Audit, receipts & provenance MCP servers
274 listed servers in Agent safety & governance. Each row shows the automated checks, the secrets asked for and an install command.
No keys needed, every check passed
- reverse-shield7/7Runs locally
- Agenda Intelligence MD8/8Runs locally
- BioMASS ODE Model Builder7/7Runs locally
- CircuitAgent7/7Runs locally
- Span7/7Runs locally
Banco Central do Brasil (BCB) — SGS Time Series MCP Server8/8Runs locally- ProofCheck4/4Hosted
- Verify MCP (AgentBook verification)7/7Runs locally
- webability8/8Runs locally
- iotaudit7/7Runs locally
Audit, receipts & provenance servers 274
Now showing are unlisted. These entries didn't pass our listing filter: no source repo, a very short or duplicated description, or a publisher with 100+ servers. Same automated checks, shown as-is. How we check
| Type | Secrets | Version | Actions | ||||
|---|---|---|---|---|---|---|---|
★ 1 io.github.GuardBee/reverse-shield Audits shipped apps for how easily they can be reverse engineered | 7/7All passed | 67health of 100 | npmRuns locally | Noneno keys asked | 0.2.0 | ||
★ 8 io.github.vassiliylakhonin/agenda-intelligence-md Evidence-readiness MCP server: validate, audit, and score briefs, memos, and evidence packs. | 8/8All passed | 57health of 100 | PyPILocal or hosted | Noneno keys asked | 1.22.0 | ||
★ 20 io.github.marcorusc/BioMASS Construct, inspect, visualize, and simulate evidence-backed ODE models with BioMASS | 7/7All passed | 59health of 100 | PyPIRuns locally | Noneno keys asked | 2.5.2 | ||
★ 1 io.github.mo9652962-ai/circuit-agent-client AI hardware synthesis: CircuitBlocks DSL, live LCSC parts, industrial DFX audit, stdio MCP server. | 7/7All passed | 65health of 100 | PyPIRuns locally | Noneno keys asked | 0.24.0 | ||
★ 3 io.github.koda-ai-studio/grc-lake Read-only connectors; local writes. Evidence and assessments for agents. Only people approve. | 7/7All passed | 72health of 100 | PyPIRuns locally | 1secret asked | 0.3.20 | ||
io.github.pontivus-com/span Codebase understanding stored with its evidence, marked stale when that evidence changes. | 7/7All passed | 64health of 100 | PyPIRuns locally | Noneno keys asked | 0.8.3 | ||
★ 10 io.github.SidneyBissoli/bcb-br-mcp Banco Central do Brasil (BCB): SGS series, Focus expectations, PTAX, stats + provenance. 17 tools. | 8/8All passed | 68health of 100 | npmLocal or hosted | Noneno keys asked | 1.19.0 | ||
★ 1 io.github.GhostPawJS/souls Local cognitive identity engine with traits, behavioral evidence, and revision history. | 6/71 warning | 52health of 100 | npmRuns locally | Noneno keys asked | 0.4.5 | ||
★ 15 io.github.vaaraio/vaara-server Accountable autonomy MCP server: gating, tamper-evident audit for every action | 6/71 warning | 62health of 100 | PyPIRuns locally | Noneno keys asked | 2.16.0 | ||
★ 15 io.github.vaaraio/vaara Accountable autonomy proxy: gating, tamper-evident audit, time anchor for every action | 6/71 warning | 62health of 100 | PyPIRuns locally | Noneno keys asked | 2.16.0 | ||
sh.tokenzero/mcp LLM cost optimization gateway, repo token-waste auditor & model arbitrage MCP server. | 8/8All passed | 56health of 100 | npmLocal or hosted | 1secret asked | 0.2.8 | ||
★ 9 io.github.dizzlkheinz/ynab-mcpb Local-first YNAB MCP for reconciliation, receipt splitting, safe cleanup, and spending analysis | 7/7All passed | 58health of 100 | npmRuns locally | 1secret asked | 0.31.0 | ||
io.github.something-agent/proofcheck Free x402 offer/receipt checker: verifies signatures and whether the signer fits the host. | 4/4All passed | 48health of 100 | RemoteHosted | Noneno keys asked | 0.1.0 | ||
io.github.niclydon/verify-mcp Verify AgentBook registration and operator attestations for agent wallets on World Chain. | 7/7All passed | 53health of 100 | npmRuns locally | Noneno keys asked | 0.2.1 | ||
io.github.snayyar00/webability Free WCAG 2.2/ADA/508 accessibility MCP: scan, AI fixes, verify, vision audit, localhost tunnel | 8/8All passed | 53health of 100 | npmLocal or hosted | Noneno keys asked | 1.10.1 | ||
★ 1 io.github.tersignhq/evidence The record layer for the machine age: counter-signed receipts and agent action records. | 7/7All passed | 54health of 100 | npmRuns locally | 2secrets asked | 0.6.8 | ||
★ 1 io.github.emirmrkaljevic/iotaudit Audit your own smart-home devices: destinations, encryption, open ports, A-F grade. | 7/7All passed | 55health of 100 | PyPIRuns locally | Noneno keys asked | 0.1.11 | ||
★ 1 io.github.GuardBee/mcp-server-auditor Scans MCP server tool definitions for excessive agency, injection sinks, hardcoded secrets | 7/7All passed | 66health of 100 | npmRuns locally | Noneno keys asked | 0.3.0 | ||
★ 1 io.github.GuardBee/oauth-auditor Scans MCP server auth code for OAuth 2.1 anti-patterns: token passthrough, missing audience | 7/7All passed | 66health of 100 | npmRuns locally | Noneno keys asked | 0.4.0 | ||
★ 47 io.github.zhuyansen/backlink-guard Vet link sources before you submit, verify listings, and audit your backlinks for link spam. | 7/81 warning | 57health of 100 | PyPIRuns locally | 3secrets asked | 0.11.0 | ||
com.offnadir-delta/mcp From first signal to satellite evidence: live world-event intelligence and collection planning. | 3/3All passed | 52health of 100 | RemoteHosted | Noneno keys asked | 5.11.0 | ||
io.github.violetclaire/popcorn-mcp Witness layer for agents: signed receipts binding a fingerprint to a witnessed time. $0.001. | 8/8All passed | 52health of 100 | npmLocal or hosted | 1secret asked | 0.1.6 | ||
io.github.Egoushka/chargehand Runs coding-agent workers on a codebase question; every claim in the answer carries evidence. | 4/4All passed | 41health of 100 | NuGetRuns locally | 2secrets asked | 0.19.3 | ||
★ 7 com.soflution/mcphub One MCP endpoint for all your servers: a few meta-tools, Keychain secrets, sandbox, audit, OAuth. | 5/61 warning | 47health of 100 | MCPBRuns locally | Noneno keys asked | 5.9.1 | ||
io.github.SemanticDataCharter/sdcreceipt Verify and settle VSL Settlement Receipts. Verification needs no network and no account. | 7/7All passed | 62health of 100 | PyPIRuns locally | Noneno keys asked | 4.3.4 | ||
io.github.cdonoyan/shuka Universal trust attestation for AI agents: create, verify, and negotiate Shuka trust proofs. | 7/7All passed | 52health of 100 | npmRuns locally | 1secret asked | 2.2.0 | ||
io.github.tokenzero-ai/tokenzero LLM cost optimization gateway, repo token-waste auditor & model arbitrage MCP server. | 4/4All passed | 43health of 100 | RemoteHosted | Noneno keys asked | 0.2.2 | ||
com.sourcey/sourcey Find startup credits and deals; check eligibility and read Agent Readiness reports with evidence. | 4/4All passed | 43health of 100 | RemoteHosted | Noneno keys asked | 1.3.15 | ||
io.github.AHEDMUNI/resultgate Local service recommendations for six providers, disclosed referrals and evidence checks. | 7/7All passed | 62health of 100 | PyPIRuns locally | Noneno keys asked | 0.3.1 | ||
★ 4 io.github.rodri-oliveira-dev/complexity-analysis Analyze C# complexity, inspect member evidence, and compare deterministic snapshots. | 4/4All passed | 67health of 100 | NuGetRuns locally | Noneno keys asked | 1.0.0 | ||
★ 1 io.github.ellmos-ai/ellmos-controlcenter-mcp MCP control plane: discovery of servers, tools and skills, profiles, audits, gated tool gateway. | 7/7All passed | 62health of 100 | npmRuns locally | Noneno keys asked | 0.7.4 | ||
★ 4 io.github.layervai/qurl-mcp Mint, resolve, audit, and rotate scope-limited expiring access links (qURLs) for AI agents. | 7/81 warning | 58health of 100 | npmRuns locally | 3secrets asked | 0.8.3 | ||
dev.zambo/zambo The verifiable work layer for AI. Every run returns a verifiable receipt. No key needed. | 4/4All passed | No data | RemoteHosted | Noneno keys asked | 4.1.1 | ||
io.github.hsouf/cldf-mcp WALS typology joined with Glottolog classification, with provenance and family-aware counts. | 7/7All passed | 51health of 100 | PyPIRuns locally | Noneno keys asked | 0.1.0 | ||
io.github.ai-ronin-systems/appsec-toolbox-mcp Passive AppSec scanners as eight parameterless MCP tools; the audited repository is data. | 4/4All passed | 43health of 100 | DockerRuns locally | Noneno keys asked | 0.3.0 | ||
★ 714 io.github.Kentucky-ai/opentakeoff Construction takeoff for AI agents: load plans, set scale, measure, count, export with provenance. | 7/7All passed | 74health of 100 | npmRuns locally | Noneno keys asked | 0.9.100 | ||
★ 5 io.github.tomjwxf/veritasacta-verify Offline receipt verifier. Ed25519 signature verification without contacting any server. | 6/71 warning | 53health of 100 | npmRuns locally | Noneno keys asked | 0.11.1 | ||
io.github.NOETRA2/noetra Local-first evidence tracking, formal logic checks and prerequisite planning for AI agents. | 7/7All passed | 52health of 100 | npmRuns locally | Noneno keys asked | 0.1.0-alpha.4 | ||
io.github.mrpkk/nidhipati Proof-of-spend and reserve checks for AI agents: receipts, spend audit, NAV, reconciliation. | 6/6All passed | 43health of 100 | DockerLocal or hosted | Noneno keys asked | 0.6.1 | ||
★ 2 io.github.SarutobiSasuke8/agent-handoff-mcp Bounded, auditable handoffs between AI agents through a local MCP server. | 7/7All passed | 60health of 100 | npmRuns locally | Noneno keys asked | 0.1.0 | ||
io.github.coredence/coredence Query a measured identity: its rules, the evidence behind each one, and the topics they belong to. | 3/41 warning | 39health of 100 | MCPBRuns locally | Noneno keys asked | 2.1.6 | ||
dev.sarnai/agent-output-verifier Independent schema and rule check of AI agent output before you pay. Signed attestation and receipt. | 4/4All passed | 51health of 100 | RemoteHosted | Noneno keys asked | 0.5.8 | ||
io.github.thomasisalwayslate/every-app-is-open-source Native reverse engineering with Ghidra and evidence on Apple Silicon macOS. Setup required. | 6/71 warning | 48health of 100 | PyPIRuns locally | Noneno keys asked | 0.2.0 | ||
io.github.dailydollar-bot/agent-bounty-feed Open, paid bounties AI agents can claim, verified hourly from funded boards and audit contests. | 4/4All passed | 43health of 100 | RemoteHosted | Noneno keys asked | 1.2.0 | ||
dev.getsnap/getsnap Screenshots, PDFs, visual diffs and accessibility audits, returned inline so a model can see them | 7/7All passed | 54health of 100 | npmRuns locally | 1secret asked | 1.14.5 | ||
★ 2 io.github.anandkaranubc/gitgoblin Discover open-source repositories worth your time and evidence-backed contribution opportunities. | 6/71 warning | 61health of 100 | npmRuns locally | 1secret asked | 0.1.7 | ||
com.botsrated/botsrated Signed checks of x402 sellers on Base and remote MCP servers, before your agent pays. | 4/4All passed | 53health of 100 | RemoteHosted | Noneno keys asked | 0.4.0-beta | ||
★ 1 io.github.kawal393/apex-psi-mcp Append-only evidence receipts for AI records: seal, verify, cite, chain-check, anchor status. | 7/7All passed | 60health of 100 | npmRuns locally | 1secret asked | 1.1.2 | ||
ai.augmentev/fabric-verify Signed, publicly logged records of what your AI agent did, with proofs anyone can check offline. | 8/8All passed | 52health of 100 | npmLocal or hosted | 1secret asked | 0.2.1 | ||
| 4/4All passed | 55health of 100 | RemoteHosted | Noneno keys asked | 1.3.2 |
Showing 1 to 50 of 274