AI agent governance MCP servers

A server here enforces policy on, approves, audits or restricts what AI agents are allowed to do.

Not here: servers that are merely used by agents.

1,886servers
747 remote1,139 localTagged by Odel's AI, which can make mistakes

Best fit

1,147 made for this, ranked by starsRemoteLocal
  1. Desk by Ouroboros Apps @lahutchins91/deskCustomer support answers, refund rules, and escalation limits for AI assistants5% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  2. Scope by Ouroboros Apps @lahutchins91/scopeFreelance scope of work, rates, deadlines, and change orders for AI assistants5% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  3. Proving Ground @railway/proving-groundAccounts-payable exception environment with a pass/fail verifier and proof packet: AI agents work AP9% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.
  4. Remit language tools @mrpacstar2-oss/remitChecked language for AI-written agent workflows: limits, cost and data flows known before running.Not assessed yet.A remote server; no sign-in.
  5. ExactGround @alidaram99/exactgroundCheck npm/PyPI packages exist and that a function or method exists in an exact package version.7% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.
  6. Prior @bret1976/priorSpend gate agents call before money moves. Buy with Stripe Checkout. Paid only when Stripe says so.11% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  7. Lumière PayCheck @book0feli/paycheckCheck any x402 endpoint before your AI agent pays it: trust grade, verdict, and hijack checks.5% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  8. Pink Agentic AI Payments (sandbox) @pinkwallet/agentic-payments-sandboxApproval layer for AI agent payments: budgets, rules, human approval. Sandbox, test credentials.6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
  9. Lawang Onboard @gablooge/lawang-onboardPermission-aware onboarding MCP server: answers about a codebase, filtered by the caller's role.5% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.
  10. MarketNow @alicelabs-llc/marketnowVerify agent credentials, 9 formats, scam domains; search 70k+ MCP servers with auth-gate state.11% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  11. TWZRD Agent Intelligence @twzrd/twzrd-agent-intelPre-spend trust for AI agents that buy: check x402 services and product listings before paying.16% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  12. Agent Covenant @jdhart81/agent-covenantDeny-by-default authority leases for agents wielding real power.6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  13. Agent Hive Orchestrator @jdhart81/agent-hive-orchestratorDeterministic nested hive-mind orchestration over the A2A rails: hire N solvers, adversarial cross-r8% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  14. agentguard — policy proxy for agent tool calls @agentwares/agentguard-cloudFree spend report from an agent log, no key. Hosted proxies: caps, audit export, buy calls.8% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  15. Solana Pulse: agent safety layer @timothymycompc/solana-pulse-gatewayStops AI agents losing money on Solana: pre-sign checks, intent matching, token verdicts. x402 USDC.8% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  16. AGTS MCP Server @obligationsign-io/agts-mcpSovereign MCP Gateway — 64 governed tools with Merkle transparency log. EU AI Act and SOC 2 ready.11% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  17. X402 Payment Safety @agenttanuki/x402-payment-safetyAuthorize x402 payments before signing with request-bound, signed safety decisions.9% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  18. Perception @geiant/mcp-perceptionGeospatial AI MCP server — satellite imagery, embeddings, weather, GNS governance8% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  19. Acp @agenticcontrolplane/acp-mcp-serverSee, price, and control every tool call your AI agents make: policy checks, cost, and audit tools.7% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
  20. crosscheck @crosscheckapi/crosscheckChecks for AI agents over x402: review drafts, accept-check handoffs, scan skills before install.6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  21. Spelunking.ai @spelunking/hubStructure for hard AI decisions, and a human to escalate to when the structure runs out.7% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  22. Overwing @overwing/mcpGuardrails for LLM output: pass / fail / review verdicts and one recommended action. Hosted or npm.4% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  23. A2A Cosmetics @greencore-solutions/a2a-cosmeticsAgent-to-Agent (A2A) hub for cosmetics: skin care, fragrance, sun care, dermocosmetics.6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  24. Veyra @zapxlabs/veyraGive AI agents a wallet with a spending limit. Non-custodial USDC on Base, server-enforced limits.6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.