Human approval MCP servers

49 listed servers in Agent safety & governance. Each row shows the automated checks, the secrets asked for and an install command.

No keys needed, every check passed

Sort
How we check servers

Registry data fetched

Human approval servers 49

MCP servers, Human approval, newest updates first
Type Secrets Version Actions
io.github.ccheez34/agent-referee

Neutral tie-breaks between AI agents and sealed review of an agent's output, with signed receipts.

7/7All passed55health of 100npmRuns locally1secret asked0.1.0
io.github.phaedo-labs/phaedo-mcp

Make AI apps answer your way, check with you before acting, and get approvals on your phone.

7/7All passed54health of 100npmRuns locallyNoneno keys asked0.3.13
io.github.plureslabs/plures

Human in the loop for AI agents: ask ID verified people to check a decision before acting.

7/7All passed54health of 100npmRuns locally1secret asked1.3.0
io.github.sipkigroup/witness

MCP proxy: holds risky tool calls for passkey approval; signed receipts you can check offline.

7/7All passed66health of 100PyPIRuns locally1secret asked0.2.42
★ 1 io.github.privacyfence/privacyfence

Needs the PrivacyFence app from privacyfence.eu: human approval and audit for AI access to your data

5/61 warning60health of 100MCPBRuns locallyNoneno keys asked6.11.0
ai.topy/coo

Founders' AI COO: every AI cofounder's Routines on time — heartbeat, failures, approvals, reports.

8/8All passed52health of 100npmLocal or hosted1secret asked0.1.0
★ 1 io.github.GuardBee/rug-pull-detector

Baselines an MCP server's tools and detects tool-definition changes after approval

7/7All passed66health of 100npmRuns locallyNoneno keys asked0.3.4
★ 1 io.github.murtazox04/cue

Notify people through Cue: preferences, attention budgets, quiet hours and approval apply.

7/7All passed63health of 100PyPIRuns locally1secret asked0.6.0
★ 2 com.capyinc/capy

Startup cap table: ownership, SAFEs, vesting and round modeling, plus drafts for admin approval.

3/3All passed47health of 100RemoteHostedNoneno keys asked1.2.0
★ 2 io.github.The-Pixel-Boys/shield-kya

Audit trail and traceability for AI agents. MCP gate: evaluate, ingest, request approval.

7/7All passed56health of 100npmRuns locally1secret asked0.32.6
io.github.brunoreisportela/arrumou-neural

Manage vacation rentals, bookings, calendars and operations with OAuth and action approvals.

3/3All passed46health of 100RemoteHostedNoneno keys asked1.0.0
io.github.Opafex/mcp-approval-queue

Human approval gate for AI agents: risk-scored requests that only a person can approve

7/7All passed57health of 100npmRuns locallyNoneno keys asked0.2.0
★ 263 io.github.QVerisAI/mcp

Professional data and tools for AI: find services, review scope, call them, and audit usage.

8/8All passed84health of 100npmLocal or hosted1secret asked0.15.0
★ 122 io.github.BrightbeamAI/chap

Auditable records of human decisions over AI agent work. Approvals, edits, overrides, escalations.

7/7All passed79health of 100npmRuns locallyNoneno keys asked0.3.3
★ 1 io.github.lowrisk75/webkitui-mcp

Native WebKit for Mac. Human approval and persistent sign-ins. Requires the companion app.

5/61 warning51health of 100MCPBRuns locallyNoneno keys asked0.6.24
io.github.girishkvs/rostrum

Clean up talk recordings: find redos, retakes and dead air, review every cut, render and verify.

7/7All passed49health of 100PyPIRuns locallyNoneno keys asked0.1.0
io.github.payload-tools/revrule-mcp

RevRule by Payload: read entitlement graphs, review payout evidence, dry-run revenue events.

6/6All passed43health of 100MCPBRuns locallyNoneno keys asked1.1.0
★ 1 io.github.abhishekash/spanhound

Capture local agent traces and inspect failures, approvals, and run comparisons.

7/7All passed50health of 100PyPIRuns locallyNoneno keys asked0.6.1
★ 17 ai.withhuman/withhuman

Set up human approval for your AI agents' tool calls.

3/3All passed54health of 100RemoteHostedNoneno keys asked1.0.0
★ 1 io.github.abhishekash/mcp-trace-inspector

Read local agent-run JSONL traces through MCP for failures, approvals, and run comparisons.

4/4All passed55health of 100PyPIRuns locallyNoneno keys asked0.3.1
io.github.Phocinae/phocinae-mcp

Local Phocinae decision-engine MCP stdio server: fail-closed approval gate + classify/route/score.

7/7All passed49health of 100PyPIRuns locallyNoneno keys asked0.2.6
★ 3 io.github.onlsol/relay-remotify-mcp

Run shell commands on remote computers with optional per-command approval, using only curl and bash.

6/71 warning57health of 100npmRuns locally1secret asked0.6.2
★ 600 io.github.emiliaprotocol/mcp-server

Exact-action approval for consequential agent actions: request, track, and verify signed receipts.

7/7All passed68health of 100npmRuns locally1secret asked2.1.4
io.github.Craig-Horton/aibvf-mcp

AI BVF: review AI proposals with Stop, Fix or Accelerate, evidence gaps and next actions.

7/7All passed52health of 100npmRuns locallyNoneno keys asked0.14.14
★ 3 io.github.ericlovold/sanction

Approval and budget checks before agent spending or tool use. Cooperative MCP; host must ask.

8/8All passed64health of 100npmLocal or hosted1secret asked0.10.0
io.github.tarides/sudo-proxy

Privileged command execution proxy with human approval via pkexec or sudo

5/61 warning50health of 100CargoRuns locallyNoneno keys asked1.2.0
★ 223 io.github.node9-ai/node9

Access control for AI agents and MCP servers: allow, hold for approval, or block each tool call

7/7All passed84health of 100npmRuns locallyNoneno keys asked2.26.2
★ 1 io.github.4hmetuyar/rug-pull-detector

Baselines an MCP server's tools and detects tool-definition changes after approval

7/7All passed66health of 100npmRuns locallyNoneno keys asked0.2.1
io.github.quirna/mcp

Ask a human before your agent acts: approval requests decided on a phone.

7/7All passed50health of 100npmRuns locally1secret asked0.1.2
★ 27 io.github.CTRLRun/ctrlrun-mcp-operator

Answer CTRLRun approvals from an MCP client: list what is held, inspect it, grant or deny.

7/7All passed67health of 100PyPIRuns locallyNoneno keys asked0.12.2
★ 1 com.waitingforpower/energy-permitting-tracker

Tracks U.S. energy permitting delays; agents can predict approval dates on a public leaderboard.

3/3All passed55health of 100RemoteHostedNoneno keys asked1.2.0
io.github.usekaval/kaval

Verify the facts an agent's action depends on before it acts — ALLOW, REVIEW, or BLOCK.

7/7All passed57health of 100npmRuns locally1secret asked0.8.2
★ 1 group.raposa/raposa-mcp

Human approval for AI agents: a named person approves or rejects, silence is not consent.

7/7All passed57health of 100PyPIRuns locally1secret asked0.1.1
★ 2 io.github.felixpg13-glitch/spendshield

Authorization layer between AI agents and money: ALLOW/APPROVAL/DENY, budgets, audit.

7/7All passed56health of 100PyPIRuns locallyNoneno keys asked0.8.3
io.github.icohangar-ops/chp-mcp

Spend approval gate for AI agents: budget caps, HITL thresholds, signed audit hash.

7/7All passed54health of 100npmRuns locallyNoneno keys asked0.1.2
ai.authoryze/authoryze

Give your AI agent a spending limit: approval controls and single-use virtual cards.

3/3All passed42health of 100RemoteHostedNoneno keys asked1.0.1
★ 3 io.github.shin2344234/trmm-mcp

Read your TacticalRMM fleet; run commands only after per-command human approval.

7/7All passed54health of 100PyPIRuns locally2secrets asked1.1.0
io.github.Codecraft-Ops/taskmarket

Discover funded agent work and prepare approval-gated TaskMarket delegations.

5/61 warning41health of 100MCPBRuns locallyNoneno keys asked0.1.0
dev.1pass/logi-approval

logi Agent Approval Gate — human approval on the phone before high-risk agent actions.

7/7All passed51health of 100npmRuns locally2secrets asked0.1.2
io.github.LufeMC/kaval

Verify the facts an agent's action depends on before it acts — ALLOW, REVIEW, or BLOCK.

7/7All passed57health of 100npmRuns locally1secret asked0.7.1
★ 6 io.github.ex3lite/sber-mcp

Unofficial SberBank Online: read accounts and operations, transfer with human approval.

7/7All passed55health of 100PyPIRuns locallyNoneno keys asked0.6.4
io.github.KimHyeongRae0/orangerail

Turns your Prisma schema into typed MCP tools, with destructive writes gated behind human approval

7/7All passed61health of 100npmRuns locally1secret asked0.1.4
★ 3 io.github.githubscum/lotor

A local receipt and approval gate for AI agent sessions. The agent can act, but it cannot sign.

7/7All passed62health of 100npmRuns locallyNoneno keys asked1.0.2
★ 16 io.identark/gateway

Zero-secret MCP gateway for AI agents: risk-scored, audited calls with human-in-the-loop approval.

3/3All passed61health of 100RemoteHostedNoneno keys asked0.1.0
★ 2 io.github.Ringosystems/tractorbeeam-mcp

MCP server for Veeam Backup for Microsoft 365: read-only review + gated, audited restore tier.

4/4All passed40health of 100DockerRuns locally2secrets asked2.2.0
★ 33 io.github.agentkitai/agentgate

Human-in-the-loop approval gateway for AI agents over MCP: request, decide, approve.

7/7All passed64health of 100npmRuns locallyNoneno keys asked0.0.3
★ 1 io.github.BlueprintLabIO/tidebase

Inspect Tidebase agent runs, resolve approval gates, and trigger recovery from your AI assistant.

7/7All passed43health of 100npmRuns locallyNoneno keys asked0.1.1
io.github.eltociear/contract-guard-mcp

EVM contract/token risk check + ERC20 approval (proxy, EIP-7702, unlimited-allowance). Zero deps.

4/4All passed42health of 100DockerRuns locallyNoneno keys asked1.1.0
★ 4 io.github.DinanathDash/envault

Secure secret management with a Human-In-The-Loop (HITL) interceptor for agent mutations.

6/71 warning56health of 100npmRuns locally1secret asked1.12.0

Showing 1 to 49 of 49