AI agent governance MCP servers

A server here enforces policy on, approves, audits or restricts what AI agents are allowed to do.

Not here: servers that are merely used by agents.

1,857servers
733 remote1,124 localTagged by Odel's AI, which can make mistakes

Best fit

1,125 made for this, ranked by starsRemoteLocal
  1. pkg-oracle — Dependency Trust Oracle @julian-martin89/pkg-oracleBlocks typosquatted or hallucinated npm/PyPI packages before an AI agent installs them.4% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  2. Tracea @chriscorp/traceaTracea — legal identity (Know Your Agent) for AI agents, on-chain. ERC-8004 compatible.26% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  3. Values Firewall @humanified/values-firewallEU AI Act Art-14 runtime oversight: allow / flag / gate-to-human on an agent action, with receipt.7% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  4. Architect @hirosecure/architectSecurity reviews for coding agents: diffs checked against your org policy and live infrastructure.12% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.
  5. Focxle: AI governance for B2B deals between agents @focxle/afosAI governance for B2B agent deals: negotiate, lock agreements, check payments. Plus x402 USDC.10% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  6. Constitution Lint @agentopskit-dev/constitution-lintStatic linter for CLAUDE.md-style agent constitution files: 10 operational-guardrail checks.4% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  7. AxioRank: Zero-Trust for AI Agents @axiorank/axiorankZero-trust gateway for AI agents: score tool calls, verify agent cards, enforce policy, audit.5% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  8. Bravos AI @bravos-ai/bravosManage your AI chatbot from your AI assistant: analyze conversations, audit content, configure it.9% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
  9. agent4.io @agent4/agent4-tenantBuild and run grounded business agents over MCP: agents, knowledge bases, skills, Storylines.6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  10. SQLGuard — Execution Certificate Firewall @cabbageandtea/sqlguardPermission before writes. Gravity→DENYs→Session $0.25. Pilot $100; Gateway $299. Probe free.29% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  11. Constitution Lint @agentopskit/constitution-lintStatic linter for CLAUDE.md-style agent constitution files: 10 operational-guardrail checks.4% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  12. PolicyLayer @policylayer/policylayerThe system of record for AI agent authority: playbooks, routed policy questions, reusable rules.7% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.
  13. MandateShield AI Payment Evidence @mandateshield/payment-authorityAnalyzes delegated AI payment authority and exposes supported Stripe/x402 evidence contracts.8% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  14. sipi.bot — Spend Firewall for AI Agents @kindrat86/sipi-bot-spend-firewallPre-spend firewall for AI agents. Approves, blocks, flags transactions against policy rules.4% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  15. ChangeBook MCP @raulbr90/changebookYour agent already broke this three times. ChangeBook tells it before the fourth.11% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
  16. sygnldata — market intelligence for trading agents @sygnliq/sygnldataMarket regime, execution-cost, bar-QC and backtest-audit tools for agents. Pay per call via x402.7% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  17. Sunaiva Gate — Agent Rule Enforcement @sunaivacore/gateMCP enforcement layer that intercepts AI agent actions and blocks rule violations before execution.6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  18. The MCP Census @mcpcensus/censusVet any MCP server before you depend on it. Stamp: PASS, REVIEW, or BLOCK.5% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  19. Glyt @glyt/glytHuman-in-the-loop approval for agent actions, with verifiable action-bound receipts.5% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  20. ActionGate @actiongate/actiongatePre-execution safety layer for autonomous agent wallets via MCP and x402.9% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  21. Weavz @weavz/weavzGoverned app access for AI agents: 1,000+ apps & 12,000+ tools via Code Mode MCP.13% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
  22. MCP Verify @sentinelsignal/verifyTrust, freshness, policy, and discovery layer for public MCP servers.6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  23. Heron @heronapp/heronSigned security scores for what an AI agent runs and reads: skills, MCP servers, prompts, tokens.10% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  24. InsureLink @skewing1/insurelinkAI agent-to-agent SLA agreements on Base with insurance, reputation, and x402 payments.6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.