- Conduid
- Marketplace
- #policy-as-code
MCP servers tagged policy-as-code
72 live MCP servers tagged "policy-as-code", ranked by trust score. Tags come from package metadata and repository topics, so this list covers servers across every category that work with policy-as-code.
Agent Control Plane
Read-only discovery and evidence-backed inventory for AI agents, tools, identities and MCP servers.
Verahelm Decision Envelope
Offline verifier and GitHub Action for signed, revision-bound change gates; the private decision engine is not published.
Biz Guard
Deterministic business-change safety gate for coding agents — evidence-backed BLOCK/ALLOW decisions
Authorization Bom
ABOM: a portable Authorization Bill of Materials schema and reference toolkit for human, workload, service, and AI-agent access
Agentcapdiff
AI agent security policy-as-code for detecting capability, permission, and least-privilege changes across MCP, OpenAI, Claude, LangChain, LangGraph, and CrewAI tools.
PermitWeave
Local-first, explainable runtime policy gateway for AI tool calls
CanaryNorth
Secretless MCP policy proxy with scoped capabilities and tamper-evident receipts
Obsigno
Runtime governance and tamper-evident audit evidence for AI agent MCP tool calls
Gateway Reference
Reference implementation of the MCP authorization spec (2025-11-25) for enterprise deployments: an OAuth 2.1 gateway that brokers Microsoft Entra ID, enforces three-layer OPA poli…
Barzel Central Gateway MCP Server
Enterprise Model Context Protocol governance gateway and MCP control plane for AI agent tool routing, identity-aware policy, risk scoring, approvals, routebooks, workflow simulati…
SprintLoop Assurance Kit
Independent release assurance for AI-built code. Model-neutral CLI, GitHub Actions, and read-only MCP bind evidence and finite human authority to an exact Git candidate.
Governed Agentic Security Operations
Enterprise reference architecture for governed Agentic SOC, MSSP, MDR, Cloud IR, and private/local LLM-assisted DFIR operations.
Policies
78 Cedar policies and 369 rules governing AI coding agents. Every rule traces to a real incident, published CVE, or compliance framework requirement (SOC 2, NIST, ISO 27001, E…
SMERC Runtime Permission Layer
Pre-execution recoverability control for AI agents, MCP tool calls, cloud automation, and high-impact workflows.
Agentic Covenants
A practitioner framework for autonomous-agent governance: six matrices mapped to NIST CSF 2.0, with working Kyverno policies, Falco rules, and kill-switch runbooks in every popula…
Opsforge
Forge your DevOps workstation: TUI installer for 287 CLIs, policy-as-code shell guards, CVE-correlated SBOM + OpenVEX.
Guarded Infra MCP
Read-only Kubernetes and AWS access for AI agents, behind a deny-by-default policy gate with a JSONL audit trail and eval suites that score both per-call block rate and whole-traj…
Terraform Guard MCP
The verdict is a Python comparison, so no wording in the plan argues it down — an MCP server that reads a Terraform plan and refuses to bless a dangerous one. 34 tests; all three…
Dvara Examples
Reference Docker Compose stacks, cloud deploy recipes, and SDK integration samples for the DVARA LLM Gateway
Agentpolicy
Cedar policy decision point: allow / deny / ask / rate-limit / redact
Authz
Reference middleware for composing Aiyo — the settlement-verified Economic Execution Authorization plane for autonomous systems — above an MCP server. Verify First. Execute Second.
Aiagent Portable Authorization
Reference implementation of policy-embedded credential authorization for AI agents (arXiv:2605.11487). Issue signed credentials with machine-evaluable constraints, verify at runti…