AI agent governance MCP servers

A server here enforces policy on, approves, audits or restricts what AI agents are allowed to do.

Not here: servers that are merely used by agents.

1,886servers
747 remote1,139 localTagged by Odel's AI, which can make mistakes

Best fit

1,147 made for this, ranked by starsRemoteLocal
  1. MCP Output Firewall @tangfei7777-cell/mcp-output-firewallThree-layer firewall for MCP: content, egress and action policy. Proxy or server.9% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
  2. Deadlatch @diabloluo/deadlatchLocal advisory pre-trade risk gate for agents. Never places orders.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
  3. Project Memory @dankaro-projects/project-memoryLocal decisions, evidence, outcomes and reviewed lessons with bounded retrieval and an HTML viewer.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
  4. Proctor @louissarvin/proctorHuman oversight for AI agents: block a tool call on a verified human, with on-chain proof.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
  5. WPGuard MCP @cgallic/wpguard-mcpWordPress edit previews, scoped correction checks, and change records for trusted operators.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.
  6. ReadyAgents @readyagentsdev/readyagentsLocal YAML/JSON agent workflow CLI with approvals, resume, and optional stdio or loopback MCP HTTP.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
  7. Agent Interop Runtime @praket7/agent-interop-runtimeLocal MCP runtime for coordinating Freebuff, Codex, OpenCode, Claude Code, and Cursor agents.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
  8. sudo-proxy @tarides/sudo-proxyPrivileged command execution proxy with human approval via pkexec or sudo9% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from cargo.
  9. agentguard @agentwares/agentguardMCP policy proxy: spend caps, approvals for destructive tools, kill switch, dry-run, audit log.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
  10. Lauther @csanadymiklos/lautherPuts Approve/Deny on your phone before an agent acts, and waits for your fingerprint.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
  11. WARDEN — MCP Security Firewall @alexar76/wardenMCP security firewall: stdio wrap proxy or inspection tools; zero runtime dependencies.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
  12. GaugeMesh @aliengineering-byte/gaugemeshRoute MCP capabilities through deterministic identity, policy, budget, and deadline constraints.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.
  13. Raposa Aval — human approval @raposa/raposa-mcpHuman approval for AI agents: a named person approves or rejects, silence is not consent.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
  14. Living Stack Community @equinoxaifinance-rgb/living-stackFree seven-tool proof loop for scoped authorization, outcome receipts, and evidence-bound claims.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from MCPB.
  15. Phosphor @kirusshenkin/phosphorHosts, metrics, Docker and authorized_keys over a macOS terminal's live SSH connections7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from MCPB.
  16. BALMAS @balmasai/balmas-mcpAgents read cleaned copies of your files: PII replaced with local consistent tokens. Read-only.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
  17. Delentia Sovereign AI Operating System @delentia-labs/delentia-mcpStop rogue AI-agent tool calls before they run: deterministic policy gate + audit digest.11% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
  18. Delta Witness @15998194110/delta-witnessPaid Capture and Guard tools for public-source observations before autonomous actions.13% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
  19. Tollary Agent Transaction Guard @p-e/agent-transaction-guardLocal fit-check and safe integration guidance for non-custodial Base USDC agent transactions.9% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
  20. Memory Pulse @t-crew/memory-pulseGive any agent self-improving memory you can trust in production. Built-in memory security.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
  21. Skill Sec @sudo-ai-git/mcp-skill-secAudit agent skills/prompts against 8 supply-chain attack patterns. Deterministic, no-LLM scanner.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
  22. Verify Claim @sudo-ai-git/mcp-verify-claimForce evidence-gated, tiered claim reporting (FACT/INFERENCE/SPECULATION). No-LLM.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
  23. Agent Residue Evidence @fantasyce/agent-residue-evidenceReport local task-scoped test and build residue without cleaning resources.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from MCPB.
  24. pgops @arzharch/pgops-mcpSafe, audited PostgreSQL operations for AI agents: queries, migrations, EXPLAIN, containers3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.