- CIVITAE — Governed AI Agent Marketplace @signomy/civitaeGoverned AI agent marketplace on Signomy. Register agents, fill slots, earn under MO§ES governance.12% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.1 GitHub stars.
- mcp-armor @studiomeyer/armorSecurity sidecar for MCP servers: 11 read-only control-plane tools for prompt-injection checks.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.1 GitHub stars.
- Agent Memory @xultrax-web/agent-memory-mcpMarkdown memory for AI agents. Files you can read, edit, grep, and commit. Not a database.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- OpenClaw Control @smurfy92/openclaw-control-mcpMCP server bridging Claude Code to the OpenClaw gateway management plane via JSON-RPC.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- Stratum MCP @smartmemory/stratum-mcpStructured execution for coding agents: contracts, postconditions, gates, guardrails.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- Slang Workflows @shofer-dev/slang-workflowsProvable, declarative multi-agent workflows for Claude Code (typed .slang, non-LLM executor).4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- mcp-lint @robert19001-cmyk/mcp-lintLint MCP tool schemas for cross-client compatibility and agent preflight safety.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- Holomime @productstein/holomimeBehavioral therapy for AI agents — self-diagnosis, alignment, and training via MCP7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- Ark @pedroknigge/arkArchitecture co-pilot for AI TypeScript (write gate, CI, plan/loop)Not assessed yet.Runs on your machine, installed from npm.1 GitHub stars.
- Launcher @oneprofile-dev/mcp-launcherSingle MCP hub: discover, add, audit, and govern MCP servers across every AI client.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- PQC-Khepra MCP — CMMC Autopilot & AI Security Recorder @nouchix/pqc-khepra-mcpPost-quantum CMMC compliance scanner & AI agent attestation. FIPS 140-3, ML-DSA-65, 36K+ mappings.8% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.1 GitHub stars.
- Paybond MCP Server @nonameuserd/paybondDefault trust layer for agentic payments: authorize agent spend, evidence, receipts, settlement.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- Agent Firewall @mlawsonking/agent-firewall-mcpInput/output safety for AI agents: known-pattern injection and obfuscation scan, URL/IP, secrets.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- Cordon for MCP @marras0914/cordonCordon for MCP. Security gateway with policy enforcement, audit log, and HITL approvals.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- Kubeleash @kubeleash/kubeleashKubernetes MCP server with RBAC-style, context-scoped guardrails for AI agents.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.1 GitHub stars.
- 402sentinel @kaditang/402sentinel-mcpx402 payment safety for AI agents: counterparty risk gate, payment firewall, compliance, RWA gate.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- Securecode @juanisidoro/securecodeSecrets vault for Claude Code with audit logs, access rules, and AES-256 encryption.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- Entropy0dev MCP @entropy0dev/mcpEntropy0 MCP server — source trust and URL safety tools for AI agents8% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- Dingdawg Code Review @dingdawg/dingdawg-code-reviewAI code review — security, quality, performance. Learns your patterns. Receipted.9% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- Declaw AI MCP @declaw-ai/mcp-serverSecure Firecracker microVM sandboxes for AI agents: network policy, PII & injection guardrails.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- Countersign @countersign-network/countersignKill switch + spend guard for AI agents that spend money, across every wallet vendor at once.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- commit-check MCP @commit-check/commit-check-mcpCommit policy as code for AI agents: check commit messages, branch names and authors before a push3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.1 GitHub stars.
- Attest @chudah1/attest-mcpCredential enforcement middleware for MCP servers — verifies scoped tokens on every tool call4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- PromptSpeak Governance @chrbailey/promptspeakPre-execution governance for AI agents. Validates tool calls before they execute.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
