- Conduid
- Marketplace
- #capability-based-security
MCP servers tagged capability-based-security
15 live MCP servers tagged "capability-based-security", ranked by trust score. Tags come from package metadata and repository topics, so this list covers servers across every category that work with capability-based-security.
Ryeos
A data-driven, cryptographically signed, registry-backed AI operating system, with capability-scoped execution and graph-executable workflows — living inside your projects, runnin…
Kinegrant Protocol
Open authorization and accountability infrastructure for physical AI: short-lived capabilities, local action gates, replay protection, signed receipts, post-quantum ML-DSA-65, fle…
Agent Kernel
Capability-based authorization and policy enforcement for agents using large MCP and A2A tool ecosystems.
Revl
A language for safe, universal spatiotemporal composability (Cordis paradigm) and orchestration.
Attenu Guard
In-process permission enforcement for AI-agent delegation chains: a sub-agent never holds more than its parent's authority, with an offline-verifiable audit ledger. Python + TypeS…
Adtp
Cryptographic identity and delegation for AI agents — UCAN chains, RESTRICT mode (structurally impossible escalation), provably-complete cascade revocation. Single Go binary. Apac…
Gate
Runtime enforcement for MCP agents: capability manifests, session taint tracking, and a non-configurable rule-of-two trifecta invariant, with a hash-chained audit log.
Attenu Guard Ts
Attenu Guard for TypeScript — per-agent permissions on every tool call and sub-agent handoff (a sub-agent never holds more than its parent) with a hash-chained audit log verified…
Kernos
An open engine for company-wide LLM agent automation. Agents work inside a signed remit, stop at the policy gates you set, and keep running unattended for months.
Capbroker
A local, self-hosted capability broker for AI agents -scoped, signed, expiring capability tokens instead of raw API credentials.
Elliott
Standalone TypeScript framework for composing secure personal AI agents from one universal primitive — the Component. Manifest-first discovery, capability grants, orthogonal model…
Burling
AIP conformance validator and IBCT chain auditor. Tracks draft-prakash-aip-00.
Aindy Runtime
Self-hosted runtime for AI agents and workflows. Durable execution, capability-gated tools, human approval gates, and a memory system that accumulates. Runs survive restarts and r…
Telekey MCP
Capability passports for MCP agents — delegated authority that can only narrow, never widen. A 2026 revival of General Magic's 1994 Telescript permit model.
Leasebroker
Local-first broker issuing time-bounded, least-privilege capability leases to AI agents and MCP servers — signed, scoped, expiring; deny-by-default with audit and human veto.