- Agent Spend Guard — owner-set purchasing guardrails @a2awire/agent-spend-guardFree spend guardrails for AI agents: approve/deny/ask_user, caps, dupes.8% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Plith @plith/plithAI agent infrastructure: dedup, cost prediction, validation, governance, failure intelligence.5% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- BoundaryAI @boundaryai/boundaryaiDeterministic runtime safety for AI agents: scan PII, gate tool actions, verify LLM output.14% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.
- Agent Embassy @aemb/agent-embassyAgents pay for work and prove what happened.10% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Varyntiq @mercadosclaro-eng/payguardPre-payment checks for AI agents: x402 quotes, untrusted prompts and audit receipts.12% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.
- Agent Purchase Verification @rfrost19/agent-purchase-verificationCheck if an ecommerce purchase meets buyer rules before payment. Returns PASS, FAIL, or REVIEW.6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Focxle (retired listing): see com.focxle/b2b-agent-negotiation-governance @focxle/agent-payments-virtual-cardsRetired: Focxle no longer issues cards. Use com.focxle/b2b-agent-negotiation-governance.13% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Agent Preflight @agent-preflight/agent-preflightBudgeted agent preflight: allow|block|reuse|defer|advise. Never executes destination tools. Free MCP5% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- FOXIFY Agent Authority + Payment Preflight @speeedy10/foxify-x402-agent-commerce-payment-preflightx402 agent preflight: exact action authority plus payment mandate, destination, expiry and replay.8% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Elaichi @elaichi/mcpGoverned AI agents for the software your company already runs. 400+ connectors, one endpoint.11% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
- Burs-IA @soyeladice-svg/bursiaBurs-IA public MCP entry point for capability discovery, bounded routing and interoperability.6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- EGA V9 MCP @paibyun9/ega-v9-mcpMCP access path for EGA V9 execution governance9% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
- agentleFS @agentlefs/agentlefsAgent permissions for the files your team shares7% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
- X-EGO @x-ego/x-egoHuman approval for irreversible AI agent actions, bound to the exact tool call by a passkey tap26% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Decision Integrity @wheelerhubbell/decision-integrityPaid x402 evaluator for evidence, warrant, provenance, and represented action authority.11% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- SALT19 Agent Utility Grid @gabrielallit1/salt19-agent-utility-gridMCP/x402 tools with bounded decisions, adaptive pricing, and Proof402 machine-commerce receipts.9% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- ARBITER @grip/arbiterDecision arbitration, action routing, workflow control, deployment remediation, persistent memory.10% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- PHION Agent Trust Infrastructure @phion/evidence-engine123 agent services with free discovery, intent, x402 terms and signed verification.8% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Autonomous Agents Network (AANet) @aanet/aanet-mcpMulti-agent coordination outside your LLM context: dedupe parallel work, per-agent budgets, handoff6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- ActionDock @actiondock/actiondockSupervised API-write gateway for AI agents with policy, human approval and execution receipts.5% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Spendline @spendline/spendlineEnforce AI budgets before the model call and track cost per customer across 10 providers.4% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- FLOCORE Governed MCP @flocore/flocoreGoverned MCP front door to FLOCORE; write calls need human approval and signed receipts.5% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- S+S Agentic @shortandsweet/doorsDoors for AI agents: witness, letter, poison check, ghost check, wall. No account, no payment.8% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Cromanion @cromanion/cromanionRaise conversion on a site you manage. No API key, no human to wake — you prove the domain.15% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
