AI agent governance MCP servers

A server here enforces policy on, approves, audits or restricts what AI agents are allowed to do.

Not here: servers that are merely used by agents.

1,865servers
740 remote1,125 localTagged by Odel's AI, which can make mistakes

Best fit

1,131 made for this, ranked by starsRemoteLocal
  1. Pokes @pokes/pokesPoke your human for approvals and decisions during agent sessions — answered with one phone tap.9% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.
  2. Envcp @fentz/envcpEncrypted environment variable vault with AI access policies, keeping secrets safe from AI agents.8% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
  3. Vertical Flows @verticalflows/agent-gatewayView client requests, prepare actions and approve work within your firm's permissions.9% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
  4. Talk Arc Team Workspace @talkarcllc/app036-teamSee your team's status, delegate work, follow progress, and approve requests from your AI client.7% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  5. Do Not Act @donotact/donotactFail-closed guard clause for prediction-market agents before trade().9% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  6. Smolabot @arison8/smolabotDeterministic decision guardrail for AI agents and bots. Verifies pre-trade economics (long-only).5% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  7. AI Design Blueprint @aidesignblueprint/blueprintDoctrine and validators for governable agentic AI products.5% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  8. Agent Spend Guard — owner-set purchasing guardrails @a2awire/agent-spend-guardFree spend guardrails for AI agents: approve/deny/ask_user, caps, dupes.8% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  9. PromptGuard @promptguard/securityScan prompts for injection attacks, redact PII, and audit LLM SDK usage from any MCP client9% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
  10. Plith @plith/plithAI agent infrastructure: dedup, cost prediction, validation, governance, failure intelligence.5% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  11. BoundaryAI @boundaryai/boundaryaiDeterministic runtime safety for AI agents: scan PII, gate tool actions, verify LLM output.14% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.
  12. Agent Embassy @aemb/agent-embassyAgents pay for work and prove what happened.10% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  13. Varyntiq @mercadosclaro-eng/payguardPre-payment checks for AI agents: x402 quotes, untrusted prompts and audit receipts.12% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.
  14. Agent Purchase Verification @rfrost19/agent-purchase-verificationCheck if an ecommerce purchase meets buyer rules before payment. Returns PASS, FAIL, or REVIEW.6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  15. Focxle (retired listing): see com.focxle/b2b-agent-negotiation-governance @focxle/agent-payments-virtual-cardsRetired: Focxle no longer issues cards. Use com.focxle/b2b-agent-negotiation-governance.13% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  16. Agent Preflight @agent-preflight/agent-preflightBudgeted agent preflight: allow|block|reuse|defer|advise. Never executes destination tools. Free MCP5% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  17. FOXIFY Agent Authority + Payment Preflight @speeedy10/foxify-x402-agent-commerce-payment-preflightx402 agent preflight: exact action authority plus payment mandate, destination, expiry and replay.8% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  18. Elaichi @elaichi/mcpGoverned AI agents for the software your company already runs. 400+ connectors, one endpoint.11% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
  19. Burs-IA @soyeladice-svg/bursiaBurs-IA public MCP entry point for capability discovery, bounded routing and interoperability.6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  20. EGA V9 MCP @paibyun9/ega-v9-mcpMCP access path for EGA V9 execution governance9% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
  21. harmony-mcp @abduljabbarbxr/harmony-mcpRepo rules enforcement for AI agents. Checks diffs against repo conventions.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
  22. agentleFS @agentlefs/agentlefsAgent permissions for the files your team shares7% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
  23. X-EGO @x-ego/x-egoHuman approval for irreversible AI agent actions, bound to the exact tool call by a passkey tap26% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  24. Decision Integrity @wheelerhubbell/decision-integrityPaid x402 evaluator for evidence, warrant, provenance, and represented action authority.11% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.