MCP servers that ship as code — a repository or a package you install and run locally (usually over stdio). They have no hosted endpoint, so we cannot probe or grade them: instead each one shows its repository, install command, license, stars and when it was last updated.
Collected from GitHub repositories and npm, PyPI, Cargo, Go, Maven, NuGet and RubyGems packages tagged as MCP servers, the official MCP Registry, Docker's MCP catalog, ModelScope, Baidu MCP World, Cline and other public directories; one entry per repository. A server that also offers a hosted endpoint is listed under Remote instead. These entries are not counted in our reachability, verification or readiness statistics.
-
Enterprise-grade AI commerce gateway — MCP-native policy engine that makes any merchant safely transactable by AI agents. Explainable, bounded, and cryptographically audited.
★ 1 -
Model-Database-Protocolgithub.com/DorukYelken/Model-Database-Protocolupdated this year
Model Database Protocol — intent-based, secure database access for LLMs with schema validation, policy engine, data masking, and MCP server support
★ 8 -
ha-gatekeepergithub.com/antnewman/ha-gatekeeperupdated this year
A reliability-first MCP server for Home Assistant implementing the LLM-as-untrusted-advisor architecture with four-tier policy engine, hash-chained audit logging, and fuzzy entity validation.
MIT -
AI-powered local-first commerce engine — orders, inventory, payments, policies, and integrations
npm MIT OR Apache-2.0 -
Non-custodial, policy-checked execution engine for Hyperliquid (CLI + MCP for AI agents)
pypi MIT -
mdbpgithub.com/dorukyelken/mdbpupdated this year
Model Database Protocol — intent-based, secure database access for LLMs with schema validation, policy engine, data masking, and MCP server support
pypi MIT -
Secure, fully-featured MCP server for the Front Platform API — 26 tools, 200+ actions, OAuth support, configurable policy engine
npm MIT -
MCP server for Proxmox VE (PVE) and Proxmox Backup Server (PBS): API tools, SSH/guest-agent shell, policy engine, audit log
MIT -
Local-first, deterministic MCP server for IDA Pro/Home: 109 strict-schema reverse-engineering operations, evidence-backed findings, and policy-gated IDB edits.
NOASSERTION ★ 15 -
MCP server for Google Workspace — 53 tools for Drive, Docs, Sheets, Slides, Gmail. JSON policy engine, label-scoped access, lazy discovery. Rust.
Apache-2.0 ★ 1 -
Security-hardened MCP server for terminal access: deny-by-default policy engine, shell=False sandboxed execution, cwd jail, secret redaction, fail-closed audit log.
MIT -
constraints-registrygithub.com/SureshKhemka/constraints-registryupdated this year
MCP server giving AI coding agents (Claude Code, Cursor, Codex) a queryable source of engineering constraints — policy-as-code guardrails for AI-generated code, backed by OPA, Conftest, Checkov & Semgrep.
Apache-2.0 -
AI helpdesk agents with permissions enforced at the credential layer, not the prompt. Deterministic policy engine, hash-chained audit log, live Microsoft Entra tenant.
-
slopshopgithub.com/sneaky-hippo/slopshop.ggupdated this year
The Self-Hostable MCP Agent Runtime OS for the Computer-Use Era. 1,303 APIs across 82 categories, free evolving persistent memory (GraphRAG + episodic), zero-trust agent identity (NIST-aligned SPIFFE/SVID), computer use backend, MCP gateway + policy engin
npm MIT -
IGL, Identity Governed Logic: a governed identity graph, policy engine and signed audit chain for AI agents. Every answer cites its records; every action leaves a receipt. Runtime, platform API, MCP server and the id-me.ai site.
Apache-2.0 ★ 1 -
id.wisperagithub.com/gecochief/id.wisperaupdated this year
Passport & visa system for AI agent credentials. Detect, classify, and govern API keys, tokens, and secrets across MCP, OpenAI, Anthropic, LangChain, and more. Encrypted vault, policy engine, audit trails, delegation chains. Drop-in MCP server replaces plaintext credential storage.
MIT ★ 4 -
Cognitive reconstruction engine for AI agents — Python SDK + CLI. Loop-Ready Contract: cursor-paged settle feed (snapshot_transitions: next_cursor, horizon_tx, truncated) + structural causal model view (snapshot_scm); KARM contract surface: CognitiveSnapshot with laws/policies/failures/uncertainty, CognitiveStateProvider/Sink traits; LawExtractor; PolicyRegistry; MDL sparsity GC; 64-tool / 7-resource MCP; WAL-persistent. LangChain, AutoGen, CrewAI, MCP
pypi Apache-2.0 -
PrivacyScrubber PII Masking MCPno update data
Zero-Trust Data Sanitization (ZTDS) MCP Server for Claude Desktop, Cursor, Windsurf, and other AI clients. Automatically intercepts and redacts PII, credentials, and sensitive corporate data locally on your machine before they are sent to external LLMs. ### 🔒 100% Local & Airplane Mode Verified All sanitization runs inside local RAM. No data ever leaves your computer, ensuring compliance with GDPR, HIPAA, SOC 2, and internal GRC policies. Zero network calls, zero server logs. ### 🛠️ Supported Formats & File Types Locally parse and sanitize: - **Documents:** `.docx` (Microsoft Word) parsed locally with Zero-Server extraction. - **Code & Configs:** `.js`, `.py`, `.go`, `.rs`, `.json`, `.yaml`, `.ini`, `.env`, and source code files. - **Data & Logs:** `.txt`, `.log`, `.csv`, `.tsv`, `.md`, and plain text outputs. ### 🏷️ Redacted Entity Types - **Personal Data:** Names (`NAME`), Emails (`EMAIL`), Phone Numbers (`PHONE`). - **Credentials:** API Keys, passwords, tokens, SSH keys, database URIs. - **Identifiers (`ID`):** SSNs, Tax IDs, credit card numbers, and custom regex patterns. ### 🎛️ 22+ Specialized Industry Detection Profiles Specify detection rules tailored to your workload (requires PRO key): - **Engineering & IT:** `Dev`, `Tech`, `Security`, `Agents` - **Corporate & Operations:** `General`, `Bizops`, `Sales`, `Support`, `Marketing`, `Creative` - **Financial & Professional:** `Finance`, `WealthMgmt`, `Insurance`, `Accounting` - **Legal & Compliance:** `Legal`, `Compliance`, `CCPA`, `HR` - **Healthcare & Research:** `Medical`, `Pharma`, `Academic` - **Personal Use:** `Personal` ### 🔧 Available Tools - `sanitize_text` — Scrub PII/Secrets locally in text context. - `reveal_text` — Reversible token mapping (Original -> Token -> Original). - `sanitize_file` — Local sanitization of raw plain text and DOCX files.
smithery -
policy-pulse-mcpgithub.com/raviteja-pegata/policy-pulse-mcpupdated this year
Unified OPA/Gatekeeper, Kyverno, and Azure Policy MCP server
-
政策匹配引擎:结构化政策库 × 画像匹配 × Excel 导出 × MCP 服务。引擎与字段契约开源(AGPL-3.0),不附带政策数据,由使用者自行采集填入。
AGPL-3.0 -
guardrail-mcpgithub.com/rudimentall1/agent-guardrailupdated this year
A deterministic policy firewall for AI agent tool calls — blocks, warns, or allows based on rules you write, not a risk score.
pypi MIT License -
@authensor/mcp-servergithub.com/authensor/authensorupdated this year
Authensor MCP Server - Stripe, GitHub, and HTTP tools with policy enforcement
npm MIT -
CSL-Core: Deterministic Safety Layer for Probabilistic AI Systems
pypi Apache-2.0 -
Local admission gate for software agents. Rust, HTTP and stdio MCP integrations with policy, operator revocation and structured evidence.
Apache-2.0 ★ 5 -
matimo-cliactive
Matimo CLI — tool package manager & MCP server launcher
pypi MIT -
Policy-gated, air-gap-rooted signing for AI agents on Solana. Drop-in BaseWallet for Solana Agent Kit. The agent never holds the root key.
MIT -
A deterministic policy firewall for AI agent tool calls. YAML rules, no LLM calls, no risk scores. CLI + MCP server (advisory) + @enforce() decorator (unbypassable). MIT, 46 tests, zero network dependency.
MIT ★ 1 -
User-owned protection and a controlled MCP-to-WebMCP connection layer for agents acting on the web
-
mcts-gengithub.com/akuroiwa/mcts-genupdated this year
Generic MCTS Framework with AI-driven Policy/Value
GPL-3.0 -
constraints-registrygithub.com/sureshkhemka/constraints-registryupdated this year
Constraint Registry V0 — a queryable source of engineering constraints exposed over MCP.
pypi Apache Software License -
Remote approvals, policy checks, and execution evidence for unattended AI agents.
npm MIT ★ 318 -
MCP server for agent memory over HexxlaDB—ring retrieval, embeddings + lexical search, seams, facets, YAML persistence policy, localhost HTTP transport.
MIT ★ 5 -
claude-prompt-optimizer-mcpgithub.com/rishiatlan/prompt-optimizer-mcpupdated this year
The control plane for AI prompts — deterministic scoring, policy enforcement, audit & governance via MCP. Free tier included.
npm Elastic-2.0 -
Evidence-first GEO & SEO audits for AI assistants. Five MCP tools for HTML, structured data, crawler policies, sitemaps and before/after verification. Local-first. MIT.
MIT ★ 1 -
apache-polaris-iceberg-ai-mcpgithub.com/sankeerthnagapuri/apache-polaris-iceberg-ai-mcpupdated this year
Model Context Protocol (MCP) server for Apache Polaris. Enables AI agents and LLMs to interact with Polaris Catalog Management, audit data governance and access control (RBAC) policies, and perform Iceberg table inspections using PyIceberg.
MIT ★ 1