with audiences from your Workspace directory and groups.Archestra→Checks shares of projects, apps, knowledge, plugins, and agents against their teams and members.Sentry→Rules for 9 listed and 55 catalog tools, internal reads, and reviewed writes.monday.com→Rules for 99 tools: internal reads, reviewed writes, and structural, workflow and agent changes.Notion→Rules for 36 tools; reads are internal because Notion exposes no page permissions.Microsoft Learn→Public documentation search and page fetches with untrusted result labeling.Cloudflare→Read-only rules for the documentation and Workers Observability servers: public docs, internal logs and Workers.LaunchDarkly→Rules for 20 flag, environment, AI Config, and audit tools; every write is reviewed.PostHog→Rules for 44 analytics, flag, experiment, and survey tools; internal reads and reviewed writes.PagerDuty→Rules for 18 incident, schedule, team, and status page tools; internal reads and every write reviewed.Hugging Face→Rules for 11 account, search, repository, Space, job, and sandbox tools; each repository's Hub visibility decides its readers.Databricks→Rules for the Genie One and Databricks SQL managed servers; internal reads, every SQL statement classified before it runs.xmemory→Rules for 32 instance and admin tools; internal reads, writes from trusted input only, reviewed schema migrations and deletions.+Add your own