Guardrails & policy MCP servers
201 listed servers in Agent safety & governance. Each row shows the automated checks, the secrets asked for and an install command.
No keys needed, every check passed
Guardrails & policy servers 201
Now showing are unlisted. These entries didn't pass our listing filter: no source repo, a very short or duplicated description, or a publisher with 100+ servers. Same automated checks, shown as-is. How we check
| Type | Secrets | Version | Actions | ||||
|---|---|---|---|---|---|---|---|
io.github.tanishq-ctrl/governance-gateway Deadline-aware governance for AI agents: PII scan always, safety check if it fits the deadline | 7/7All passed | 52health of 100 | PyPIRuns locally | Noneno keys asked | 0.1.1 | ||
io.github.d3ltasecurity/opnsense-guard-mcp Safety-first OPNsense firewall MCP: read-only by default, planned and auto-reverting writes. | 7/7All passed | 53health of 100 | PyPIRuns locally | 2secrets asked | 0.1.1 | ||
★ 17 io.mcp-hangar/hangar Policy enforcement plane for MCP: every tool call ends in a verdict. Self-hosted, MIT. | 6/71 warning | 73health of 100 | PyPIRuns locally | Noneno keys asked | 2.34.5 | ||
io.github.magicsword-io/magicsword-mcp Manage MagicSword endpoints, alerts, policies, and private intelligence through MCP. | 7/7All passed | 59health of 100 | npmRuns locally | 1secret asked | 0.1.4 | ||
io.github.HamdiM99/intentplane Gateway in front of MCP tools: critical arguments are checked against trusted sources and a policy. | 7/7All passed | 52health of 100 | PyPIRuns locally | Noneno keys asked | 0.5.3 | ||
★ 7 ai.getmarrow/marrow Approval gate and audit trail for AI agent actions: policy check first, proof after. Any MCP client. | 6/71 warning | 66health of 100 | npmRuns locally | 1secret asked | 3.9.108 | ||
★ 1 io.github.vardhjain/finos-mcp-aigf Read-only MCP for FINOS AI governance risks, controls and crosswalks. Independent project. | 7/7All passed | 54health of 100 | PyPIRuns locally | Noneno keys asked | 0.3.2 | ||
★ 8 io.github.svayatta/agent-custody MCP gateway that checks each agent tool call against a signed grant and policy, and signs a receipt | 7/7All passed | 72health of 100 | npmRuns locally | Noneno keys asked | 0.12.0 | ||
★ 3 io.github.kapella-hub/firekeep Self-hosted operating layer for AI agents: knowledge, continuity, coordination, and governance. | 6/71 warning | 51health of 100 | PyPIRuns locally | Noneno keys asked | 1.8.2 | ||
★ 5 io.github.kironovlaziz-del/provenza Governed MCP gateway: approved tools only, each call policy-checked and recorded per agent | 7/7All passed | 65health of 100 | PyPIRuns locally | 1secret asked | 0.2.1 | ||
★ 13 io.github.Rul1an/assay-mcp-server Policy-enforcing MCP proxy with portable evidence output. | 6/6All passed | 60health of 100 | MCPBRuns locally | Noneno keys asked | 6.17.0 | ||
★ 1 io.github.dockndevai/mcp-keycloak Keycloak admin for AI agents — realms, users, clients, roles; safe-by-default governance. | 7/7All passed | 54health of 100 | npmRuns locally | 1secret asked | 0.3.3 | ||
★ 1 io.github.dogrucanemek-alt/cedulon Policy-gated agent spend with signed receipts and rail-extract audit | 7/7All passed | 54health of 100 | npmRuns locally | Noneno keys asked | 0.16.0 | ||
★ 9 com.scopeblind/protect-mcp Fail-closed Cedar policy gate + Ed25519 signed receipts for agent tool calls. Denies on any error. | 6/71 warning | 56health of 100 | npmRuns locally | Noneno keys asked | 0.32.4 | ||
★ 7 io.github.heuristicolab/ctxfw Zero-egress AI Agent Firewall: SARA prompt injection defense, AST context pruning & MCP governance. | 6/71 warning | 52health of 100 | PyPIRuns locally | Noneno keys asked | 4.1.1 | ||
★ 2 io.github.SemanticDataCharter/sdcgovernance Governance validation for Semantic Data Charter instances; returns OASIS XACML decisions. | 7/7All passed | 55health of 100 | PyPIRuns locally | Noneno keys asked | 4.3.1 | ||
★ 3 io.github.Xxx91n/mcp-for-maya AI agents' spatial awareness inside Autodesk Maya: audit, rollback safety, visual loop (Beta) | 7/7All passed | 69health of 100 | PyPIRuns locally | Noneno keys asked | 0.6.0 | ||
★ 31 io.github.knaisoma/data-olympus Governance-grade knowledge-base format (OKF-compatible) plus CLI and single-writer MCP server | 6/71 failed | 40health of 100 | PyPIRuns locally | Noneno keys asked | 0.11.4 | ||
★ 1 io.github.kanywst/mcp-opa-authz Authorization answers from real policy code: evaluate Rego locally, or ask an AuthZEN 1.0 PDP. | 4/4All passed | 45health of 100 | DockerRuns locally | 1secret asked | 0.6.2 | ||
io.github.ai-ronin-systems/makefile-mcp Expose trusted GNU Make targets as governed MCP tools without a generic shell. | 6/71 warning | 47health of 100 | PyPIRuns locally | Noneno keys asked | 0.3.0 | ||
| 7/7All passed | 62health of 100 | npmRuns locally | Noneno keys asked | 1.1.1 | |||
★ 32 io.github.quantamixsol/graqle Graph-powered codebase reasoning, impact analysis, and governance tools over MCP. | 6/71 warning | 51health of 100 | PyPIRuns locally | Noneno keys asked | 0.87.1 | ||
io.github.Lynn-hh/armguard-mcp Safety-first MCP server for ROS 2 robot arms: server-side safety envelope, human approval, audit | 7/7All passed | 51health of 100 | PyPIRuns locally | Noneno keys asked | 0.1.1 | ||
★ 1.3k io.github.sipyourdrink-ltd/bernstein The open-source governance layer for AI agents. Byte-identical run receipts, 40+ adapters, air-gap. | 6/71 warning | 76health of 100 | PyPIRuns locally | Noneno keys asked | 3.23.0 | ||
io.github.kaito3636/x402-presign-guard Pre-sign EVM tx/approval safety for AI agents: decode calldata, flag drainers, return GO/HOLD/BLOCK. | 7/7All passed | 58health of 100 | npmRuns locally | Noneno keys asked | 0.1.1 | ||
★ 1 io.github.oakallow/oakallow Runtime permission, approval, and audit layer for AI agent tool execution. | 3/3All passed | 45health of 100 | RemoteHosted | Noneno keys asked | 1.1.0 | ||
io.github.delentia-labs/delentia-mcp Advisory MCP tools: policy score, reasoning checklist, compression. To enforce, use delentia-guard. | 7/7All passed | 52health of 100 | npmRuns locally | Noneno keys asked | 2.1.2 | ||
com.manusights/manusights Check if references exist or were retracted, look up journal AI policies, and preview manuscripts. | 4/4All passed | 45health of 100 | RemoteHosted | Noneno keys asked | 1.1.0 | ||
★ 3 io.github.calllint/calllint Static preflight safety gate for MCP servers — scan configs before you run them. Never executes. | 7/7All passed | 65health of 100 | npmRuns locally | Noneno keys asked | 0.2.1 | ||
io.sylai/guardian Causal guardrail: pass/caution/hold verdict on a causal claim before an agent acts. | 4/4All passed | 45health of 100 | RemoteHosted | Noneno keys asked | 0.3.0 | ||
★ 3 io.github.fitzyracing1/superuser Permission-gated superuser (sysadmin) MCP agent with enterprise guardrails and audit. | 7/81 warning | 47health of 100 | PyPIRuns locally | 3secrets asked | 0.1.0 | ||
★ 1 io.github.DeltaX-Public/deltax-preflight Check finite candidate proposals against separate policy and evidence, with canonical hash receipts. | 5/61 warning | 41health of 100 | MCPBRuns locally | Noneno keys asked | 0.1.0 | ||
io.github.Poseidon-t/safestreets Walkability and pedestrian safety for any US address: scores, neighborhoods, deadly roads. | 4/4All passed | 43health of 100 | RemoteHosted | Noneno keys asked | 1.0.0 | ||
★ 1 ai.achromat/mcp-server Recall and calibrate agent tool calls against verified policy lessons from Achromat MOM. | 8/8All passed | 58health of 100 | npmLocal or hosted | Noneno keys asked | 0.1.3 | ||
★ 2 io.github.brainsparker/frugal The open routing layer for AI tools: tool calls routed per policy, decision on every result. | 7/7All passed | 62health of 100 | npmRuns locally | Noneno keys asked | 0.2.0 | ||
io.github.nolll77/agentic-ops Autonomous and governed SRE & MLOps control plane for AI agent platforms. | 8/8All passed | 51health of 100 | PyPILocal or hosted | Noneno keys asked | 0.1.14 | ||
★ 12 io.github.WYRE-AI/cipp-mcp MCP server for CIPP — M365 multi-tenant management for MSPs (users, tenants, policies). | 4/4All passed | 61health of 100 | DockerRuns locally | 1secret asked | 1.11.1 | ||
io.github.farssaadeldin7-ux/generative-digital-twin Build a governed style profile from your own past work so a generative apprentice produces... | 6/6All passed | 43health of 100 | MCPBRuns locally | Noneno keys asked | 0.1.3 | ||
io.github.farssaadeldin7-ux/diagnose-by-sound Turn a described vehicle noise into a ranked, testable differential diagnosis with a safety... | 6/6All passed | 43health of 100 | MCPBRuns locally | Noneno keys asked | 0.1.3 | ||
★ 1 io.github.stand-out-of-my-sun/diogenes-agent-guardrails-mcp Autonomous agent guardrails, bash sandboxing, MCP rugpull diffing & prompt firewalls. | 4/4All passed | 47health of 100 | RemoteHosted | Noneno keys asked | 1.0.0 | ||
★ 30 io.github.7tg/django-admin-mcp Django admin models over MCP: CRUD, actions, history, autocomplete — capped by Django permissions. | 7/7All passed | 77health of 100 | PyPIRuns locally | Noneno keys asked | 0.11.1 | ||
★ 1 io.github.RostislavMatov/mcpcut Journals every MCP tool call with secrets redacted; with a policy, holds risky calls for approval | 6/71 warning | 48health of 100 | npmRuns locally | Noneno keys asked | 0.4.2 | ||
io.github.paul-salviani/trust-switchboard Read public privacy policies: dated source excerpts, follow-up questions and change comparisons. | 4/4All passed | 43health of 100 | RemoteHosted | Noneno keys asked | 1.1.0 | ||
★ 8 io.github.industrial-aiops/iaiops Governed OT data tap: 15 field protocols + cross-protocol RCA brain; audit + MOC gating. | 7/7All passed | 55health of 100 | PyPIRuns locally | 1secret asked | 0.32.0 | ||
io.github.mikusnuz/iptime-mcp Manage ipTIME routers through a local, safety-gated MCP server with firmware-aware capabilities. | 7/7All passed | 55health of 100 | npmRuns locally | 2secrets asked | 0.2.2 | ||
★ 14 so.helio/helio Open-source governance for MCP agents: useful autonomy without unlimited authority | 7/7All passed | 67health of 100 | npmRuns locally | Noneno keys asked | 0.16.0 | ||
★ 1 io.github.Toraastrta/sphior-ai-governance-mcp Record what your AI did as tamper-evident evidence for ISO 42001, EU AI Act and SOC 2. Hash-only. | 7/7All passed | 57health of 100 | npmRuns locally | 1secret asked | 0.2.1 | ||
★ 2 io.github.stand-out-of-my-sun/diogenes-gateway Autonomous AI microservices: 55 dynamic guardrails, contract audits & oracles via L402/x402/MPP. | 4/4All passed | 58health of 100 | RemoteHosted | Noneno keys asked | 1.2.0 | ||
io.github.bugiiiii11/rein Spend limits for AI agents that pay with x402: every paywall is policy-checked before a cent moves. | 7/7All passed | 60health of 100 | npmRuns locally | 2secrets asked | 0.8.0 | ||
★ 1 io.github.polymatx/opsgate The safety gate between AI agents and your servers: typed, policy-checked, audited ops tools. | 4/4All passed | 45health of 100 | DockerRuns locally | Noneno keys asked | 0.1.3 |
Showing 1 to 50 of 201