v0.1.0 · Apache 2.0
An MCP proxy that sits in front of bank tool servers, letting AI agents make read-only calls like balances and transactions while blocking payments, writes, renamed tools and argument smuggling. Each denial produces an Ed25519-signed receipt that can be verified offline.
— · Apache 2.0
Exposes a single authenticated MCP endpoint that federates to agents running on your own machines, letting you delegate coding jobs to be worked in fresh git worktrees and pushed to a branch, or proxy the stdio MCP servers installed there as tools. Agents dial out through a Cloudflare Tunnel and enforce your local policy, so no inbound ports are opened.
— · Apache 2.0
Exposes agent-facing tools that let a personal AI agent submit each proposed action for an allow, require_approval, or deny verdict against OWASP PAA10 policy rules, plus tools to record provenance-tagged memories, log refusals, read status, and trigger a self-stop. Its decisions are advisory unless paired with the project's gating proxy or hook, which enforce them.
— · MIT License
Enables agents to run multi-engine web searches, find GitHub repositories, and fetch web pages as Markdown with headless-browser fallback and automatic system-proxy support.
— · Apache 2.0
Publishes a weather MCP server that layers governance onto a working baseline: JWT scope checks on tools, logging with redaction, background tasks with progress and elicitation, and search/code-mode views of the same server. It also supports an in-process proxy provider and a packaged skill for agent-side discovery.