- koment @janpuc/komentRead and write checked code rationale stored outside source comments.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.1 GitHub stars.
- Ownership Attestation Protocol @bg4ff8mtdn-dotcom/ownership-attestation-protocolMCP protocol enforcing explicit task acceptance and attestation-tagged completion claims.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from a package registry.1 GitHub stars.
- AgentEnvelope @blackboxengineering/agent-envelope-mcpNeutral MCP server for AgentEnvelope authority: sovereign verify + vault verify/lookup/mint.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- Yagami AI Context Firewall @matthewtracy/yagamiOpen-source AI context firewall for governed model, retrieval, memory, and tool access.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.1 GitHub stars.
- Verificate MCP @verificate/mcpAgentic code review, no signup to try: reality gates + frontier-model review, with veto.8% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.1 GitHub stars.
- MCP File Tools @zoster81/mcp-file-toolsSecure encoding-aware filesystem tools with atomic writes, legacy encodings, and typed errors5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from MCPB.1 GitHub stars.
- Laguarde @futur-panda/laguardeSelf-hostable policy control plane for AI coding agents.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- BandSaaS @jyswee/bandsaasLicense your music to AI on your terms, and run your whole artist business. 46 tools, keyless.6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.1 GitHub stars.
- ellmos ControlCenter @ellmos-ai/ellmos-controlcenter-mcpMCP control plane: local server discovery, profiles, capability bundles, and policy audits.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- Agent^Rider @ceedot-rock/agent-riderSigned agent identity, trust scoring, credit economy, and social layer for AI agents.9% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.1 GitHub stars.
- Decide Policy Notaries @decidefyi/policy-notariesFail-closed refund, cancellation, return, and trial checks for 100 US subscription vendors.3% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.1 GitHub stars.
- Willitsend @abryfs/willitsendDeterministic pre-send lint for SMS/iMessage: silent carrier filtering and segment blowups.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- mcpindex @gautamgb/mcp-server-mcpindexThe MCP server index that vets servers, not just lists them. Advisory screen before you install.4% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.1 GitHub stars.
- Mailbuttons (mbag.ai) @mailbuttons/mcp-serverGoverned email for AI agents (Mailbuttons / mbag.ai): sandbox inboxes, policy gate, audit log.5% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.1 GitHub stars.
- Agentic SDLC MCP @sakuracianna/agentic-sdlc-mcpAgentic SDLC governance and security controls for AI coding agents working with GitHub.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- Valta @billionaire664/valta-mcpFinancial governance for AI agents — spend gates and audit trail exposed as MCP tools.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- QueryPilot @nickklos10/querypilotSafe SQL gateway for AI agents: SELECT-only validation, access policies, masking, audit trail, evals4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.1 GitHub stars.
- SYNAPSE CHANNEL @anulum/synapse-channelLocal-first multi-agent coordination for messages, leases, shared plans, status, and resources.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.1 GitHub stars.
- RiskState — Crypto Risk Engine @riskstate/mcpLive BTC/ETH risk state: risk policy, market structure and trading playbooks. Keyless free tier.4% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.1 GitHub stars.
- Arkgate @pedroknigge/arkgateWhen the agent writes a bad import, the write doesn’t land. The same check fails the pull request.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- Kakunin @kakunin-ai/kakuninX.509 identity, risk scoring, and audit logging for AI agents. MiCA + EU AI Act compliant.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- Runeward @runewardd/runewardGoverned execution cells for AI agents: Docker/K8s sandboxes with policy, audit, and approvals.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.1 GitHub stars.
- AISentinel by BizDNAi @kabzhanov/aisentinelPre-tool policy enforcement + JSONL audit for AI agents. Apache 2.0.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from MCPB.1 GitHub stars.
- ARGUS-3 MCP Server @alexar76/argus3ARGUS-3 stdio MCP with WARDEN firewall: argus_ask, argus_status, argus_capabilities.11% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
