AI agent governance MCP servers

A server here enforces policy on, approves, audits or restricts what AI agents are allowed to do.

Not here: servers that are merely used by agents.

1,865servers
740 remote1,125 localTagged by Odel's AI, which can make mistakes

Best fit

1,131 made for this, ranked by starsRemoteLocal
  1. Mund — MCP Security Scanner @tyox-all/mundScan for prompt injection, secrets, PII, and vet MCP servers before installation15% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
  2. Safehold @spacetime-technology/safeholdLocal, encrypted MCP vault for passports, IDs, visas and photos. You control access.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
  3. Constraints Registry @sureshkhemka/constraints-registryPolicy-as-code guardrails for AI coding agents, validated via OPA, Conftest, Checkov & Semgrep.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
  4. Data Compliance Classifier MCP @ojaskord/data-compliance-mcpClassify data safety before storing or sharing. GDPR, HIPAA, PCI-DSS, CCPA. AI-powered.10% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  5. Vectordecisions @nikitadatar/vectordecisions-mcp-serverAI Governance MCP Server - GATRI trust scoring, kill-switch, EU AI Act compliance for Claude5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
  6. Agent Guardrail MCP Server @jarvisonm4/agent-guardrailAction-level governance for AI agents -- control what they DO, not what they SAY7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
  7. CheckMCP @h129hj/checkmcpAudit any MCP server's security & quality — OWASP MCP Top 10 + explainable 0-100 MCP Score5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
  8. mcp-crewd-rs @dionanos/mcp-crewd-rsCell fabric daemon: spawn and coordinate Claude/Codex/pi worker cells over MCP. Audited.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from a package registry.
  9. Sports Context Protocol @dswane/sports-context-protocolSelf-learning operational context layer for AI sports agents. Profile 001: golf.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
  10. Creedspace @creed-space/creedspace-mcp-serverConstitutional-AI safety guardrails for any LLM — personas, constitutions, adjudication.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
  11. Trust Gate @cwnapps/trust-gate-mcpPost-quantum, tamper-evident receipts for agent actions. Ed25519 + ML-DSA-65, offline verify.7% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  12. Veridion Nexus @brano80/veridion-nexusVeridion Nexus MCP server - GDPR Art. 44-49 runtime compliance for AI agents11% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
  13. Blast Scope @atharva-jayappa/blast-scopeContextual blast-radius scoring for shell commands an AI agent is about to run3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
  14. Agent Guild @agenttanuki/agent-guildRank agents; signed machine messages + wallet gates via x402; free verifiable agent passports.9% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  15. AI Firewall MCP @akhilucky/ai-firewall-mcpMulti-agent LLM security layer detecting prompt injection and jailbreaks.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
  16. 5dive @5dive-ai/5dive-mcpExpose the 5dive agent-fleet CLI (tasks, agents, digest) as MCP tools, over stdio or HTTP.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
  17. Doriku @doriku/task-managerShared control plane for AI coding agents — tasks, memory, decisions, file locks. 12 tools.9% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.
  18. BIGHUB @bighub/mcpDecision learning for AI agent actions. Evaluate, score, decide, and learn from outcomes.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
  19. MetaMesh-UGA @metamesh-uga/metamesh-ugaServerless edge control plane to discover, route and monetize 14,982+ MCP tools.11% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  20. Allowance MCP @useallowance/allowance-mcpSecure agent purchasing with human-approved virtual cards, receipts, and audit trails.6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
  21. Blackwall @blackwalltier/blackwallAPI-key pre-action risk gate: any irreversible agent action (money, SQL, delete, email).7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
  22. Veto — SQL Safety & Cost Oracle @vetosql/vetoDeterministic safety, correctness & cost gate that vets Postgres SQL before your AI agent runs it.3% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  23. Speko AI @speko/mcpManage Speko voice-AI agents, sessions, calls, phone numbers, knowledge bases, evals, and docs.5% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
  24. Dredd MCP @pduggusa/dredd-mcpPre-flight MCP security. Blocks compromised deps + tool drift. HMAC-signed. Dredd judges.25% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.