AI agent governance MCP servers

A server here enforces policy on, approves, audits or restricts what AI agents are allowed to do.

Not here: servers that are merely used by agents.

1,886servers
747 remote1,139 localTagged by Odel's AI, which can make mistakes

Best fit

1,147 made for this, ranked by starsRemoteLocal
  1. p-e relay (remote) @it-start/relay-uiRemote MCP access to the p-e relay store. Reads are open; writes and waits are signed.7% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  2. Collar Guardrail — Pre-Trade Risk Layer @aiguardrail/backendDeterministic pre-trade risk checks for AI agents on Robinhood Chain. Returns allow/warn/deny.7% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  3. FGAC.ai: Multiple Gmail Accounts, Google Sheets & Docs @fgac/fgacMultiple Gmail accounts, editable Google Sheets & Docs for AI agents. Deny-by-default access rules.8% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
  4. AION SUPREME Agent Temple @wisemankonstantin-droid/aion-agent-coreVerified agent routing with bounded discovery, outcome evidence and economic policy.14% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  5. HallucC — Hallucination & Safety Guardian @fredyee/halluccFact-check LLM outputs with cited sources. API key: aihcc.cloud/keys.15% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.
  6. Governance @coderifts/api-governanceSigned, offline-verifiable contract-change authorization. Only a granted change can proceed.5% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  7. Blindoracle @craigmbrown/blindoracleTrust + counterparty-risk layer for x402 A2A trades: reputation, pre-hire check, escrow, disputes14% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  8. Proofable MCP @proofable/mcpContext and control for any AI. Agent identity, scoped access, and proof across tools.9% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
  9. pendnt @pendnt/pendntHuman approvals, notifications, inbound webhooks, wake-ups for headless agents. Free trial: /try8% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.
  10. AgentLedger @entradox/agent-ledgerMeter, cap, and block AI agent spend before the provider is charged.6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  11. Agent Control @agent-control/agent-controlFree agent directory and job board. List your agent free: give it agent-control.net/skill.md23% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  12. Guardrail MCP @kadopi/guardrail-mcpDeterministic preflight checks for credentials, fund transfers, writes, and prompt overrides.4% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  13. MANDATE Credential Broker @projetnanocorp/mandateMCP server for mandates, delegation, policy-gated execution, credential grants, and audit.5% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  14. Consensus @masterblaster14/consensusCoordination for AI coding agents: declare plans, catch design conflicts early, share team memory.8% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.
  15. Working Machines MCP Server @klei30/working-machinesConnect to 1,400+ apps and 15,000+ actions through one OAuth-protected MCP server.11% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
  16. Amazon Ads @sellermate/amazon-adsAsk your Amazon Ads account anything and act with guardrails. Remote MCP, OAuth, free to connect.12% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
  17. Trust Switchboard @paul-salviani/trust-switchboardAsk "Are you on Trust Switch?" before your agent deals with another agent. Free. Never blocks.10% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  18. Warda @artykomarkets/wardaEconomic authority for autonomous agents on Kaspa L1. Never holds a key.4% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  19. Neon Zero-Trust Gateway @ansarii/zero-trust-gatewayZero-Trust MCP gateway securing internal database tools behind an API key firewall.22% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  20. Kanonik @kanonik/kanonikGovernance runtime for compliance: verified, human-approved writes to a tamper-evident record.7% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
  21. Ratchet — effect gate @ratchetgate/ratchetYour agent asks before it acts, so the same real-world action is attempted at most once.5% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  22. Agent Channel @amkentech/agent-channelOne identity across Claude Code, Codex, Cursor, Gemini, Windsurf: shared inbox and handoffs.9% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
  23. Melaya @melaya/melayaCreate and run any AI agents systems from 6k+ tools. Give your AI hands access to your Android.12% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
  24. AlfaNest Relay @alfanestlabs/relayHosted bus for AI agents: lock, events, reject. Publish/apply stay on the sidecar.8% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.