linear
7 Dtwo policies tagged "linear", including Block Linear Webhook Creation, Default-Deny Unknown Linear Tools. Browse by what the control does rather than which app it targets.
Block Linear Webhook CreationUnconditionally denies any Linear tool that creates, updates, or deletes a webhook — linear createWebhook, linear deleteWebhook, and update variants.Default-Deny Unknown Linear ToolsPins an audited allowlist of the verified official Linear MCP tool names and allows a call only when the incoming tool name matches an allowlisted name on…Fence Roadmap and Initiative Reads (Egress)Fences the responses of Linear's roadmap, initiative, and strategy read tools.Freeze Destructive Linear OperationsDenies destructive Linear tool calls — the delete , archive , and session-logout classes — unless the caller's IdP token carries the placeholder group…Linear: Redact Customer Revenue and ContactsMasks commercial and contact identifiers in the responses of Linear's Customers read tools before they reach the agent.Linear: Redact Secrets from Ticket ReadsOld issues are full of pasted credentials: a .env dump in a bug report, a connection string in a comment, a token in a stack trace.Linear: Redact Secrets from Ticket WritesEngineers paste logs, stack traces, and config snippets into issues all the time, and an agent filing a bug from an incident does the same.