- pkg-oracle — Dependency Trust Oracle @julian-martin89/pkg-oracleBlocks typosquatted or hallucinated npm/PyPI packages before an AI agent installs them.4% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Tracea @chriscorp/traceaTracea — legal identity (Know Your Agent) for AI agents, on-chain. ERC-8004 compatible.26% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Values Firewall @humanified/values-firewallEU AI Act Art-14 runtime oversight: allow / flag / gate-to-human on an agent action, with receipt.7% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Architect @hirosecure/architectSecurity reviews for coding agents: diffs checked against your org policy and live infrastructure.12% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.
- Focxle: AI governance for B2B deals between agents @focxle/afosAI governance for B2B agent deals: negotiate, lock agreements, check payments. Plus x402 USDC.10% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Constitution Lint @agentopskit-dev/constitution-lintStatic linter for CLAUDE.md-style agent constitution files: 10 operational-guardrail checks.4% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- AxioRank: Zero-Trust for AI Agents @axiorank/axiorankZero-trust gateway for AI agents: score tool calls, verify agent cards, enforce policy, audit.5% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Bravos AI @bravos-ai/bravosManage your AI chatbot from your AI assistant: analyze conversations, audit content, configure it.9% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
- agent4.io @agent4/agent4-tenantBuild and run grounded business agents over MCP: agents, knowledge bases, skills, Storylines.6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- SQLGuard — Execution Certificate Firewall @cabbageandtea/sqlguardPermission before writes. Gravity→DENYs→Session $0.25. Pilot $100; Gateway $299. Probe free.29% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Constitution Lint @agentopskit/constitution-lintStatic linter for CLAUDE.md-style agent constitution files: 10 operational-guardrail checks.4% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- PolicyLayer @policylayer/policylayerThe system of record for AI agent authority: playbooks, routed policy questions, reusable rules.7% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.
- MandateShield AI Payment Evidence @mandateshield/payment-authorityAnalyzes delegated AI payment authority and exposes supported Stripe/x402 evidence contracts.8% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- sipi.bot — Spend Firewall for AI Agents @kindrat86/sipi-bot-spend-firewallPre-spend firewall for AI agents. Approves, blocks, flags transactions against policy rules.4% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- ChangeBook MCP @raulbr90/changebookYour agent already broke this three times. ChangeBook tells it before the fourth.11% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
- sygnldata — market intelligence for trading agents @sygnliq/sygnldataMarket regime, execution-cost, bar-QC and backtest-audit tools for agents. Pay per call via x402.7% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Sunaiva Gate — Agent Rule Enforcement @sunaivacore/gateMCP enforcement layer that intercepts AI agent actions and blocks rule violations before execution.6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- The MCP Census @mcpcensus/censusVet any MCP server before you depend on it. Stamp: PASS, REVIEW, or BLOCK.5% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Glyt @glyt/glytHuman-in-the-loop approval for agent actions, with verifiable action-bound receipts.5% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- ActionGate @actiongate/actiongatePre-execution safety layer for autonomous agent wallets via MCP and x402.9% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Weavz @weavz/weavzGoverned app access for AI agents: 1,000+ apps & 12,000+ tools via Code Mode MCP.13% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
- MCP Verify @sentinelsignal/verifyTrust, freshness, policy, and discovery layer for public MCP servers.6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Heron @heronapp/heronSigned security scores for what an AI agent runs and reads: skills, MCP servers, prompts, tokens.10% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- InsureLink @skewing1/insurelinkAI agent-to-agent SLA agreements on Base with insurance, reputation, and x402 payments.6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.