AI agent governance MCP servers

A server here enforces policy on, approves, audits or restricts what AI agents are allowed to do.

Not here: servers that are merely used by agents.

1,857servers
733 remote1,124 localTagged by Odel's AI, which can make mistakes

Best fit

1,125 made for this, ranked by starsRemoteLocal
  1. TAR Engine @qingxuantang/tar-engineAudit AI skill safety before you ship. Static, semantic, adversarial, supply chain scans.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.2 GitHub stars.
  2. MySQL (security-first) @kurok1/mcp-server-mysqlSecurity-first MySQL MCP server with AST validation, table whitelist, schema resources, and audit.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.2 GitHub stars.
  3. OrgX MCP — Organizational Continuity for AI Agents @useorgx/orgx-mcpMake AI work resumable, reviewable, and provable across agents.8% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.2 GitHub stars.
  4. Registry @policylayer/registryThe MCP server that vets MCP servers: identity, risk grade and per-tool risk before you install.4% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.2 GitHub stars.
  5. SupraWall @wiserautomation/suprawall-mcpSupraWall security gateway for AI agents. Provides deterministic guardrails for MCP agents.9% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.2 GitHub stars.
  6. VeriSwarm @veriswarm/veriswarm-mcpVeriSwarm MCP Server — Trust infrastructure for AI agents via Model Context Protocol7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.2 GitHub stars.
  7. Agentrisk @trycoin-ai/agentriskRisk guardrails for AI trading agents. Your agent proposes; your policy decides.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.2 GitHub stars.
  8. Zyrax Guard @tiagosilva07/zyrax-guardAudit AI agent configs for prompt injection & rogue MCP servers; vet packages6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.2 GitHub stars.
  9. Promptrejectormcp @revsmoke/promptrejectormcpSecurity gateway for AI agents: detects prompt injections, jailbreaks, and common vulnerabilities.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.2 GitHub stars.
  10. Presidio Hardened X402 @presidio-v/presidio-hardened-x402-mcpPre-payment safety gate for x402 agents: PII screening, spend policy, replay checks before signing.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.2 GitHub stars.
  11. Shinobi @numbererikson/shinobiTask spine + searched dead ends + approvals for AI coding agents. One brain, every device.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.2 GitHub stars.
  12. Qorami @loicfontaine-max/qoramiCheck an email before an AI agent sends it: send / ask a human / block. Detects prompt injection.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.2 GitHub stars.
  13. Figuard @figuard/figuard-mcpPre-flight spend authorization for AI agents. Set a budget, enforce limits, audit every decision.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.2 GitHub stars.
  14. Waxseal @degenlegion-com/waxsealEd25519 identity for AI agents. Verify seals, sign documents, gate actions with approvals.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.2 GitHub stars.
  15. Frugal @brainsparker/frugalThe open routing layer for AI tools: tool calls routed per policy, decision on every result.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.2 GitHub stars.
  16. OmniGlyph @aidi1723/omniglyphLocal symbol ground truth MCP server for Unicode lookup and code-symbol linting.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.2 GitHub stars.
  17. Shrike @shrike-security/shrike-mcpGoverns what AI agents do: tool calls, SQL, commands, files checked against policy before they run.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.2 GitHub stars.
  18. Agent Trust @garl-protocol/agent-trustTamper-evident action receipts, trust scoring & capability tokens for AI agents. 29 MCP tools.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.2 GitHub stars.
  19. Yieldagentx402 @fabio662/yieldagentx402Policy-gated x402 MCP for agent workflows with TEE receipts, 18 tools, and no custody.11% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.2 GitHub stars.
  20. Kasbah @al-adnane/kasbah-mcpGovernance layer for agentic AI — signed, verifiable receipts for every agent action.10% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.2 GitHub stars.
  21. XAPS MCP Server @apmc1/xapsPre-execution audit for autonomous agents. Independent receipt before irreversible actions.12% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.2 GitHub stars.
  22. 1Claw Vault @1clawai/1claw-mcpHSM-backed vault secrets for AI agents (JIT fetch) plus prompt-injection and threat scanning.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.2 GitHub stars.
  23. Onyx @dimitrilaouanis-tech/onyx-mcpEd25519-signed ground-truth oracle — 63 paid x402 tools live on Base mainnet.9% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.2 GitHub stars.
  24. AgentPay @rumblingb/agentpayAgent payments, API key vaulting, and governed mandates. Agents spend within user-defined limits.8% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.2 GitHub stars.