AI agent governance MCP servers

A server here enforces policy on, approves, audits or restricts what AI agents are allowed to do.

Not here: servers that are merely used by agents.

1,865servers
740 remote1,125 localTagged by Odel's AI, which can make mistakes

Best fit

1,131 made for this, ranked by starsRemoteLocal
  1. DropEngine x402 Agent Services @ahmet11159/x402-agent-servicesAI Agent Utility Layer for agent safety, web monitoring, crypto research and tool discovery.12% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  2. ScopeProof @davisvillelabs/scopeproofMachine-verifiable authorization checks for autonomous AI agents.6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  3. GovOmniAI Machine Services @omniaisystems/govomniai-machine-servicesBefore your agent acts, find missing evidence with GovOmniAI's 50-cent assurance check.14% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  4. Zambo @zambo/zamboTrust Layer for AI work. Give your AI hands. Every run returns a verifiable receipt. No key needed.14% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  5. SecureStamp Action Proof — Cross-Cloud Public Beta (Unverified) @securestamp/action-proofUNVERIFIED: cross-cloud beta; sandbox by default; production opt-in via customer Guardian.13% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
  6. SQLGuard — permission before production writes @sqlguard/sqlguardAI agents need permission before production SQL writes. Pilot $100 · Gateway $299. Lint≠authorize.26% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  7. Icme Preflight @wyattbenno777/icme-preflightJailbreak-proof AI guardrails. Automated Reasoning SMT solver, not an LLM. ZK proofs included.8% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  8. MUJ428 Trust Layer — VERIFY BEFORE ACT @wmujahid428-web/trust-layerMUJ428 verifies intent and evidence before consequential AI-agent actions.16% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  9. Agent Release Auditor @veyndrasystems/agent-release-auditorDeterministic release gate for AI-written code and coding agents.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
  10. aictrl @vasparshin/aictrlGovernance layer for AI coding agents: knowledge-graph grounding, session audit, policy controls.7% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
  11. Oracle H @tponscr-debug/oracle-hHuman approval gate for AI agents. Critical actions approved or rejected by a human via Telegram.8% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
  12. Tork Governance @torkjacobs/tork-governanceAI agent governance for MCP: PII detection, policy enforcement, compliance, and kill switch.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
  13. Tribunal @thebotclub/tribunalTribunal — Enterprise Claude Code plugin. TDD enforcement, quality gates, vault of rules and agents.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
  14. Agent Embassy @tacticalnoot/agent-embassyAgents pay for work and prove it. Verified checks $0.15, recovery $1.00. USDC on Base via x402.10% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  15. Silvanexum @silvanexum/silvanexumSpend control for AI agents - cost attribution, budget caps, and signed runs as MCP tools.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
  16. Agentpay @sdeanesh-png/agentpaySpending controls for AI agents: per-agent budgets, vendor allowlists, full audit trail.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
  17. ComOS Federation @ronrey/federationMulti-tenant MCP gateway for AI commerce. One connection, every store.10% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  18. FortFi Treasury MCP @rebelartists/fortfi-treasury-mcpPolicy-gated MCP treasury for AI agents — x402 subscribe, 50+ tools, multi-chain.12% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.
  19. AgentAuth @raditotev/agent-authIdentity and auth for AI agents: credentials, tokens, delegations, and permission checks.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
  20. Pretorin Compliance @pretorin-ai/pretorinAccess Pretorin controls, evidence, narratives, and local Plan-backed Campaigns from AI tools.11% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
  21. Agentos @pdaxt/agentosAI agent fleet orchestration runtime. Spawn, coordinate, monitor autonomous agents.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from a package registry.
  22. ClawTube @oogdevs/clawtube-mcpMinimal MCP server for ClawTube — a small, auditable control plane for skills and agents.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from a package registry.
  23. Mova Flat Runner @mova-compact/mova-flat-runnerGoverned AI workflows with human approval gates and audit trails for Claude and MCP clients.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
  24. BrainstormRouter MCP Server @justinjilg/brainstormrouterAI routing, memory, guardrails, and governance. Routes across Claude, GPT, Gemini.10% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.