AI agent governance MCP servers

A server here enforces policy on, approves, audits or restricts what AI agents are allowed to do.

Not here: servers that are merely used by agents.

1,891servers
748 remote1,143 localTagged by Odel's AI, which can make mistakes

Best fit

1,145 made for this, ranked by starsRemoteLocal
  1. Vigil — an outside witness for AI agents @vigilnotary/vigilAgent leases, signed receipts, watchdogs, and optional paid source-verification evidence.7% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  2. Hunter-Seeker @hunter-seeker-io/hunter-seekerThe decision layer for AI agents: act, escalate or refuse, and every decision comes back signed.11% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
  3. 402Signal @402signalhq/402signalCheck paid API offers before your agent spends. Qualifying routes: $0.003 USDC. Normal misses: free.9% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  4. Traced Claude Format Guard @getvda/traced-claude-format-guardTraced Claude Format Guard13% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  5. Vizier @vassiliylakhonin/vizierDeterministic authorization for one proposed AI agent action, returned with a signed receipt.4% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  6. My Fordyce @fordycecg/my-fordyceThe backlog that hands out the work: multi-agent task coordination — leases, claims, gates.9% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
  7. Preflight SafeSwap @mr8-gif/preflight-safe-swapSafe Solana swaps for AI agents with risk checks, unsigned transactions, x402, and 3-bp fees.6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  8. HumanMirror One @humanmirror/oneAgent routing, safety preflight, execution receipts, best execution and verified outcomes.13% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  9. Toreva Goals @toreva/goalsDurable, user-controlled goals and governed plans for AI agents.7% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
  10. BrandPresence @nuteee/brandpresenceOrganization-scoped BrandPresence evidence and explicitly authorized product actions over MCP.10% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
  11. Kit Lite @randall-75d/kit-liteInstant x402 spend-cap pack for agents. get_quote then buy_intel_pack 5 USDC Base. No human.41% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  12. Agent Reserve Protocol Authorization Firewall @chatgpt/agent-transaction-firewallAdvisory policy preflight for AI-agent spend requests; never executes payments or accesses wallets.8% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  13. Ava @getava/avaCoding agents run multi-leg cross-chain DeFi. Legs re-derived from your sentence before signing.12% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  14. vrsai @vrsai/mcpMachine-native capabilities with explicit contracts and machine-readable commerce.4% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  15. AegisAI @kadopi/aegis-aiPaid pre-execution risk verification for AI agents over MCP and x402.7% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  16. Weft @letsweft/weftOne board for every AI you use: agents claim tasks and finish with proof you accept or return.7% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
  17. Cofferline @cofferline/treasuryTreasury and risk controls for agent wallets: policies, quotes, prediction-market orders.6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  18. OneDroid Synapse @onedroid/synapseGoverned MCP gateway: one endpoint for your tools, with credential custody and audit log.10% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
  19. StructureClerk @structureclerk/mcpAI agent policy decisions: ALLOW, DENY, APPROVE, ESCALATE. 192 jurisdictions, signed evidence.4% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  20. InfraPulse @infrapulse/infrapulseAI agent infrastructure for discovery, authorization, execution, identity, and signed receipts.9% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  21. Execute ai-right-to-opt-out-gate-mcp @evozim/ai-right-to-opt-out-gate-mcpPremium agentic endpoint for ai-right-to-opt-out-gate-mcp.20% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.
  22. Penholder @penholder/penholderPreventive human-approval write-gate for AI agents: writes commit only after a human approves.5% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.
  23. Fullmakt @fullmakt/fullmaktCredential broker for AI agents: scoped, revocable API access with policy enforcement and audit.11% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
  24. Elicitly Pro @elicitly/proHuman-in-the-loop for AI agents over MCP: durable approvals with a hosted review page & audit trail7% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.