AI agent governance MCP servers

A server here enforces policy on, approves, audits or restricts what AI agents are allowed to do.

Not here: servers that are merely used by agents.

1,857servers
733 remote1,124 localTagged by Odel's AI, which can make mistakes

Best fit

1,125 made for this, ranked by starsRemoteLocal
  1. Anchord (AnchorID) @nolenation04/anchordRead-only MCP for identity resolution and write guardrails.9% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.
  2. AgentBill @marketinglior-pixel/agentbill-mcpOne spend ceiling per agent job, as MCP tools. Bound to a task_ref you pass, not a calendar month.8% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
  3. Agentwork @ferm-ai/agentwork-mcpOfficial MCP server for Agentwork — delegate tasks to AI agents with human-in-the-loop8% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  4. Javelin Guardrails @abhijitjavelin/javelin-guardrails-mcp-serverAn MCP server that provides Javelin Standalone Guardrails9% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.
  5. Boundary Guard x402 @larrylemonbot/boundary-guard-x402MCP tools for x402 readiness, paid-path probes, launch packs, and trust receipts.9% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  6. Aegis Policy @evozim/aegis-policyGovernance firewall and safety guardrails oracle for AI swarms.24% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.
  7. Averta MCP Gateway @averta/mcp-gatewayGoverned access to enterprise SaaS tools through Averta MCP agents.9% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  8. AgentPays @agentpays/agentpaysPayment infrastructure for AI agents: spending rules, approval flows, single-use virtual cards.10% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
  9. PressureDesk @autonomyforge/pressuredeskRead-only BUY / WAIT / AVOID spend gate for paid APIs, MCP endpoints, and x402 routes.16% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  10. QualeQuest — AI Agent Governance Platform @qualequest/governanceMulti-agent governance: task orchestration, compliance, decision validation, and ML predictions.9% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
  11. Phronesis Hermes @phronesisintel/phronesis-hermesDecision-assurance for AI agents: an auditable action boundary + receipt before it acts.9% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
  12. OnchainDiligence @onchaindiligence/compliancePay-per-call compliance via x402: wallet sanctions, OFAC name, UK + US company verification.6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  13. Neura Relay MCP @neurarelay/relay-mcpGovern proposed Action Cards with Decision Receipts before developer-owned execution.9% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
  14. Agents @obsmetrics/agentsPay-per-call safety guards for AI agents: injection, tool-call, signing, secret, x402-trust.6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  15. Golemry @golemry/golemryCreate and manage scheduled, guarded AI agent jobs with built-in quality control and 900+ connectors8% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
  16. Aribot @ayurak/aribot-mcpThreat modeling, code, API & cloud security, shadow-AI & compliance governance.6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  17. AppGenie Compliance MCP @appgenie/compliance-mcpCited, standards-aware compliance overlay for AI assistants (ISO, NIST, FedRAMP, IRAP), over MCP.8% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.
  18. Gateway @duvera/gatewayGoverned AI actions with signed, verifiable receipts: free keyless reads, human-approved writes.10% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  19. Governance Platform @geodesiclabs/governance-platformPre-execution governance for AI agents. Deterministic PASS/FAIL/REVIEW verdicts, replayable proof.5% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  20. Agentra @agentrapay/agentraIdentity oracle and trust layer for autonomous AI agents. Bidirectional KYA and trust scoring.17% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  21. Agentic Security Shield @ormuzdo/agentic-security-shield12-layer security configs for AI coding agents. Autonomous purchase via x402 (USDC on Base).15% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  22. GIA — Governed Intelligence Architecture @knowledgepa3/gia-mcp-serverRuntime AI governance: decision gates, human approval, hash-chained audit, compliance mapping.11% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
  23. Cyphrex @getcyphrex/cyphrex-mcpBlockchain SSN for AI agents. MCP gateway that blocks at the point of action, tamper evident audit.8% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  24. Attestify Os @attestifyagent/attestify-osGoverned agent execution: x402 payments, budgets, receipts, verification, and audit.9% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.