Policy

Set default Guard reactions to tool changes so your team doesn't have to review every event manually.

Free planAsk mode

Default

Warn

Updates

Ask again

Tool launches

Block

Sync

Off

Settings

Choose what should happen by default

Keep this simple: decide how updates, risky actions, and everyday prompts should behave.

Protection levelIf a tool opens another toolIf a tool updates after approval

Create a shared policy pack to distribute agent defaults, allowed publishers, and blocked tools across your workspace.

Team policy pack

Distribute publishers, blocked tools, and agent defaults across your entire team.

Pack name

Codex defaultCursor defaultClaude Code default

Allowed publishersBlocked publishersBlocked domainsAlways block

Team alert channel

Current rules

If the publisher is unknown

Review

If a new network address appears

Warn

Telemetry

Disabled