- AGTS MCP Server @obligationsign-io/agts-mcpSovereign MCP Gateway — 64 governed tools with Merkle transparency log. EU AI Act and SOC 2 ready.11% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- X402 Payment Safety @agenttanuki/x402-payment-safetyAuthorize x402 payments before signing with request-bound, signed safety decisions.9% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Logi Approval @1pass/logi-approvallogi Agent Approval Gate — human approval on the phone before high-risk agent actions.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Stale Gate Janitor @usedailyai/stale-gate-janitorDaily 04:00 CT housekeeping over data/approval-gates/14% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from a package registry.
- Hydracept @hydracept/hydraceptExecution control plane for agents: capabilities, durable jobs, budgets, receipts, and BYOK.5% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Perception @geiant/mcp-perceptionGeospatial AI MCP server — satellite imagery, embeddings, weather, GNS governance8% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Acp @agenticcontrolplane/acp-mcp-serverSee, price, and control every tool call your AI agents make: policy checks, cost, and audit tools.7% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
- GVNR by Instruxi @gvnr/enforcer-governorGVNR (gvnr.io): stops AI agents overspending and running dangerous commands before they act.Not assessed yet.Runs on your machine, installed from npm.
- Kineti @therawlogs/kinetiKineti: spend cap, undo, and test proof for AI coding agents6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- 402-LAB @kairose-master/402-labBudget-capped x402 buyer: delegate USDC in plain words, agent discovers and pays per call.13% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from MCPB.
- crosscheck @crosscheckapi/crosscheckChecks for AI agents over x402: review drafts, accept-check handoffs, scan skills before install.6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Spelunking.ai @spelunking/hubStructure for hard AI decisions, and a human to escalate to when the structure runs out.7% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Overwing @overwing/mcpGuardrails for LLM output: pass / fail / review verdicts and one recommended action. Hosted or npm.5% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Continuity Evidence @zerohourzulu/continuity-evidenceA bounded local evidence tool with current agent permission checks and durable retry handling.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Sovereign Identity Wallet @tamtunnel/si-wallet-mcpSelf-hosted signing wallet: DIDs, agency grants, and task mandates for AI agents.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- AgentGuard @merchantguard/agentguardLocal spend caps, kill-switch blocking and Ed25519-signed receipts for AI agent tool calls.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Verimand MCP Authority Server @verimand/mcp-authority-serverAgent-native access to verifiable VAGP authority.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- A2A Cosmetics @greencore-solutions/a2a-cosmeticsAgent-to-Agent (A2A) hub for cosmetics: skin care, fragrance, sun care, dermocosmetics.4% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- AXIOM @dragoscv/axiomTransactional write gate for coding agents: plan, canonical manifest, checks, two-phase apply.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Nofax @akzar1el/nofaxHuman-in-the-loop approvals and notifications for AI coding agents through a local stdio MCP server.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Once @stringsofthemind-oss/onceDeveloper assessment/setup MCP; admitted Once boundaries protect writes, not sibling connectors.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- AETRE & The Governed Agent @grayclayton/aetre-mcpDecision-theoretic triage and fail-closed agent gating: 32 tools over stdio.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from cargo.
- Veyra @zapxlabs/veyraGive AI agents a wallet with a spending limit. Non-custodial USDC on Base, server-enforced limits.6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Ratchet @iversonwuwei/ratchetRead-only tools to inspect your agent setup: list MCP servers, flag unpinned ones, test a policy.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.
