AI agent governance MCP servers

A server here enforces policy on, approves, audits or restricts what AI agents are allowed to do.

Not here: servers that are merely used by agents.

1,857servers
733 remote1,124 localTagged by Odel's AI, which can make mistakes

Best fit

1,125 made for this, ranked by starsRemoteLocal
  1. reevesagents @mertkayacs/reevesagentsSpawn, read and steer AI coding CLIs (Claude Code, Codex, Kimi and more) in local tmux windows.Not assessed yet.Runs on your machine, installed from npm.88 GitHub stars.
  2. Vouch @vouchdev/vouchGit-native, review-gated knowledge base for LLM agents. Cited retrieval, audited writes.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.82 GitHub stars.
  3. Raxol @droodotfoo/raxolElixir/OTP runtime where every UI component auto-exposes MCP tools; stdio server: mix mcp.server5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from a package registry.79 GitHub stars.
  4. Agentos @imran-siddique/agentosBuild and manage policy-compliant AI agents with safety enforcement and compliance checking6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.74 GitHub stars.
  5. Trustabl @trustabl/agent-reliability-analyzerFind and fix reliability and safety gaps in agent code, across nine agent SDKs.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.72 GitHub stars.
  6. Autodesk Revit MCP Server @sam-aec/autodesk-revit-mcp-serverMCP server connecting AI assistants to Autodesk Revit through a local bridge.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from MCPB.68 GitHub stars.
  7. Vorim @vorim-ai-labs/vorim-mcp-serverAI agent identity, permissions, trust scores, and tamper-evident audit trails via Vorim AI8% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.66 GitHub stars.
  8. Myco: Agent-First Cognitive Substrate @battam1111/mycoAgent-first cognitive substrate: 20 verbs + 50 lint dims over a self-validating graph.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from a package registry.66 GitHub stars.
  9. Nora @solomon2773/noraOperate self-hosted OpenClaw and Hermes agent fleets on Docker or Kubernetes from MCP clients.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.57 GitHub stars.
  10. Jev Use @shitianfang/jev-useTyped yes/no, pick-one and score judgments from Jev in one batched call; typed escalation back.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.56 GitHub stars.
  11. arifOS — Constitutional AI Kernel @ariffazil/arifosConstitutional AI kernel with 13 MCP tools, 888_JUDGE verdict pipeline, and VAULT999 ledger.11% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.53 GitHub stars.
  12. Aaa @ariffazil/aaa-mcpConstitutional AI Governance with 13 enforced floors (F1-F13) and tri-witness consensus for LLMs.11% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.53 GitHub stars.
  13. PIO Agent @jl-codes/platformio-mcpBuild, inspect, flash, and monitor PlatformIO firmware projects with policy-controlled tools.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.52 GitHub stars.
  14. Proximo — the Proxmox MCP you can hand the keys @john-broadway/proximo-proxmoxThe Proxmox MCP you can hand the keys: VE/PBS/PMG/PDM. Plan, prove, undo, diagnose. MCP/A2A/API.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.52 GitHub stars.
  15. ProofFlow @hyperion-gpu/proofflowAudit infrastructure for AI coding agents with evidence-backed review and policy gates.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.49 GitHub stars.
  16. Floom @floomhq/floomDeploy Python functions as web apps with auto-generated UI, REST API, and shareable links.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.46 GitHub stars.
  17. DollhouseMCP @dollhousemcp/mcp-serverOSS to create Personas, Skills, Templates, Agents, and Memories to customize your AI experience.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.45 GitHub stars.
  18. Computer-Use Agents API @hcompai/hai-agentsRun and manage H Company's Computer-Use Agents from any MCP client.6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.42 GitHub stars.
  19. Agent MCP Gateway @roddutra/agent-mcp-gatewayOn-demand tool discovery for all your MCPs and per-subagent MCP controls to preserve context window.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.41 GitHub stars.
  20. Agoragentic Agent OS MCP @rhein1/agoragenticTriptych OS (Agent OS) MCP for governed routing, receipts, and USDC settlement on Base.6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.40 GitHub stars.
  21. Kage @kage-core/kageVerified memory for coding agents: claims cited against code, stale withheld, savings receipts.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.40 GitHub stars.
  22. Signet MCP Tools @prismer-ai/signet-mcp-toolsMCP server exposing Signet cryptographic signing, verification, and content hash tools over stdio.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.39 GitHub stars.
  23. OCM @ocm-mcp-server/ocm-mcp-serverGuardrailed fleet ops for AI agents: multi-cluster Kubernetes via OCM with policy, approval, audit.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.37 GitHub stars.
  24. Cartographer @beppetemp/cartographerGovernance MCP server for agent-maintained knowledge bases (OKF): git-backed writes, search, lint.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.37 GitHub stars.