- FlightSweeper @flightsweeper-webmcp/publicAnonymous public tools for FlightSweeper. See the published agent boundary before use.7% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Safe4 @safe4/safe4Tests an AI agent's purchase against the task it was given. Paid per call in USDC via x402.5% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- XGuard — Agent Execution Gateway @moelayyan90/xguard-control-planeScoped agent execution. Server-side credentials, policy, budgets and verifiable receipts.9% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Blackwall X402 Guardrail @blackwalltier/blackwall-x402-guardrailKeyless hosted MCP: pre-signature x402 payment verdict (GO/HOLD/STOP) with a signed receipt.11% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Moltline Agent Governance @moltlinestudio/governAudit MCP configs and skill files for over-broad scope and injection risk. 6 of 8 free.4% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- GateCore Marketplace @gatecoreai/marketplaceProcure governed AI capabilities: machine-readable price, scope, trust, gateway-delegation terms.6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- VITNA – Containment for rogue AI agents @costrinity/vitna-compliance-preflightGuard wraps stdio MCP servers: risky calls wait for a person; no answer, no run. Remote: cooperative5% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Tally MCP @tally/mcpAn AI agent for prop firm challenges on Propr; the connector reads it, never trades.9% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
- Bay Run @barneywohl/bay-runFree OpenAI-compatible inference with signed provenance receipts and 3 focused MCP tools.11% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Stigmer @stigmer/stigmer-mcpExecution graph of AWS: verified contracts, least-privilege IAM policies, pre-flight authorization.5% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- AgentGuard @tooloracle/agentguardAgentGuard — 20-tool AI safety MCP: policy preflight, risk scoring, audit logging, rate limits.11% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Gentkey @gentkey/mcpOne MCP URL for all your connectors — scoped writes, enforced constraints, and a full audit trail.9% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
- AgenticRail Gate - sequence enforcement and verifiable audit receipts for AI agent compliance @agenticrail/gateDeterministic runtime enforcement of step order for AI agents: ALLOW/DENY before a step runs.4% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Agent Commerce Guard @fxjim/agent-commerce-guardPolicy review and purchase discovery for AI-agent commerce actions.6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- BountyVerdict Agent Decision Tools @mimirs402/bountyverdictFree selector plus read-only GitHub bounty, agent harness, Actions, flake, and MCP drift decisions.10% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- BountyVerdict Agent Decision Tools @cristianmoroaica/bountyverdictRead-only GitHub bounty, agent harness, Actions failure, flake, and MCP tool-drift decisions.10% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- UpToCode @ddyrich72/uptocodeEvidence-backed architecture-quality analysis for Python agent applications.5% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.
- Whetstone @cyberelf/toolsVerifier-grounded AI promotion gates, disposable report cards, and signed PASS/HOLD/BLOCK receipts.8% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- A2A TrustGate @jyswee/a2a-trustgateA2A TrustGate: 4-gate firewall that screens every AI-agent action before it runs. 50 tools.16% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Authoryze @authoryze/authoryzeGive your AI agent a spending limit: approval controls and single-use virtual cards.11% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
- ALEETH Authority MCP @aleeth/authority-mcpThe first MCP governed by ICA. Every action is gated and sealed with a verifiable receipt.9% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
- Stillos Kya @stillmarcus24/stillos-kyaCounterparty due-diligence infrastructure: OFAC screening, on-chain risk, signed verdicts.6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Agent Transaction Control @flint/agent-transaction-controlIssue Agent Passports and verify agent authority before value moves. Signed verification records.12% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Injection Detector @viridis-security/injection-detectorFormally-verified injection/exfiltration detector for AI agents (MCP-02).4% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
