- Quesen Deterministic Agent Decision Layer @shxnque/quesenDeterministic decision layer for autonomous agents: reproducible PROCEED/REVIEW/SKIP verdicts.10% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.2 GitHub stars.
- IntentFence Agent Action Firewall @razel369/intentfenceFail-closed action authorization, MCP risk scanning, x402 checks, and signed receipts.10% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.2 GitHub stars.
- OrgX MCP — Organizational Continuity for AI Agents @useorgx/orgx-mcpMake AI work resumable, reviewable, and provable across agents.8% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.2 GitHub stars.
- Registry @policylayer/registryThe MCP server that vets MCP servers: identity, risk grade and per-tool risk before you install.4% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.2 GitHub stars.
- Onyx @dimitrilaouanis-tech/onyx-mcpEd25519-signed ground-truth oracle — 63 paid x402 tools live on Base mainnet.9% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.2 GitHub stars.
- AgentPay @rumblingb/agentpayAgent payments, API key vaulting, and governed mandates. Agents spend within user-defined limits.8% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.2 GitHub stars.
- Agent Module @agent-module/mcpDeterministic compliance and vertical knowledge bases for autonomous agents. Free 24hr trial.9% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.2 GitHub stars.
- Multimail MCP @multimail/mcp-serverGive your agent its own email address with graduated human oversight, from approval to autonomy.6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.2 GitHub stars.
- AgentStack (agentstack.tech) @agentstacktech/agentstackBackend for AI agents: one batched tool over ~668 actions (hosting, storage, auth, payments).5% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.1 GitHub stars.
- cQnce MCP @cqnce-app/cqnce-mcpAdd human approval to AI agent workflows through cQnce authorization tools.7% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.1 GitHub stars.
- Zero Core Budget @meltingpixelsai/zero-core-budgetAgent spending mgmt, budget tracking, ROI. Zero Core Budget.5% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.1 GitHub stars.
- presign-guard @fizzl13/presign-guardSafe to sign? EVM, Solana, XRPL, Algorand txs, permits, tokens; OFAC wallet screen: green/orange/red5% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.1 GitHub stars.
- Flowra @flowradev/mcpMCP server for your apps' tools and custom tools, plus hosted AI agents and approval-gated workflows8% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.1 GitHub stars.
- FreeRDC @danielarif26/freerdcSafe folder access for ChatGPT and Claude: read, write and search files, risky tools opt-in.15% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.1 GitHub stars.
- MONARK @monarkgate/monarkCommit / defer / abstain over a conformal coverage region - not a probability of being right.9% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.1 GitHub stars.
- InterAI Risk Oracle @interailabs/ai-risk-oraclePre-execution policy gate for consequential agent actions with durable trust receipts.6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.1 GitHub stars.
- SealGate MCP Gateway @sealgate/gatewayMCP gateway with runtime security policy, tool-call-level control, and audit of agent actions.10% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.1 GitHub stars.
- 404.directory @mm-sheng/404-directoryRisk preflight for AI Agent tool actions and Polymarket settlement and execution checks.7% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.1 GitHub stars.
- Policy Gate @3labsio/policy-gateDeterministic allow/require_approval/deny verdicts for agent actions, before they happen.8% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.1 GitHub stars.
- DCL Trust Oracle — AI/LLM Output Audit (x402 MCP) @fronesislabs/dcl-trust-oracleAI/LLM agent output audit MCP: policy eval, tamper-evident chain, AI safety, x402 USDC on Base.12% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.1 GitHub stars.
- Verificate MCP @verificate/mcpAgentic code review, no signup to try: reality gates + frontier-model review, with veto.8% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.1 GitHub stars.
- BandSaaS @jyswee/bandsaasLicense your music to AI on your terms, and run your whole artist business. 46 tools, keyless.6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.1 GitHub stars.
- Agent^Rider @ceedot-rock/agent-riderSigned agent identity, trust scoring, credit economy, and social layer for AI agents.9% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.1 GitHub stars.
- Decide Policy Notaries @decidefyi/policy-notariesFail-closed refund, cancellation, return, and trial checks for 100 US subscription vendors.3% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.1 GitHub stars.
