AI agent governance MCP servers

A server here enforces policy on, approves, audits or restricts what AI agents are allowed to do.

Not here: servers that are merely used by agents.

1,857servers
733 remote1,124 localTagged by Odel's AI, which can make mistakes

Best fit

1,125 made for this, ranked by starsRemoteLocal
  1. ActionGate @actiongate/actiongatePre-execution safety layer for autonomous agent wallets via MCP and x402.9% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  2. Atomadic Nexus @atomadic/atomadic-nexusAtomadic Nexus — trust layer for the agent economy. 32 tools: trust gates, x402, lineage, swarm.8% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
  3. Think @agentutil/think-mcpIntent security pre-flight checks for autonomous AI agents.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
  4. Weavz @weavz/weavzGoverned app access for AI agents: 1,000+ apps & 12,000+ tools via Code Mode MCP.13% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
  5. MCP Verify @sentinelsignal/verifyTrust, freshness, policy, and discovery layer for public MCP servers.6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  6. Heron @heronapp/heronSigned security scores for what an AI agent runs and reads: skills, MCP servers, prompts, tokens.10% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  7. Mgc Blackbox @zkeviny/mgc-blackboxA trusted local encrypted execution boundary for AI agents.10% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from a package registry.
  8. Bash Vet @temurkhan13/bash-vet-mcpVet LLM-emitted shell commands BEFORE execution. 26 destructive-pattern rules / 8 families.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
  9. QAE Safety Certification @tb8412/qae-safety-mcpDeterministic pre-execution safety certification for autonomous AI agents.8% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
  10. InsureLink @skewing1/insurelinkAI agent-to-agent SLA agreements on Base with insurance, reputation, and x402 payments.6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  11. Tool Filter MCP @respawn-app/tool-filter-mcpMCP proxy server that filters tools from upstream MCP servers via regex-based deny list6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
  12. Nogra @nograai/nogra-mcpVerify-before-done trust layer for AI-assisted work. 32 tools, local-first, no credentials.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
  13. Anchord (AnchorID) @nolenation04/anchordRead-only MCP for identity resolution and write guardrails.9% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.
  14. AgentBill @marketinglior-pixel/agentbill-mcpOne spend ceiling per agent job, as MCP tools. Bound to a task_ref you pass, not a calendar month.8% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
  15. Agent Guardrails @logi-cmd/agent-guardrailsMerge gates and safety checks for AI coding agents via MCP.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
  16. Infraveil Agent Guard @infraveilhq/agent-guardGate an AI agent's destructive actions behind human approval, with a tamper-evident log.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
  17. Infraveil Control Plane @infraveilhq/control-planeGovern your backend control plane from your AI agent - signed, human-approval-gated.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
  18. Agentwork @ferm-ai/agentwork-mcpOfficial MCP server for Agentwork — delegate tasks to AI agents with human-in-the-loop8% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  19. Almega @almega-ai/almega-mcpThe immutable delegation frame for AI agents: gate any sensitive action, human-in-the-loop.9% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
  20. Javelin Guardrails @abhijitjavelin/javelin-guardrails-mcp-serverAn MCP server that provides Javelin Standalone Guardrails9% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.
  21. Boundary Guard x402 @larrylemonbot/boundary-guard-x402MCP tools for x402 readiness, paid-path probes, launch packs, and trust receipts.9% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  22. Agent Sudo @kisyntra/agent-sudo-mcpMCP adapter for Agent_Sudo: authorization, delegation, provenance, and audit for AI agents.15% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
  23. Aegis Policy @evozim/aegis-policyGovernance firewall and safety guardrails oracle for AI swarms.24% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.
  24. Averta MCP Gateway @averta/mcp-gatewayGoverned access to enterprise SaaS tools through Averta MCP agents.9% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.