- Conduid
- Marketplace
- #guardrails
MCP servers tagged guardrails
304 live MCP servers tagged "guardrails", ranked by trust score. Tags come from package metadata and repository topics, so this list covers servers across every category that work with guardrails.
Mastra/mcp
Fail-closed mcpindex trust gate for Mastra agents - check MCP tools against mcpindex.ai, the drift-monitored MCP server index, before your agent calls them.
AI Gateway
Labs to explore AI Models, MCP servers, and Agents with the AI Gateway powered by Azure API Management and Microsoft Foundry 🚀
Headroom
More human oversight can make an AI agent less safe. Headroom is a human-in-the-loop firewall for coding agents that measures when to trust the human: oversight as resource alloca…
Cowork Os
Rent the model. Own everything else. Free, open-source AI app for real work.
Spring AI Playground
Safe local execution layer for AI agent tools. Build and test-run MCP tools (no pass, no run), serve them from a built-in MCP server, and use them in Agentic Chat with RAG, human-…
Gate22
Open-source MCP gateway and control plane for teams to govern which tools agents can use, what they can do, and how it’s audited—across agentic IDEs like Cursor, or other agents a…
Rigour
The immune system for AI coding agents
Ragbits
Building blocks for rapid development of GenAI applications
Opencode Swarm
Architect-centric agentic swarm plugin for OpenCode. Hub-and-spoke orchestration with SME consultation, code generation, and QA review.
Guardrail
GUARDRAIL - MCP Security - Gateway for Unified Access, Resource Delegation, and Risk-Attenuating Information Limits
Leash
Keep your AI agents on a leash. API-layer policy engine for authorization, audit, and security features which includes deny-by-default, simple YAML rules, and tamper-evident logs.
Opencode Swarm
Architect-centric agentic swarm plugin for OpenCode. Hub-and-spoke orchestration with SME consultation, code generation, and QA review.
Doberman Core
Your AI's guard dog. Doberman sits at runtime, gating every input, output and tool call to stop unsafe or unintended actions before they execute.
Doberman Core
Your AI's guard dog. Doberman sits at runtime, gating every input, output and tool call to stop unsafe or unintended actions before they execute.
AI Gateway
Unified AI Gateway for 30+ LLMs (OpenAI, Anthropic, Bedrock, Azure etc) with Caching, Guardrails, A/B test & cost controls. Go-native Fastest & Scalable AI Gateway LiteLLM & Kong…
Tracekit
Tamper-evident tracing, policy gates and cross-checks for AI agents: see what the agent did, and why.
Trust Plane
Composable data security plane for Model Context Protocol. Pluggable layers — collect, analyze, guard — across 50+ enterprise providers. Open architecture.
Trust Plane
Composable data security plane for Model Context Protocol. Pluggable layers — collect, analyze, guard — across 50+ enterprise providers. Open architecture.
Secure Claude Code
Security guardrails for Claude Code, MCP tools, and Claude cowork workflows. Local-first modular YARA-style guard packs for secrets, exfiltration, prompt injection, MCP abuse, and…
Sponsio
Deterministic safety solutions for probabilistic AI agents
Prismor
Runtime security for Agents. Blocks dangerous commands, prevent secret leaks, stop prompt injection, gate risky package installs and visibility and control over tool calls.
Dsh Memory
白箱AGI架构探索：元认知（自我认知循环）、持续学习（知识飞轮）、世界模型（条件空间+语义时空图）、自我改进（自举纪律）、零LLM白箱管线与可审计信任护栏。
Preloop
The open-source AI agent control plane: MCP firewall, model gateway with budgets, human approvals, runtime observability, and audit trails
Guard
Node wrapper for the Armorer Guard local Rust scanner and MCP proxy.
Agentlint
Local guardrails for AI coding agents. Check proposed file changes and shell commands, block risky patterns, and return actionable feedback. Works with Claude Code, Codex, Cursor,…
Awesome Agent Observability
Curated list of tools, standards, and platforms for LLM and AI-agent observability: OpenTelemetry GenAI conventions, tracing, evals, guardrails, gateways, and MCP tooling.
AgentTrust
Deterministic safety floor for tool-using AI agents: pre-execution gating, SafeFix suggestions, attack-chain detection, opt-in self-learning LLM judge. Papers: arXiv 2605.04785, 2…
Jev Judge MCP
Typed judgment tools for MCP agents. TypeSafe's Jev model as verify, screen, find, classify, rerank, decide, compare, extract, review, gate, and score: the model judges, policy de…
Awesome Foundry Nextgen
Hands-on labs for Microsoft Foundry - Azure's unified PaaS for enterprise AI. Notebooks + Bicep covering provisioning, agents (incl. hosted Copilot SDK + REST), MCP, Foundry IQ kn…
Jes
Open-source guardrails for AI agents powered by decision models like Jev; checks prompts, retrieved content, tool calls and responses for prompt injection, jailbreaks and secret/P…
TrustGate
Open-source AI gateway for LLM and agent traffic — multi-provider routing, guardrails, semantic caching and MCP support. Written in Go.
Trustgate
Open-source AI gateway for LLM and agent traffic — multi-provider routing, guardrails, semantic caching and MCP support. Written in Go.
Squidbrake
Brakes for your AI agents: every tool call is checked against your rules, held for human approval when risky, and recorded in a tamper-evident audit trail. Works with Claude Code…
Jev Harness
Zero-dependency System One decision harness: 5 semantic gates saving frontier AI agent tokens on trivial errors & doom loops. Python + TypeScript + Rust. MCP-compatible.
LLM Shield Proxy
Streaming privacy for LLM apps: pii-leak-benchmark (does your gateway leak PII in streams?), chunk-invariance (one-line test for split-boundary leaks), mcp-ssrf-check, and a self-…
Avakill
🔪 Open-source safety firewall for AI agents. Intercepts tool calls before they execute, enforces YAML policies, and kills dangerous operations in real-time. Works with OpenAI, Ant…
IgorGanapolsky/ThumbGate
action gates via PreToolUse hooks. Install: `npx thumbgate`.
Clyro
Clyro is a governance platform for AI agents. While most tools let you watch agents fail, Clyro stops failures before they happen, catching infinite loops, runaway costs, and poli…
Aigis
Deterministic, zero-dependency Python firewall for AI agents — MCP rug-pull, memory poisoning, indirect injection, exfil channels. 44 compliance templates (US/CN/JP/EU).
JanuScope
Local-first MCP policy proxy. Tool-block, SQL-mutation gate, PII redact, audit, rate-limit, OpenTelemetry, vault secrets, first-use quarantine, schema pre-inject. No hosted gatewa…
Brigade
One local source for the MCP servers, tools, and memory your AI coding agents share, synced into each tool's native config with a review gate and a receipt for every change. No da…
Modelfuzz
🛡️ Runtime guardrails for AI agents. Intercept and block unsafe tool calls caused by prompt injection.
Contenox
An agent server. Agents, tools and models declared in files; every action checked against your policy before it runs. Any LLM, on your machine, Apache-2.0.
Torque
Keep Salesforce consulting work easy to resume and hand over: a private workspace per client and initiative for your coding assistant, with delivery workflows, change records and…
Sync Legacy
The agent harness you steer — structured context, automatic staleness gates, and block-by-block review, all bound to your code. Local-first, MCP-native, open source.
Sentinel AI
Real-time AI safety guardrails for LLM apps. 10 scanners: prompt injection, PII, harmful content, code vulnerabilities, obfuscation detection. Sub-ms latency. Python + TypeScript…
Spring AI Privacy Guardrails
Privacy guardrails for Spring AI: request-scoped PII tokenization and least-privilege disclosure across model/tool calls, with Presidio and JVM-local OpenNLP.
Vhk
VHK — AI 코딩 세션을 목표·증거·기억·규칙으로 묶는 한국어 CLI. 규칙 동기화, MCP 35 tools, verify/review/preflight 게이트.
Fak
Agentic Runtime
Lynx
Policy-gated, durable, audited execution for AI agent tool calls. Every action gets a five-verdict policy check, a crash-safe checkpoint, and a tamper-evident audit event — a libr…