AI agent governance MCP servers

A server here enforces policy on, approves, audits or restricts what AI agents are allowed to do.

Not here: servers that are merely used by agents.

1,886servers
747 remote1,139 localTagged by Odel's AI, which can make mistakes

Best fit

1,147 made for this, ranked by starsRemoteLocal
  1. AGTS MCP Server @obligationsign/agts-mcpSovereign MCP Gateway — 64 governed tools with Merkle transparency log. EU AI Act ready.10% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
  2. Shield @craftedtrust/mcp-shieldTrust verification for MCP servers. Check scores, scan for security issues, search 4,200+ servers.8% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  3. Agentcore @geiant/mcp-agentcoreAI governance MCP server for EU AI Act compliance and jurisdiction verification8% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  4. Invinoveritas @babyblueviper/invinoveritasSecond opinion before an irreversible agent action; signed proofs, free verify, public ledger.7% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  5. A2aidentitytoll @clauxel/a2aidentitytoll-mcpRemote MCP for A2A caller identity, scope policy, verdict receipts, and audit history.9% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.
  6. Agentdataboundary @clauxel/agentdataboundary-mcpPermission boundary receipts for ChatGPT agents.8% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.
  7. Taste @humantaste/taste-mcpExpert review for AI agents. On-chain proof of human review.6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  8. Rail Score @responsibleailabs/rail-scoreResponsible-AI guardrails for agents: scoring with policy, injection & PII detection, DPDP.6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  9. KYA Brasil @celfons/kya-brasilKYA backed by a real company: e-CNPJ-signed agent mandates, revocation-checked, signed verdicts8% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  10. Vericto SQL Firewall @vericto/sql-firewallCheck SQL against your Vericto rules before it runs: blocks destructive or risky statements.10% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.
  11. Outtake Flash @outtake/flashTells your agent if a link is safe before it clicks, signs in or pays.13% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
  12. Rightshold @rightshold/rightsholdKnow what your agent may use: license checks, entitlements you hold, signed rights manifests.4% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  13. Agent Eligibility @pythonanywhere/agent-eligibilityDeterministic eligibility scoring for AI agents: CLEAR/HOLD/FAIL verdicts, published weights.5% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  14. Investboard @investboard/investboardInvestment rules and decision history for AI assistants: read your policy, check changes, review.7% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
  15. Harbor (gethrbr) @gethrbr/harborTeam memory for coding agents: rules you approve, served to every agent, and which ones it cited.6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
  16. ActionBox Human Input @actionbox/human-inputHuman review for AI agents: ask through ActionBox and retrieve a typed decision before proceeding.9% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.
  17. Acutis Gate @acutisgo/gateEvery AI tool call runs as the person who asked, under your rules, fully audited.15% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.
  18. Vicem @vicem/vicemSee the calls your Vicem answered and ask it to call or message someone, with your OK first.10% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
  19. x402Shield @x402shield/x402shieldPublic demo: evaluate AI-agent payment authorization and approval policy. No signing, no settlement.5% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  20. Agent Economic Trust @caoviedoc/agent-economic-trustOutcome-calibrated economic trust gate for autonomous agents.8% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  21. JevStation @jevstation/mcpTyped-question decisions from Jev: classify, moderate, route models and guard tool calls.12% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.
  22. LiveGraph @livegraph/livegraphLive, editable canvas of your agent hierarchy — watch, interrupt, and reroute runs mid-flight.9% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.
  23. 402shield @mitchsingh/402shieldx402 payment security and pre-execution transaction risk screening for autonomous AI agents.10% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  24. R/IV — Verify Claims, Citations & Agent Actions @duranivrobert-glitch/rivVerify claims, citations & agent actions. Free receipt trial; paid prices via live R/IV quotes.8% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.