# Rules for Dropbox MCP server, from riskmandate.ai

<!-- 3 rules: RM-R0022 v1.0.0, RM-R0023 v1.0.0, RM-R0024 v1.0.0. Source: https://riskmandate.ai/rules/ -->
<!-- Each line is a request to the agent, not a control: in the behaviour-policy vocabulary, an expectation. -->
<!-- The stronger setting or boundary for each rule, where one exists, is on its page. -->

- Never delete, move or overwrite files in my cloud storage without listing them and waiting for a yes. (RM-R0022)
- Never create a public or anyone-with-the-link share, or share anything outside the people I name, unless I ask for that specific share. (RM-R0023)
- Do not edit, rename or move shared documents; suggest changes in a comment or a copy unless I ask you to edit that document. (RM-R0024)