dtwo Policy Store

Policies tagged "monday"

monday · ingress

Default-Deny Unknown monday Tools

Maintains a per-tenant allowlist of audited monday tool-name suffixes and denies any call whose tool name does not end with an allowlisted entry.

mondaydefault-deny-unknown-toolsallowlistingresssoc2

monday · ingress

Fence Sensitive monday Boards by IdP Group

monday boards are schemaless business databases: HR/recruiting boards (candidate PII), CRM/deal boards (financial), and IT/security trackers routinely live…

mondayfence-sensitive-scopesingresssoc2gdpr-ccpa

monday · ingress

Freeze Destructive monday Operations

Splits monday's destructive tool surface into two tiers and treats each differently at ingress, before the call ever reaches the monday MCP server:

mondayfreeze-destructive-opsrecord-integrityingresssoc2

monday · ingress

Freeze Standing Automation & AI Agents in monday

Denies the monday tools that install side effects which outlive the governed MCP session. Two classes of tool are blocked:

mondayconstrain-aggregatoringresssoc2

monday · egress

monday: Redact PII in Board & Doc Reads

Two egress controls in one policy, both scoped to the monday MCP read path:

mondayredact-piipiidlpredactionegresssoc2gdpr-ccpa