AI agent governance MCP servers

A server here enforces policy on, approves, audits or restricts what AI agents are allowed to do.

Not here: servers that are merely used by agents.

1,886servers
747 remote1,139 localTagged by Odel's AI, which can make mistakes

Best fit

1,147 made for this, ranked by starsRemoteLocal
  1. Faro @vedux98/faroVerify URLs, payees, and messages before acting: red/yellow/green trust verdicts for agents.11% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.
  2. Gateway @titus-civic/mcp-gatewayIdentity, authorization, audit trails, and revocable permissions for AI agents accessing MCP tools.8% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
  3. HiveGate — Hive Civilization Agent Trust & Settlement @srotzin/hive-gateTrust & settlement for AI agents: DID, ZK reputation, audit, USDC/USDCx/USAD/ALEO. First DID free.12% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  4. HiveAttest @srotzin/hive-mcp-attestPre-action attestation perimeter for AI agents — 8 primitives, signed C18 receipt per call.5% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  5. Sigma Gate @spektre-labs/sigma-gateDeterministic trust gate for AI output: leaked-secret, prompt-injection & PII in one call.15% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  6. Data Compliance Classifier MCP @ojaskord/data-compliance-mcpClassify data safety before storing or sharing. GDPR, HIPAA, PCI-DSS, CCPA. AI-powered.10% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  7. Trust Gate @cwnapps/trust-gate-mcpPost-quantum, tamper-evident receipts for agent actions. Ed25519 + ML-DSA-65, offline verify.7% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  8. Agent Guild @agenttanuki/agent-guildRank agents; signed machine messages + wallet gates via x402; free verifiable agent passports.9% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  9. Doriku @doriku/task-managerShared control plane for AI coding agents — tasks, memory, decisions, file locks. 12 tools.9% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.
  10. MetaMesh-UGA @metamesh-uga/metamesh-ugaServerless edge control plane to discover, route and monetize 14,982+ MCP tools.11% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  11. Allowance MCP @useallowance/allowance-mcpSecure agent purchasing with human-approved virtual cards, receipts, and audit trails.6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
  12. Veto — SQL Safety & Cost Oracle @vetosql/vetoDeterministic safety, correctness & cost gate that vets Postgres SQL before your AI agent runs it.3% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  13. Speko AI @speko/mcpManage Speko voice-AI agents, sessions, calls, phone numbers, knowledge bases, evals, and docs.5% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
  14. Dredd MCP @pduggusa/dredd-mcpPre-flight MCP security. Blocks compromised deps + tool drift. HMAC-signed. Dredd judges.25% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.
  15. Intent-Verified Development (IVD) @leocelis/ivd33 tools that make AI write, implement, and verify intent against explicit, testable constraints.8% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.
  16. K-Work Trust @hycore220/k-work-trustKorean business record validation and workflow safety gates for AI agents.6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  17. Shadowgate @josephibra/shadowgate-mcpSecurity firewall for AI agents — scans MCP calls for injection, secrets, and risks.11% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.
  18. Mission — Trust Graduation Gate @gomission/mcpTrust Graduation gate: Claude can do real work once Mission decides what it is allowed to do.13% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  19. arifOS — Constitutional AI Governance @ariffazil/arifosmcpConstitutional AI governance: 11 mega-tools, 13 floors, VAULT999 ledger. Human-in-loop by design.16% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  20. Second Eyes Agent Workflow Services @this-is-hellgate/secondeye-mcp-unblockWorkflow diagnostics, capability routing, and x402 settlement for MCP-compatible agents.31% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  21. Catalyst Governance @stratogenic-ai/catalystGovernance middleware for AI agents: permission gates, approvals, compliance scanning, audit ledger.5% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  22. A2a Governance Bridge @csoai-org/a2a-governance-bridge-mcpA2a Governance Bridge MCP Server by MEOK AI Labs14% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  23. DepScope @depscope/mcpPackage intelligence MCP for AI agents — 22 tools, 19 ecosystems, AGPL SDK, free.28% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  24. Gvnr @gvnr/gvnrBudget & cost control for AI agents — per-agent spend caps + rate limits before each call.7% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.