- Oakallow @oakallow/oakallowRuntime permission, approval, and audit layer for AI agent tool execution.7% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.1 GitHub stars.
- SpendNod @gstack-ds/spendnodAI agent spending controls. Set limits, blocklists, and caps. Approve transactions from your phone.9% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.1 GitHub stars.
- Swarm At @mediaeater/swarm-atSettlement protocol for AI agent swarms — hash-chained ledger, trust, 48 blueprints, 18 tools9% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.1 GitHub stars.
- Agent Rate Limiter @csoai-org/agent-rate-limiter-mcpFleet-wide shared rate limiter for A2A + multi-MCP deployments. Most MCP servers rate-limit inde...12% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.1 GitHub stars.
- Alloy @alloy/alloyAI workspace — shared knowledge, skills, and tools for AI agents8% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.1 GitHub stars.
- OntoRamp Decision Intelligence @ontoramp/decision-intelligenceLog, evaluate, and ground AI decisions against authority context. Returns PASS, WARN, or BLOCK.9% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.1 GitHub stars.
- 6DuckLearn MCP @6ducklearn/mcpConnect agents to 6DuckLearn memory, approvals, and runtime control.7% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.1 GitHub stars.
- Agent Financial Advisor @mytomclinic/agent-financial-advisorCompliance, risk, tax and audit checks for AI trading agents: pre-trade, sizing, wash sales, Reg BI.Not assessed yet.A remote server; no sign-in.
- Datumline Agent Guard @datumline/agent-guardChecks an AI agent's 'done' against the files and URLs it claims. Missing = FALSE_DONE.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
- CrawlCheck @emmanuelorta/crawlcheckVerification layer for the agentic web: a signed answer about any site before an agent acts.Not assessed yet.A remote server; no sign-in.
- Phocinae MCP @phocinae/phocinae-mcpLocal Phocinae decision-engine MCP stdio server: fail-closed approval gate + classify/route/score.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
- Local Workspace @peter4leadson/local-workspace-mcpBounded, read-oriented filesystem, git and named-task tools over authorized workspace roots.Not assessed yet.Runs on your machine, installed from npm.
- macOS MCP Server @deploymenttheory/macos-mcp-serverLocal macOS 27 desktop automation through MCP on Apple silicon.9% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from MCPB.
- AegisGate MCP @aegisgatesecurity/aegisgate-mcpSecure MCP server framework with 23 security layers and ML threat detection. Zero deps.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.
- Pranaxis Gateway @anaciber/pranaxis-mcp-gatewayConsistency verdicts for MCP tool calls: no two agents consume the same resource version twice.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
- IRL Gateway @norve-labs/irl-gatewayAn AI agent's trading mandate it can't break: checked before every order, reasoning sealed in IRL.Not assessed yet.Runs on your machine, installed from PyPI.
- Vibe Gate @mustafacagri/vibe-gate-mcpAdversarial Quality Gate MCP for vibe-coding: IDE AI vs Critic AI, human decides on deadlockNot assessed yet.Runs on your machine, installed from npm.
- gutsy @kouhxp/gutsyLocal gut check before risky agent actions: calibrated safe/intended probabilities, no API calls.Not assessed yet.Runs on your machine, installed from PyPI.
- chat-tool-ui-preview @gridhra/chat-tool-ui-previewPreview a chat post before an agent sends it: text, mentions, destination, warnings. Never sends.Not assessed yet.Runs on your machine, installed from MCPB.
- MCP Security Guard @petrovicistefan/mcp-security-guardAudit MCP servers for tool poisoning, rug pulls and supply-chain risk (OWASP MCP Top 10).Not assessed yet.Runs on your machine, installed from npm.
- Brainy @memokar/brainyShared knowledge base + task queue so Claude, ChatGPT and other agents can work together safely.Not assessed yet.Runs on your machine, installed from Docker.
- Rein @bugiiiii11/reinSpend limits for AI agents that pay with x402: every paywall is policy-checked before a cent moves.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Bridgistic @wordpressistic/bridgisticConnect Claude to WordPress safely: signed requests, scoped keys, approvals, logs, snapshots.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Desk by Ouroboros Apps @lahutchins91/deskCustomer support answers, refund rules, and escalation limits for AI assistants5% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
