Search: safety
Search MCP servers and agent skills by name, description, category or topic — 70 results.
itsalissonsilva/ModelSafetyMCP
MCP server for scanning machine learning model artifacts for unsafe serialization, malicious model patterns, risky packaging, URL-based artifact scanning, and directory-level triage using ModelScan, PickleScan, and heuristic inspection.
subnetmarco/pgmcp
Natural language PostgreSQL queries with automatic streaming, read-only safety, and universal database compatibility.
bintocher/mcp-superset
Full-featured Apache Superset MCP server with 135+ tools for dashboards, charts, datasets, SQL Lab, security (users, roles, RLS, groups), permissions audit, and 30+ built-in safety validations. Supports HTTP, SSE, and stdio transports.
jnMetaCode/shellward
AI Agent Security Middleware & MCP Server with 8-layer defense including prompt injection detection, DLP data flow tracking, command blocking, and PII detection. 7 MCP tools, zero dependencies.
IgorGanapolsky/ThumbGate
MCP server that blocks AI coding agents from repeating mistakes — turns thumbs-up/down feedback into enforced pre-action gates via PreToolUse hooks. Install: `npx thumbgate`.
IgorGanapolsky/mcp-memory-gateway
Pre-action gates that prevent AI coding agents from repeating known mistakes. Captures explicit feedback, auto-promotes failures into prevention rules, and enforces them via hooks.
sekera-radim/impri
Human-in-the-loop approval inbox for AI agents. An agent submits a proposed action (send email, post comment, run a command) via `impri_push_action`, a human approves, rejects, or edits it from a web, mobile, or Slack/Discord/Telegram inbox, and the agent only proceeds on an approved decision. The gate is a data dependency, not a prompt. Full audit trail, self-hostable (MIT, Docker Compose). `npx
agentkitai/agentlens
Tamper-evident observability for AI agents: a SHA-256 hash-chained audit log with chain verification and signed export (EU AI Act Art. 12). Instrument any agent with zero code via `npx -y @agentlensai/mcp`; also ingests OpenTelemetry GenAI traces.
corebasehq/coremcp
A secure, tunnel-native database bridge for AI agents. Connects localhost & on-premise databases (MSSQL, etc.) to LLMs with AST-based query safety and PII masking.
sint-ai/sint-protocol
Security-first MCP governance proxy (`sint-mcp`) with capability tokens, T0-T3 approval tiers, fail-closed execution, and tamper-evident audit receipts. Includes a separate `sint-scan` CLI for preflight MCP tool-risk audits.
true402/mcp-server
Pay-per-call AI + web + on-chain tools for agents over x402 (USDC on Base) — no accounts, no API keys; the wallet is the identity. 11 tools incl. token rug/honeypot safety (0–100 score, risk band, buy/sell simulation), new-pairs / liquidity-pull / whale-swap signals, SEO/GEO audit, web extract, link preview, robots & security-headers checks, and LLM inference. Tools auto-discover from the live cat
Govcraft/rust-docs-mcp-server
Provides up-to-date documentation context for a specific Rust crate to LLMs via an MCP tool, using semantic search (embeddings) and LLM summarization.
hypurrquant/perp-cli
Multi-DEX perpetual futures trading MCP server for Pacifica (Solana), Hyperliquid (HyperEVM), and Lighter (Ethereum). 18 tools for market data, trade execution with dry-run safety, funding rate arbitrage scanning, portfolio analytics, and cross-exchange comparison.
AperionAI/shield
Local guardrail proxy for AI coding agents. Wraps any MCP server (stdio or Streamable HTTP) and blocks destructive tool calls — DROP TABLE, rm -rf, force-push — before they execute. MCP supply-chain protection: TOFU tool-catalog pinning against rug pulls, plus tool-description and tool-result scanning for tool poisoning and prompt injection. 51 starter rules, approval gates, audit logging. Single
kiro0x/five-mcp
LLM character consistency engine — generates structured JSON constraints from 4 multiple-choice questions about an AI's psychology. Drop the JSON into any LLM's system prompt to prevent persona drift; reduces inference cost from retries. 160,000 personality patterns; works with any LLM.
mbentham/SqlAugur
SQL Server MCP server with AST-based query validation, read-only safety, schema exploration, ER diagram generation, and DBA toolkit integration (First Responder Kit, DarlingData, sp_WhoIsActive).
lacs-project/sysknife
Security-hardened MCP server for Linux system administration via 189 typed actions instead of shell strings, with an Ed25519-signed hash-chain audit log, one-time TTL approval receipts, and automatic rollback. Works with Claude Code, Cursor, and Codex CLI.
babyblueviper1/invinoveritas
Lightning-native AI reasoning, decisions, persistent memory, and agent marketplace for autonomous agents. Pay-per-use via Bitcoin Lightning. Register free — 250 starter sats. Agents earn sats selling services (seller keeps 95%), DM each other, and run autonomously. `npm install invinoveritas-mcp`
bmdhodl/agent47
Runtime guardrails and incident read access for coding agents. Query AgentGuard traces, alerts, usage, costs, and budget health.
behrensd/mcp-firewall
Deterministic security proxy (iptables for MCP) that intercepts tool calls, enforces YAML policies, scans for secret leakage, and logs everything. No AI, no cloud.
twtrubiks/odoo19-mcp-server
MCP Server for Odoo 19 ERP using JSON-RPC API, built with FastMCP. Supports CRUD operations, model inspection, and user/company context with readonly mode and delete confirmation safety.
knowledgepa3/gia-mcp-server
Enterprise AI governance layer with 29 tools: MAI decision classification (Mandatory/Advisory/Informational), hash-chained forensic audit trails, human-in-the-loop gates, compliance mapping (NIST AI RMF, EU AI Act, ISO 42001), governed memory packs, and site reliability tools.
Acacian/aegis
Policy-based governance for AI agent tool calls. YAML policies, approval gates, risk assessment, and audit logging. Cross-platform: LangChain, OpenAI, Anthropic, MCP.
Chimera-Protocol/csl-core
Deterministic AI safety policy engine with Z3 formal verification. Write, verify, and enforce machine-verifiable constraints for AI agents via MCP.
loicfontaine-max/qorami-sdk
Check an email before an AI agent sends it: returns send / ask-a-human / block, with machine reason codes and prompt-injection detection.
jiezeng2004-design/PatchWarden
Local-first MCP safety and verification layer for AI coding agents with workspace confinement, command allowlists, scope-violation detection, and auditable task evidence. Install: `npx -y patchwarden@0.6.1`.
airblackbox/air-blackbox-mcp
EU AI Act compliance scanner for Python AI agents. Scans, analyzes, and remediates LangChain/CrewAI/AutoGen/OpenAI code across 6 articles with 10 tools including prompt injection detection, risk classification, and trust layer integration. The only MCP compliance server that generates fix code, not just findings.
ark-forge/mcp-eu-ai-act
EU AI Act compliance scanner that detects regulatory violations in AI codebases with risk classification and remediation guidance.
MAG-Cie/mcp-microsoft-todo
Microsoft To Do task management via Microsoft Graph API. MSAL device code flow (no client secret needed), persisted token cache, full MCP safety annotations.
alexar76/aimarket-plugins
aimarket-mcp-packager** hub plugin: turn AIMarket capabilities into self-hosted MCP servers (Docker image + `mcp_manifest` + Claude Desktop `mcpServers` config). Part of 15-plugin AIMarket Hub ([modelmarket.dev](https://modelmarket.dev)); protocol discovery at `/.well-known/ai-market.json`. Install: `pip install aimarket-mcp-packager`.
seob717/redash-mcp
Connect Redash to Claude — natural-language SQL with safety guards (blocks DROP/TRUNCATE, PII detection), BIRD-based smart table selection, plus saved queries, dashboards, widgets, and alerts.
camlowe/mcp-server-reddit-ads
Reddit Ads API v3 with working write operations and tiered write-safety controls (read, safe, spend). Manage campaigns, ad groups, ads, budgets, bids, and targeting, pull performance reports, and mint OAuth credentials with a built-in auth command.
chasdaddy/basescope
The read-only safety layer for onchain AI agents. 13 read-only tools on Base + EVM: token/contract safety (honeypot & rug-pull checks cross-referenced across GoPlus + honeypot.is), risky-approval detection, verified-source lookup, balances, ENS + Basenames, gas, and prices. No private keys, no required API keys. `npx -y basescope`
szhygulin/vaultpilot-mcp
Safety first. Hardware-verified DeFi for AI agents — designed for when the AI can be compromised. The agent proposes, you approve on your Ledger. Read balances + DeFi positions (Aave V3, Compound V3, Morpho Blue, Uniswap V3 LP, Lido, EigenLayer, MarginFi, Kamino) and prepare transactions across Ethereum / Arbitrum / Polygon / Base / TRON / Solana / Bitcoin; private keys never leave the hardware wa
RightOnPar-LLC/mesh-connector
Agent-to-agent capability exchange (MeshMarket): agents browse keylessly, self-onboard via mesh_signup, rent memory/reasoning/safety per call, list their own tools with mesh_publish, and settle in closed-loop credits on a debit-first ledger.
thehealthai/clarity-mcp
Condition-aware ingredient, product & supplement safety for agents, with provenance on every answer — a verdict, an evidence tier (Gold/Silver/Bronze), and a verifiable citation — across breastfeeding, pregnancy, histamine/MCAS, rosacea, HS, allergy and fertility lenses. 9 tools incl. validate_claim (fact-check a claim against curated cited sources) and check_recall (FDA/consumer recall lookup by
thehealthai/fda-risk-radar-mcp
The MCP server behind [Constat](https://constat.dev): FDA & NHTSA regulatory-risk intelligence for agents — device compliance risk by 3-letter product code, parsed 510(k) premarket evidence with verbatim source quotes, predicate chains, postmarket drift signals, clearance-to-payment reimbursement pathways (NTAP/CPT/CMS), and NHTSA vehicle safety. 14 tools. Decision support, not regulatory advice.
RajeevSirohi/mcp-server-terraform
Safety-first Terraform operations: plan/apply/destroy with two-step confirmation gates, plan risk & cost analysis that flags expensive always-on resources (NAT gateways, EKS, Azure Firewall), drift detection, import/taint/refresh, provider auth pre-flight checks, and audit logging.
Nikolife2016/pulsefeed-x402
Trust & safety layer for x402 agent payments: before your agent pays an x402 endpoint, verify it is safe — liveness, scam/anomaly scan (payTo hijack, bait-and-switch, honeypot), and on-chain receiver verification. ~70% of x402 endpoints are dead or scams; only ~half of "healthy" listings work. Free /verify + an open Trust Score. `npx -y pulsefeed-x402-mcp`
argosvix/mcp-server
Observability for AI agents: 87 tools to query LLM cost, errors, and latency across OpenAI/Anthropic/Gemini/Mistral, and operate alerts, budget gates, evals, and safety checks from Claude/Cursor. Install: `npx -y @argosvix/mcp-server`.
andrelaptenok/redmine-mcp-stdio
Search, read, create and update Redmine issues, projects and time entries from any MCP client. 12 tools with MCP safety annotations: full-text search, issue journals with attachments, comments and time tracking. `npx -y redmine-mcp-stdio`
helbertparanhos/easypanel-mcp-server
Full Easypanel control from Claude Code and Cursor — 37 tools for deployments, services, env vars, logs, domains, databases and monitoring. Safety guards require explicit confirmation for all destructive actions.
Chronolapse411/sicarius-guard
Solana token safety oracle for AI agents and trading bots. Byte-level SPL mint analysis, honeypot detection, freeze/mint authority checks, Birdeye market enrichment, and composite risk scoring. Deployed on Google Cloud Run.
zw008/VMware-NSX
VMware NSX network management — Segments, Tier-0/Tier-1 Gateways, NAT rules, static/BGP routing, and IPAM pools. 33 tools with dry-run preview, port-count safety checks, and double-confirmation for delete operations.