AI agent governance MCP servers

A server here enforces policy on, approves, audits or restricts what AI agents are allowed to do.

Not here: servers that are merely used by agents.

1,886servers
747 remote1,139 localTagged by Odel's AI, which can make mistakes

Best fit

1,147 made for this, ranked by starsRemoteLocal
  1. Agent Embassy @tacticalnoot/agent-embassyAgents pay for work and prove it. Verified checks $0.15, recovery $1.00. USDC on Base via x402.10% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  2. ComOS Federation @ronrey/federationMulti-tenant MCP gateway for AI commerce. One connection, every store.10% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  3. FortFi Treasury MCP @rebelartists/fortfi-treasury-mcpPolicy-gated MCP treasury for AI agents — x402 subscribe, 50+ tools, multi-chain.12% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.
  4. BrainstormRouter MCP Server @justinjilg/brainstormrouterAI routing, memory, guardrails, and governance. Routes across Claude, GPT, Gemini.10% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.
  5. STACK @getstack-run/stackCommand your AI agents: verifiable passports, credential injection, full audit, revoke in 60s.44% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
  6. Dobby @gil-dobby/dobbyConnect, monitor, and control AI agents — tasks, approvals, schedules, and governance.10% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
  7. Creator Desk Agent Supervisor @creatordeskai-prog/creator-desk-agent-supervisorAgent completion verification with defects, corrections, and evidence receipts.6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  8. aaaa-nexus — Formally Verified AI Safety APIs @atomadictech/aaaa-nexusFormally verified AI safety APIs. Pay-per-call via USDC (x402). 75+ endpoints, no signup.20% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  9. EP AgentIAM @achilliesbot/ep-agentiamAI agent execution safety via x402 micropayments: risk scoring, integrity, memory checks10% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  10. AiEGIS @velogerber/aiegisAI agent security and governance. Register, verify, scan, and monitor agents.9% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  11. StackFast FractWin Expert Brain @trupe-rs/expert-brainExpert knowledge base for sales, negotiation, strategy, operations, and risk.12% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  12. A2A Trust Plane @the-825/a2a-trust-planeTenant-scoped control layer for agent-to-agent systems: governed routing, approvals, evidence.12% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
  13. Agentlock @olum289/agentlockSecurity gateway for AI agents: policy, approval, and audited execution, no secrets shared.11% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  14. Warden @larshiensch99/wardenRegister every AI agent, log every action, prove it. EU AI Act compliance built in.15% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.
  15. Autonomy Foundry Governance @diegomul/autonomy-foundry-governanceGovernance and agentic-commerce policy tools for AI agents: spend, purchase and charter controls.7% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  16. VaultCrux Memory Core @cuecrux/vaultcrux-memory-coreVaultCrux Memory Core — 32 tools: knowledge, decisions, constraints, signals, coverage11% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  17. Neon Zero-Trust MCP Gateway @ansarii/zero-trust-mcp-gatewayAI security firewall & DLP proxy protecting API keys and blocking destructive commands.17% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  18. AgentKYB @andy229651/agentkybFree local payment guard for AI agents plus paid deep vendor KYB via x402.8% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  19. Pokes @pokes/pokesPoke your human for approvals and decisions during agent sessions — answered with one phone tap.9% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.
  20. Vertical Flows @verticalflows/agent-gatewayView client requests, prepare actions and approve work within your firm's permissions.9% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
  21. Talk Arc Team Workspace @talkarcllc/app036-teamSee your team's status, delegate work, follow progress, and approve requests from your AI client.7% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  22. Do Not Act @donotact/donotactFail-closed guard clause for prediction-market agents before trade().9% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  23. Smolabot @arison8/smolabotDeterministic decision guardrail for AI agents and bots. Verifies pre-trade economics (long-only).5% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  24. AI Design Blueprint @aidesignblueprint/blueprintDoctrine and validators for governable agentic AI products.5% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.