AI agent governance MCP servers

A server here enforces policy on, approves, audits or restricts what AI agents are allowed to do.

Not here: servers that are merely used by agents.

1,865servers
740 remote1,125 localTagged by Odel's AI, which can make mistakes

Best fit

1,131 made for this, ranked by starsRemoteLocal
  1. Verity @meloliva14/verity-mcpFail-closed verify-before-you-act gate for AI agents. Signed receipts. Pay-per-call via x402.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
  2. Sentrik @maxgerhardson/sentrikGovernance runtime for AI-generated code. Enforce compliance and security standards.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
  3. Quill @manumarri-sudo/quillPre-execution gate for AI-agent tool calls. Touch ID approval. Tamper-evident audit log.11% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
  4. Memini @lumayapartners/meminiLocal-first project memory and mistake-prevention guardrails for AI coding agents.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
  5. Nwc @llmops-pro/nwc-mcpLightning wallet for AI agents via Nostr Wallet Connect (NIP-47): budget caps, confirm, audit log.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
  6. Paywall @llmops-pro/paywall-mcpLightning-paywall sidecar: wraps any stdio MCP server, requires paid invoices before tool calls.12% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
  7. Agent Guard @liminalpepe/agent-guard-mcpVerify-before-act safety checks for AI agents: packages, lockfiles, manifests, CI workflows.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
  8. Laviya Agent Skills @kartegagithub/laviya-agent-skillsLaviya AI Orchestration MCP runtime for IDE and agent integrations.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
  9. Audit @joepangallo/mcp-audit-serverThin MCP and CLI proxy for AI agent and MCP security auditing via a hosted backend6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
  10. Consentgate @jessepetersondev/consentgate-mcpGate AI agent actions behind a consent policy with human approval via Telegram. Fail-closed.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
  11. IDF @intent-driven-software/idf-mcpTurn an IDF domain into an MCP server with invariants and role scopes in every tool description.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
  12. AI Workbench MCP @hrishikesh-thakre/ai-workbench-mcpGoose-first MCP server for Workbench-owned acceptance evidence, validation gates, and analytics.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
  13. Gsep @gsepcore/gsep-mcpAI agent security via MCP: C3 firewall, C4 immune system, C5 action guard, self-evolving prompts.15% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
  14. Code Firewall @egoughnour/code-firewall-mcpStructural similarity-based code filter. Stops malicious code pattern reaching execution tools.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
  15. Agentshield @dl-eigenart/agentshield-mcpDetect prompt injection, jailbreak, and social-engineering attacks in LLM agents.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
  16. Envibe @dominic-righthere/envibeSecure permission layer between AI agents and your .env files5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
  17. Agent Immune @denial-web/agent-immuneAI agent security: prompt injection detection, semantic memory, output scanning, prompt hardening4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
  18. Over-Reach Detector @choreoatlas/over-reach-detectorDetect when AI code changes exceed declared task scope (MCP server).3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
  19. Heimdall @caglarbozkurt/heimdallScan an MCP server or agent config for injection, exfiltration, and risky capabilities.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
  20. Gateway @bolyra/gatewayMCP auth gateway: verify agent identity, enforce per-tool permissions, block replays, emit receipts.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
  21. Clawvault @andrewszk/clawvault-mcp-serverAI agent payment security - spending limits, whitelists, and human approval.8% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
  22. AgentIAM @achilliesbot/agentiam-mcpStdio MCP wrapper for AgentIAM's 18 x402 endpoints — agent safety + intelligence on Base.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from a package registry.
  23. Zentric Protocol @zentricprotocol/zentric-protocol-mcpPrompt injection + PII detection for LLM apps and agent pipelines. Deterministic, sub-25ms.11% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
  24. Proof Layer @world-999-labs/proof-layerSigned, hash-chained provenance receipts for AI agent actions.10% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.