- PreClick — An MCP-native URL preflight scanning service for autonomous agents. @preclick/preclick-mcpPreClick scans links for threats and confirms intent match with high accuracy before agents click.6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.6 GitHub stars.
- Norma by Quality Clouds @qualityclouds/normaChecks AI-written code against your rules as it is written, and keeps a record of what it found.6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.5 GitHub stars.
- Builderforce @seanhogg/builderforceRun tickets, boards, OKRs and cloud coding agents in your Builderforce workspace8% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.5 GitHub stars.
- Impri @sekera-radim/impriImpri MCP server — human-in-the-loop approval inbox for AI agents4% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.5 GitHub stars.
- Nucleus @eidetic-works/nucleusSovereign Agent OS — Persistent Memory, Governance & Compliance for AI Agents.10% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.5 GitHub stars.
- Lassare @lassare/askHuman-in-the-loop for AI coding agents — ask questions, get approvals via Slack.10% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.5 GitHub stars.
- Agent Passport System — Cryptographic Identity for AI Agents @agent-passport-system/agent-passport-mcpCryptographic identity, delegation, governance, and commerce for AI agents. 152 tools.10% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.4 GitHub stars.
- AgentPay — trust routing + spend caps for x402 agents @romudille-bit/agentpayBuyer-side trust oracle + capped sessions for x402 agents: verified_route, receipts, 17 free tools.7% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.4 GitHub stars.
- Agent Passport System — Cryptographic Identity for AI Agents @aeoess/agent-passport-mcpCryptographic identity, delegation, governance, and commerce for AI agents. 152 tools.11% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.4 GitHub stars.
- AgentSQL @cuipengdba/agentsqlGuard AI agents' PostgreSQL/MySQL access via MCP: SQL audit, auth, masking, write approval5% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.3 GitHub stars.
- Vibes-Coded Agent Security and Commerce Tools @doteyeso-ops/mcp-server-vibes-codedAgent supply-chain security, scanner consensus, x402 reliability, and commerce MCP tools.9% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.3 GitHub stars.
- DJZS Trust MCP @djzs/trust-mcpDeterministic pre-execution audit for trading agents. PASS/WAIT/FAIL, reproducible verdict_hash.8% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.3 GitHub stars.
- Sanction @ericlovold/sanctionApproval and budget checks before agent spending or tool use. Cooperative MCP; host must ask.6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.3 GitHub stars.
- NOMOS Cross-Border Broker @agentnomos/nomos-crossborder-brokerCross-border preflight, x402 quote and evidence receipts for A2A/MCP agent workflows.7% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.3 GitHub stars.
- ThinkNEO Control Plane @thinkneo/control-planeEnterprise AI Control Plane: governance, guardrails, spend tracking, compliance & smart routing.6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.3 GitHub stars.
- Arroway @oaleviola/arrowayArroway orchestrates people and AI agents around the decisions in force.Not assessed yet.A remote server; you sign in with your account.2 GitHub stars.
- MCP Verification Gate: check an MCP server or an A2A agent before you connect or delegate @ogasurfproject-jpg/hs-verify-gateCheck an A2A agent before you delegate, or an MCP server's measured conduct. Free, no key.6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.2 GitHub stars.
- Aziel Runtime @azieleliab/aziel-runtimeGoverned MCP: agent audit, provenance, deterministic checks, and receipt-backed FragGate execution.12% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.2 GitHub stars.
- Panel Review @truverif/panel-reviewGuardian agent for AI coding: four frontier models review risky diffs and commits before they ship.14% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.2 GitHub stars.
- OpenCode MCP Bridge @manuotel/opencode-mcp-bridgeCoordinate and verify OpenCode workers over MCP Streamable HTTP.8% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.2 GitHub stars.
- EthersFlow — Trust Gate for AI Agents @ethersflow/ethersflowTrust gate for AI agents: multi-model adversarial consensus, signed and verifiable verdicts.8% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.2 GitHub stars.
- WhitePact @guruprasath-annadurai/whitepactAI governance MCP server: trust scoring, guardrails, bias/hallucination detection, compliance.10% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.2 GitHub stars.
- Cernion Energy Tools MCP @cernion/cernion-energy-toolsEnergy-domain MCP tools for Cernion context, evidence and guarded process preparation7% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.2 GitHub stars.
- Hermes Plant — Agent Commerce Assurance @jessegdotio/hermes-plantPreflight, approve, and prove consequential agent actions with signed evidence and x402 tools.7% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.2 GitHub stars.
