Plugin from outside the official directory

Last updated Oct 17, 2026 Preview Policies Access & Sharing

AI summary

Claude plugins from outside the official Anthropic directory are not curated or reviewed. This policy identifies such plugins in use, helping you determine which ones your organization should allow.

Severity: Medium Security Recommended Preview

What it detects

Detects plugins in use whose identity does not point at the official Anthropic plugin directory, from the Claude Console analytics of the Enterprise plan.

Why it matters

A plugin bundles commands, agents and skills that change how Claude behaves, and it runs with the access of the person who installed it. Plugins from the official Anthropic directory are curated; everything else was brought in from another marketplace or from a local checkout, and its content is neither reviewed nor pinned. This policy lists the plugins in use whose identity does not point at the official directory, including those whose identity Anthropic does not report at all, so the organization can decide which ones it wants to keep. The combined third-party bucket is excluded here - the unidentified plugin activity policy covers it.

The rule

Every Claude Plugin Usage where From Official Directory is false and Unidentified Activity is false

In Rencore Governance

Details

Applies to	Claude plugin usage
Connector	Claude Enterprise
Severity	Medium
Category	Security
Recommended	Yes
Recommended automation	None
License type	Standard

Other policies that check Claude plugin usage objects:

Unidentified plugin activity (Medium)

Frequently asked questions

What does the plugin from outside the official directory policy detect?

The Plugin from outside the official directory policy detects plugins in use whose identity does not point at the official Anthropic plugin directory, from the Claude Console analytics of the Enterprise plan.

Which objects does the plugin from outside the official directory policy check?

The Plugin from outside the official directory policy checks Claude plugin usage objects from the Claude Enterprise inventory and reports each one that matches its rule as a violation.

How severe is a violation of the plugin from outside the official directory policy?

Violations of the Plugin from outside the official directory policy have Medium severity. The policy is in the Security category.

Which module includes the plugin from outside the official directory policy?

The Plugin from outside the official directory policy comes with the Claude Enterprise connector (in preview) in the AI & Agents module of Rencore Governance, an add-on module on the Premium and Enterprise Plans.

Was this page helpful?