AI agent governance MCP servers

A server here enforces policy on, approves, audits or restricts what AI agents are allowed to do.

Not here: servers that are merely used by agents.

1,865servers
740 remote1,125 localTagged by Odel's AI, which can make mistakes

Best fit

1,131 made for this, ranked by starsRemoteLocal
  1. Scope by Ouroboros Apps @lahutchins91/scopeFreelance scope of work, rates, deadlines, and change orders for AI assistants5% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  2. AtlaSent MCP Server @atlasent-io/mcp-serverAtlaSent for AI agents: with an API key, actions wait for approval with signed proof. No key: demo.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
  3. Proving Ground @railway/proving-groundAccounts-payable exception environment with a pass/fail verifier and proof packet: AI agents work AP9% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.
  4. Gate Authority Network @projetxana/gate-authority-networkLive cross-domain authority-state resolution for delegated agents through MCP.8% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
  5. Remit language tools @mrpacstar2-oss/remitChecked language for AI-written agent workflows: limits, cost and data flows known before running.Not assessed yet.A remote server; no sign-in.
  6. mcpgawk @gawk-dev/mcpgawkMeasure MCP servers, pin the approved tool surface, refuse calls to tools that changed. Local-first.Not assessed yet.Runs on your machine, installed from PyPI.
  7. Confirm @les-k/mcp-confirmAn MCP server whose confirmation cannot be replayed against a different call.Not assessed yet.Runs on your machine, installed from PyPI.
  8. Pg Readonly @les-k/pg-readonly-mcpA read-only Postgres MCP server that parses SQL rather than pattern-matching it.Not assessed yet.Runs on your machine, installed from PyPI.
  9. IAF Agent Bridge @francescoveryra-dot/iaf-agent-bridgeMCP server that sends work to Cursor Agent over ACP and returns the session id needed to continue.Not assessed yet.Runs on your machine, installed from npm.
  10. ddflow @delian/ddflow-mcpWork-queue kernel for AI coding agents: dependencies, worktree isolation, quality gates, recovery3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
  11. ExactGround @alidaram99/exactgroundCheck npm/PyPI packages exist and that a function or method exists in an exact package version.7% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.
  12. presign-guard wallet @fizzl13/presign-guard-walletAgent wallet with limits: pays x402/MPP on Base, Solana, Tempo, XRPL and Algorand; phone approval.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
  13. Prior @bret1976/priorSpend gate agents call before money moves. Buy with Stripe Checkout. Paid only when Stripe says so.11% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  14. Mandare @mandarelabs/mandareVerify an agent fleet's tamper-evident ledger, check budgets, kill a runaway agent. Local-first.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
  15. TWZRD @twzrd-sol/twzrd-mcpAuto-pay MCP for the TWZRD Trust API: free preflight + x402-paid Solana trust intelNot assessed yet.Runs on your machine, installed from PyPI.
  16. agentpay @hellotravisss/agentpayEnforced budgets for agents paying x402 APIs: the gateway holds the wallet, not the agent.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
  17. Lumière PayCheck @book0feli/paycheckCheck any x402 endpoint before your AI agent pays it: trust grade, verdict, and hijack checks.4% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  18. Pink Agentic AI Payments (sandbox) @pinkwallet/agentic-payments-sandboxApproval layer for AI agent payments: budgets, rules, human approval. Sandbox, test credentials.6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
  19. Rail @tstockham96/rail-mcpBudgets, propose-then-approve, and receipts for agents that buy for a human. Dry-run by default.Not assessed yet.Runs on your machine, installed from npm.
  20. amu-pgvector @sangaraju1988/amu-pgvectorLineage-gated agent memory tools on Postgres + pgvector, enforced by row-level security.Not assessed yet.Runs on your machine, installed from PyPI.
  21. Lagaam @lagaam-ai/lagaamStops an agent's Trino or Pinot query before it runs if it costs too much or reads outside its grantNot assessed yet.Runs on your machine, installed from PyPI.
  22. Lawang Onboard @gablooge/lawang-onboardPermission-aware onboarding MCP server: answers about a codebase, filtered by the caller's role.Not assessed yet.A remote server; it needs your API key.
  23. Guard @codapult/guardLocal-first architecture guardrails and project context for JS/TS AI coding agents.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
  24. MarketNow @alicelabs-llc/marketnowVerify agent credentials, 9 formats, scam domains; search 70k+ MCP servers with auth-gate state.11% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.