1. Conduid
  2. Marketplace
  3. #guardrails
Tag

MCP servers tagged guardrails

304 live MCP servers tagged "guardrails", ranked by trust score. Tags come from package metadata and repository topics, so this list covers servers across every category that work with guardrails.

304
live servers
37
avg trust
76K
most stars
151

Agentrelay

MalyStern

Supervise an AI coding agent (Claude Code / Codex / ACP) overnight and keep control: block forbidden tool calls before they run, gate 'done' on real tests, checkpoint work to git,…

★ 1updated a month ago
34
152

Typesafe MCP

MarkChu-git

MCP server for TypeSafe AI's Jev: typed yes/no, choice and score answers with act / review / abstain gating.

★ 1updated 17 hours ago
34
153

Hallwright

kapitan00000978-sketch

Hallwright: Deterministic pre-commit guardrail, living project memory, and subagent orchestration for Claude Code, Cursor, Copilot, Antigravity, and AI coding assistants.

★ 1updated 14 hours ago
34
154

Nocap

xi029

No evidence, no answer. 🧢 System One evidence gate for RAG & AI agents: Jev / Laya / any LLM judges before your LLM speaks. MCP server, Python SDK, CI route tests.

★ 1updated 9 days ago
34
155

Warden

AlwaysReadyAllies

Drop-in security proxy for MCP — policy, tamper-evident audit, human approval, prompt-injection & secret-exfil defense. One line of config, zero code.

★ 1updated 3 months ago
34
156

Sun2Agent

snowhypers

Open-source AI agent CLI with native MCP support, Human-in-the-Loop approval, 5-layer security guardrails, and optional Docker sandboxing.

★ 1updated 6 days ago
34
157

AgentGuard

astecka-m

Protect AI agents by detecting and blocking prompt, command injection, Unicode bypass, and social engineering attacks with customizable security controls.

★ 1updated 5 days ago
34
158

Guardrail

Rosalyndfaithful716

Scan AI-generated code for security, performance, and code quality issues before they ship

★ 1updated 6 days ago
34
159

Shield

alexfraser-scotch

Zero-overhead runtime security proxy, reversible secret vault, and audit firewall for MCP servers (Cursor, Claude, Windsurf)

★ 1updated 11 days ago
34
160

Agent Action Gate

aisona-lab

Deterministic policy gates for AI agent tool calls: allow, deny, or require human approval.

★ 1updated 11 days ago
34
161

Orchestrator

magertron

Enterprise MCP Server Management

★ 1updated 8 hours ago
34
162

N2 Ark

Deterministic Guardrails for AI Agents. Ark acts as a logic-based firewall, preventing unauthorized actions through a rigorous rule engine. Ensure your AI behaves exactly as inten…

34
163

Agent Guardrails

Merge gates and safety checks for AI coding agents. Works with Claude Code, Cursor, Windsurf, Codex via MCP. Detect scope violations, missing tests, and risks before merge.

34
164

Acgs Lite

Constitutional governance infrastructure for AI agents — the missing safety layer between your LLM and production

34
165

sidclawhq/mcp-guard

no SDK needed.

34
166

Ingest API

FastAPI-based multi-agent orchestrator for Odoo. Uses a Semantic Router to dispatch intents to specialized agents via Model Context Protocol (MCP/FastMCP). Features Guardrails AI…

34
167

Groundwork

An agent that answers questions about AI engineering from a knowledge base about AI engineering, so every answer is also a worked example of the retrieval that produced it. LangGr…

34
168

IntentProbe

Activation-probe security scanner for AI agent tooling. Reads a model's internal activations to detect poisoned MCP servers, skills, and packages before install.

34
169

Terraform Guardrail

Terraform-Guardrail (TerraGuard) MCP is an open-source governance framework that enforces consistent, executable guardrails for Terraform across CI/CD pipelines—helping teams deli…

34
170

MCPBoundary

A local proxy that wraps your MCP servers and checks each tool call against policy and live state before it runs - allow, block, or request a refresh, with a reason the agent can…

34
171

Csc Agent Guard V1

Deterministic pre-execution safety gate for AI agents: verify tool calls against trusted evidence, policies, and WorldState before side effects.

34
172

Hyper

AI-authored, human-reviewable infrastructure automation. Nothing reaches the world unreviewed; nothing changes unseen.

34
173

Bedrock Ops MCP

MCP server: AWS Bedrock model capability lookup, feature pre-check, and PII-safe response redaction. Wraps bedrock-ops.

34
174

AI Roadmap

AL/ML learning Gym including traditional ML, deep learning, fine-tuning, Gen AI, Agentic AI. Everything from experiments to production with evaluation and observability.

34
175

Issa

Issa — Intelligence Server-Side Agent. Issa: An open-source Action-Control Gateway to stop AI agents from executing unauthorized side-effects.

34
176

Constitution Lint Action

GitHub Action that lints CLAUDE.md-style agent constitution files for missing operational guardrails — spend limits, injection defense, escalation paths, secrets rules

34
177

Imprest

Spend control & audit for AI agents — give your agent an allowance, not your keys. MCP server, non-custodial, x402.

34
178

Claude Code Invoice Guard

Deterministic guardrail (refuse, don't guess) for an LLM agent on a VAT-critical invoice workflow: skill + subagent + MCP server + PreToolUse hook. Portfolio/demo plugin.

34
179

AgentAction

Trust infrastructure for autonomous AI agents: decision assurance, action authorization, runtime controls, and verifiable lifecycle evidence.

34
180

Aop MCP

MCP server for Adverse Outcome Pathway (AOP) discovery, semantics, and draft authoring.

34
181

Agent Guardrails Spring Boot Starter

Security & governance guardrails for MCP agents in Java — audit trail, agent-to-tool authorization, prompt-injection detection and rate limiting as a zero-config Spring Boot start…

34
182

Resultseal

Deterministic observation-integrity contracts for AI-agent tool results. HTTP 200 is not an observation.

34
183

Project Guardian

AI Guardian Firewall — a local, user-space, agent-agnostic firewall that mediates an autonomous AI agent's actions (files, shell, network, services) with a deterministic policy bo…

34
184

Autoagent

Zero-dependency LLM agent runtime — tool use, MCP, sandboxed self-written tools, checkpoint/resume, approval gates, bi-temporal fact memory, code-level guards (context bounds, loo…

34
185

Orchestrion

Deterministic multi-LLM orchestration with grounded, verified answers, an editable guardrail gate, and a live process dashboard.

34
186

Itsm Agent

ORBIT - An Agentic AI ITSM assistant that can create and retrieve ServiceNow tickets, manage user sessions with memory persistence, answer ITSM knowledge queries, enforce ITSM-onl…

34
187

Planner Guard

A decision-layer guardrail for MCP agents. Gates tool calls by intent and logs the planner's reasoning. Complements MCP firewalls, doesn't replace them.

34
188

Ops Pilot

Production-grade multi-agent AI DevOps system for SRE incident response, where a central orchestrator coordinates 12 specialist agents to classify incidents, traverse service depe…

34
189

Qedra

A runtime gate for coding agents: an MCP server that blocks the tool calls that wreck a repo (force-push main, rm -rf, secret exfil, CI wipe) and lets real work through. Machine-c…

34
190

Ghl MCP Scoped

Least-privilege policy wrapper for any GoHighLevel MCP server. Declare which tools an AI agent may call and under what argument conditions; everything else is refused and logged.…

34
191

Ephorate AI Governance And Monitoring

Open-source control plane for AI agent security & governance — runtime policy enforcement, tamper-evident audit, prompt-injection detection (SIEM/EDR) and compliance mapping (NIST…

34
192

OmniDoc QA LLM RAG

Agentic NL-to-SQL assistant using Model Context Protocol (MCP) with multi-layer guardrails and token cost tracking.

34
193

Data Warden

Agente NL→SQL sobre un lakehouse con cinco anillos de control: guard de allowlist sobre el AST, presupuesto de coste estimado antes de ejecutar, enmascarado por rol y auditoría. S…

34
194

Bluerock Security

Bluerock Security — independent third-party profile of a public API surface, by API Evangelist. BlueRock Security is a runtime security, observability, and governance platform for…

34
195

Readonly SQL Guard

A provably read-only SQL guard for AI agents — drop it into any MCP server or database tool. Checks what a statement calls, not just its shape; measured against a public 28-attack…

34
196

Jv Watchtower MCP

Read-only MCP operations console over a 24/7 algorithmic trading fleet (sanitized portfolio extract). Sanitization is enforced in the data layer, so the strategy never reaches the…

34
197

Ccs Integrations

Framework-native adapters for CCS (Correctover Conformance Shape) cryptographically signed runtime receipts — Ed25519 + JCS signed audit evidence for AI agent tool calls (Pydantic…

34
198

Koboi Agent

Self-hostable AI agents you can actually leave running — durable crash-resume, governed autonomy, seccomp sandbox, offline-replayable workflows, CI-native eval. Async-Python, YAML…

34
199

Zguard AI Integrations

Central documentation repository for all integrations with Zscaler AI Guard

34
200

AI Security

Open-source, self-hosted Fastest AI security gateway for LLM and agent apps: guardrails, agentic PDP, semantic caching, MCP gateway.

34
← Previous Page 4 of 7 Next →