MCP server for SSH: let Claude Code, Codex and any MCP client run commands, transfer files and manage servers over SSH, with human approval, an encrypted vault and a live audit trail. Desktop app and CLI included.

Approval gate and audit trail for AI agent actions: policy check first, proof after. Any MCP client.

A gateway between AI agents and Postgres: table access, masking at the source, approvals and audit.

SEO agent: GSC, keywords, local rank tracking, Business Profile, AI visibility, approval-gated fixes

A local MCP server that places a safety layer between AI coding agents and Postgres, parsing every statement, holding risky or large writes for human approval, and journaling all activity on your machine. It enables one-command undo of individual agent-made changes and blocks destructive operations outright.

A free, read-only server that lets users diagnose production AI-agent risks: it flags over-privileged API keys from permission descriptions, scans code snippets for the signals that prevent duplicate execution, and explains guard patterns such as idempotency keys, approval gates, outboxes, and circuit breakers. It makes no network calls or writes, and rejects inputs that look like real secrets.

Create, review and schedule social content from your AI agent. Approval-first.

Your agent ships the app. Alerts, logs, project memory and approval-gated deletes come with it.

Self-hostable AGPL workspace where humans and AI agents share chat, tasks, knowledge, approvals, and MCP context.

Set up human approval for your AI agents' tool calls.

Opt-in, token-authenticated MCP server built into the Shelly Android terminal app: read-only tools for terminal output, git status, registered agents and repos on the phone, plus off-by-default run_command and write_file that need an on-device approval tap per call.

Give your AI agent a spending limit: approval controls and single-use virtual cards.

A single MCP gateway that lets every agent and login on your machines reach services like Notion, Sentry, Cloudflare, Gmail and Google Calendar after signing in once, with per-agent tokens. Calls that reach other people or can't be undone wait for approval first, and every call is logged.

Enables AI agents to make policy-scoped payments with spending caps, recipient allowlists, approval thresholds, instant revocation, and an append-only audit trail in a sandbox wallet.

A gateway MCP server that lets agents reach any upstream MCP server through one endpoint while enforcing policy rules, holding risky tool calls for human approval, containing prompt-injected sessions, and logging every call.

Enables CLI agents to fold source documents into a cited Markdown knowledge base using an ontology, exposing tools to list, read, search, lint, and write pages only after user approval.

Enables AI agents to read a user's SRCE Moodle account data, including grades, deadlines, calendar events, course files, forum posts, and messages, with optional private-message sending gated by phone approval. It can run as a Cloudflare Worker or self-hosted via Node or Docker.

Enables MCP-capable agent CLIs on macOS to reuse an installed, unmodified OpenAI Browser Runtime to drive a connected Chrome or Edge browser (or a host's in-app browser backend) through js, js_reset, and turn_ended tools. It stays a thin bridge that preserves the Runtime's approval and security boundaries, failing closed when the client cannot handle approval requests.

Enables any AI agent to work inside your own signed-in Chrome or Edge, with risky steps gated behind approvals the agent cannot skip, receipts for every action, routines that replay without the AI, and per-site packs that read a site's own data. Everything runs locally, so pages, cookies and passwords never leave your machine.

Audit trail and traceability for AI agents. See what every coding agent did, block risky calls, ask a human for approval, and prove it with signed trust checks.

Give a cloud AI agent (Arena.ai Agent Mode, Claude, Cursor, ...) controlled access to your own machine over HTTP/MCP: files, shell, Chrome and the macOS desktop, with an approval gate, trust windows and an audit log.

Enables an AI agent to sign, verify, encrypt, decrypt, and manage OpenPGP keys while private key material stays in gpg-agent and passphrases go only to pinentry. Adds human approval for high-risk operations, typed-fingerprint confirmation for destructive ones, and audit logging that never records plaintext.

Human-in-the-loop (HITL) for AI agents: ask a person for approvals or answers by push notification. One command connects Claude Code, Codex, Cursor, Gemini CLI and more.

Enables deterministic request screening and, after native owner approval, fixed-target DeadBolt enforcement actions such as kill, deny, revoke, and evidence retrieval through local stdio MCP. Model analysis can advise but cannot approve actions.