IAM Policy Autopilot is an open source static code analysis tool that helps you quickly create baseline AWS IAM policies that you can refine as your application evolves. This tool is available as a command-line utility and MCP server for use within AI coding assistants for quickly building IAM policies.

Enables agents to validate enterprise travel policies, audit hotel rate parity, and check carbon ESG compliance through a zero-dependency MCP server. It exposes policy and expense-auditing tools over STDIO JSON-RPC for use in Claude Desktop, Cursor, or other MCP runtimes.

Australian lender credit policy library and client files for mortgage and finance brokers.

Snowflake AI Kit: Cortex Code plugin for automatic Snowflake routing, envelope-based permission policy, and one-command installers for Snowflake CLI + Cortex Code CLI.

An MCP proxy that sits in front of bank tool servers, letting AI agents make read-only calls like balances and transactions while blocking payments, writes, renamed tools and argument smuggling. Each denial produces an Ed25519-signed receipt that can be verified offline.

Enables automated validation of corporate travel policies, hotel rate-parity audits, and carbon ESG compliance checks through MCP tools.

Open-source GRC toolkit from the GRC Engineering Club. Claude Code plugins for evidence collection, SCF crosswalks, multi-framework gap reports, OSCAL workflows.

TDD enforcement and guardrails for Claude Code, Codex, and GitHub Copilot CLI.

Claude Code-style declarative permission rules for DeepSeek Harness: ordered allow/deny/ask rules with tool-name, argument (glob/regex), and workspace-path matching on the tools/pre-execute waterfall, session-log audit, and HMR reload.

Access gate for AI coding harnesses (DSH plugin + Claude Code hook): per-directory deny/read/full, roster groups, audit log, model-facing tools with owner-approved widening.

Audit trail and traceability for AI agents. See what every coding agent did, block risky calls, ask a human for approval, and prove it with signed trust checks.

Merge autonomy for AI-authored code. Turn your repo's standards into evidence-backed readiness reports the agent reads back.

Governance standard and reference toolset for LLM-maintained knowledge corpora

Governance standard and reference toolset for LLM-maintained knowledge corpora

The agentic meta-harness — freeze the model, evolve the harness. An open runtime that routes each query to the cost-optimal model, evolves its own harness (planner/context/reviewer/retry/tool/memory/score policy) and autonomously repairs code, then orches

Run Azure compliance and security audits with azqr plus Key Vault expiration checks. Covers best-practice assessment, resource review, policy/compliance validation, and security posture checks. WHEN: compliance scan, security audit, BEFORE running azqr (compliance cli tool), Azure best practices, Ke

Remote-work assistant for DeepSeek Harness (DSH): SSH into any machine, pick a remote workspace, and work on it with 22 rw_* tools, conflict-aware SFTP mirror, embedded PTY terminal, port forwarding, and multi-hop jumps - under the same sandbox policy as a local session.

Assess and plan migrations from existing VPN, SWG, or SASE platforms to Cloudflare One, including policy mapping, parity gaps, and rollout.

Industry and company research domain pack for DeepSeek Harness: methodology skills, industry chain mapping, public-source policy/news tracking, company research cards, and auditable research reports. Research only - not investment advice.

Approval gate and audit trail for AI agent actions: policy check first, proof after. Any MCP client.

Produce an intensive, cited analytical report: executive summary, multi-angle findings, contrarian views, open questions, and full sources. Use only when the user needs rigorous synthesis of a complex topic (scientific, technical, policy, or market-analytical) that cannot be answered with a short se

Recall and calibrate policy-compliant tool-call arguments before execution. Does not run the tool.

Turn a written policy into rules a program can check, and get the same answer every time.

MCP server for Altmetric APIs - track research attention across news, policy, social media, and more