Human approval MCP servers
49 listed servers in Agent safety & governance. Each row shows the automated checks, the secrets asked for and an install command.
No keys needed, every check passed
Human approval servers 49
Now showing are unlisted. These entries didn't pass our listing filter: no source repo, a very short or duplicated description, or a publisher with 100+ servers. Same automated checks, shown as-is. How we check
| Type | Secrets | Version | Actions | ||||
|---|---|---|---|---|---|---|---|
io.github.ccheez34/agent-referee Neutral tie-breaks between AI agents and sealed review of an agent's output, with signed receipts. | 7/7All passed | 55health of 100 | npmRuns locally | 1secret asked | 0.1.0 | ||
io.github.phaedo-labs/phaedo-mcp Make AI apps answer your way, check with you before acting, and get approvals on your phone. | 7/7All passed | 54health of 100 | npmRuns locally | Noneno keys asked | 0.3.13 | ||
io.github.plureslabs/plures Human in the loop for AI agents: ask ID verified people to check a decision before acting. | 7/7All passed | 54health of 100 | npmRuns locally | 1secret asked | 1.3.0 | ||
io.github.sipkigroup/witness MCP proxy: holds risky tool calls for passkey approval; signed receipts you can check offline. | 7/7All passed | 66health of 100 | PyPIRuns locally | 1secret asked | 0.2.42 | ||
★ 1 io.github.privacyfence/privacyfence Needs the PrivacyFence app from privacyfence.eu: human approval and audit for AI access to your data | 5/61 warning | 60health of 100 | MCPBRuns locally | Noneno keys asked | 6.11.0 | ||
ai.topy/coo Founders' AI COO: every AI cofounder's Routines on time — heartbeat, failures, approvals, reports. | 8/8All passed | 52health of 100 | npmLocal or hosted | 1secret asked | 0.1.0 | ||
★ 1 io.github.GuardBee/rug-pull-detector Baselines an MCP server's tools and detects tool-definition changes after approval | 7/7All passed | 66health of 100 | npmRuns locally | Noneno keys asked | 0.3.4 | ||
★ 1 io.github.murtazox04/cue Notify people through Cue: preferences, attention budgets, quiet hours and approval apply. | 7/7All passed | 63health of 100 | PyPIRuns locally | 1secret asked | 0.6.0 | ||
★ 2 com.capyinc/capy Startup cap table: ownership, SAFEs, vesting and round modeling, plus drafts for admin approval. | 3/3All passed | 47health of 100 | RemoteHosted | Noneno keys asked | 1.2.0 | ||
★ 2 io.github.The-Pixel-Boys/shield-kya Audit trail and traceability for AI agents. MCP gate: evaluate, ingest, request approval. | 7/7All passed | 56health of 100 | npmRuns locally | 1secret asked | 0.32.6 | ||
io.github.brunoreisportela/arrumou-neural Manage vacation rentals, bookings, calendars and operations with OAuth and action approvals. | 3/3All passed | 46health of 100 | RemoteHosted | Noneno keys asked | 1.0.0 | ||
io.github.Opafex/mcp-approval-queue Human approval gate for AI agents: risk-scored requests that only a person can approve | 7/7All passed | 57health of 100 | npmRuns locally | Noneno keys asked | 0.2.0 | ||
★ 263 io.github.QVerisAI/mcp Professional data and tools for AI: find services, review scope, call them, and audit usage. | 8/8All passed | 84health of 100 | npmLocal or hosted | 1secret asked | 0.15.0 | ||
★ 122 io.github.BrightbeamAI/chap Auditable records of human decisions over AI agent work. Approvals, edits, overrides, escalations. | 7/7All passed | 79health of 100 | npmRuns locally | Noneno keys asked | 0.3.3 | ||
★ 1 io.github.lowrisk75/webkitui-mcp Native WebKit for Mac. Human approval and persistent sign-ins. Requires the companion app. | 5/61 warning | 51health of 100 | MCPBRuns locally | Noneno keys asked | 0.6.24 | ||
io.github.girishkvs/rostrum Clean up talk recordings: find redos, retakes and dead air, review every cut, render and verify. | 7/7All passed | 49health of 100 | PyPIRuns locally | Noneno keys asked | 0.1.0 | ||
io.github.payload-tools/revrule-mcp RevRule by Payload: read entitlement graphs, review payout evidence, dry-run revenue events. | 6/6All passed | 43health of 100 | MCPBRuns locally | Noneno keys asked | 1.1.0 | ||
★ 1 io.github.abhishekash/spanhound Capture local agent traces and inspect failures, approvals, and run comparisons. | 7/7All passed | 50health of 100 | PyPIRuns locally | Noneno keys asked | 0.6.1 | ||
| 3/3All passed | 54health of 100 | RemoteHosted | Noneno keys asked | 1.0.0 | |||
★ 1 io.github.abhishekash/mcp-trace-inspector Read local agent-run JSONL traces through MCP for failures, approvals, and run comparisons. | 4/4All passed | 55health of 100 | PyPIRuns locally | Noneno keys asked | 0.3.1 | ||
io.github.Phocinae/phocinae-mcp Local Phocinae decision-engine MCP stdio server: fail-closed approval gate + classify/route/score. | 7/7All passed | 49health of 100 | PyPIRuns locally | Noneno keys asked | 0.2.6 | ||
★ 3 io.github.onlsol/relay-remotify-mcp Run shell commands on remote computers with optional per-command approval, using only curl and bash. | 6/71 warning | 57health of 100 | npmRuns locally | 1secret asked | 0.6.2 | ||
★ 600 io.github.emiliaprotocol/mcp-server Exact-action approval for consequential agent actions: request, track, and verify signed receipts. | 7/7All passed | 68health of 100 | npmRuns locally | 1secret asked | 2.1.4 | ||
io.github.Craig-Horton/aibvf-mcp AI BVF: review AI proposals with Stop, Fix or Accelerate, evidence gaps and next actions. | 7/7All passed | 52health of 100 | npmRuns locally | Noneno keys asked | 0.14.14 | ||
★ 3 io.github.ericlovold/sanction Approval and budget checks before agent spending or tool use. Cooperative MCP; host must ask. | 8/8All passed | 64health of 100 | npmLocal or hosted | 1secret asked | 0.10.0 | ||
io.github.tarides/sudo-proxy Privileged command execution proxy with human approval via pkexec or sudo | 5/61 warning | 50health of 100 | CargoRuns locally | Noneno keys asked | 1.2.0 | ||
★ 223 io.github.node9-ai/node9 Access control for AI agents and MCP servers: allow, hold for approval, or block each tool call | 7/7All passed | 84health of 100 | npmRuns locally | Noneno keys asked | 2.26.2 | ||
★ 1 io.github.4hmetuyar/rug-pull-detector Baselines an MCP server's tools and detects tool-definition changes after approval | 7/7All passed | 66health of 100 | npmRuns locally | Noneno keys asked | 0.2.1 | ||
| 7/7All passed | 50health of 100 | npmRuns locally | 1secret asked | 0.1.2 | |||
★ 27 io.github.CTRLRun/ctrlrun-mcp-operator Answer CTRLRun approvals from an MCP client: list what is held, inspect it, grant or deny. | 7/7All passed | 67health of 100 | PyPIRuns locally | Noneno keys asked | 0.12.2 | ||
★ 1 com.waitingforpower/energy-permitting-tracker Tracks U.S. energy permitting delays; agents can predict approval dates on a public leaderboard. | 3/3All passed | 55health of 100 | RemoteHosted | Noneno keys asked | 1.2.0 | ||
io.github.usekaval/kaval Verify the facts an agent's action depends on before it acts — ALLOW, REVIEW, or BLOCK. | 7/7All passed | 57health of 100 | npmRuns locally | 1secret asked | 0.8.2 | ||
★ 1 group.raposa/raposa-mcp Human approval for AI agents: a named person approves or rejects, silence is not consent. | 7/7All passed | 57health of 100 | PyPIRuns locally | 1secret asked | 0.1.1 | ||
★ 2 io.github.felixpg13-glitch/spendshield Authorization layer between AI agents and money: ALLOW/APPROVAL/DENY, budgets, audit. | 7/7All passed | 56health of 100 | PyPIRuns locally | Noneno keys asked | 0.8.3 | ||
io.github.icohangar-ops/chp-mcp Spend approval gate for AI agents: budget caps, HITL thresholds, signed audit hash. | 7/7All passed | 54health of 100 | npmRuns locally | Noneno keys asked | 0.1.2 | ||
ai.authoryze/authoryze Give your AI agent a spending limit: approval controls and single-use virtual cards. | 3/3All passed | 42health of 100 | RemoteHosted | Noneno keys asked | 1.0.1 | ||
★ 3 io.github.shin2344234/trmm-mcp Read your TacticalRMM fleet; run commands only after per-command human approval. | 7/7All passed | 54health of 100 | PyPIRuns locally | 2secrets asked | 1.1.0 | ||
io.github.Codecraft-Ops/taskmarket Discover funded agent work and prepare approval-gated TaskMarket delegations. | 5/61 warning | 41health of 100 | MCPBRuns locally | Noneno keys asked | 0.1.0 | ||
dev.1pass/logi-approval logi Agent Approval Gate — human approval on the phone before high-risk agent actions. | 7/7All passed | 51health of 100 | npmRuns locally | 2secrets asked | 0.1.2 | ||
io.github.LufeMC/kaval Verify the facts an agent's action depends on before it acts — ALLOW, REVIEW, or BLOCK. | 7/7All passed | 57health of 100 | npmRuns locally | 1secret asked | 0.7.1 | ||
★ 6 io.github.ex3lite/sber-mcp Unofficial SberBank Online: read accounts and operations, transfer with human approval. | 7/7All passed | 55health of 100 | PyPIRuns locally | Noneno keys asked | 0.6.4 | ||
io.github.KimHyeongRae0/orangerail Turns your Prisma schema into typed MCP tools, with destructive writes gated behind human approval | 7/7All passed | 61health of 100 | npmRuns locally | 1secret asked | 0.1.4 | ||
★ 3 io.github.githubscum/lotor A local receipt and approval gate for AI agent sessions. The agent can act, but it cannot sign. | 7/7All passed | 62health of 100 | npmRuns locally | Noneno keys asked | 1.0.2 | ||
★ 16 io.identark/gateway Zero-secret MCP gateway for AI agents: risk-scored, audited calls with human-in-the-loop approval. | 3/3All passed | 61health of 100 | RemoteHosted | Noneno keys asked | 0.1.0 | ||
★ 2 io.github.Ringosystems/tractorbeeam-mcp MCP server for Veeam Backup for Microsoft 365: read-only review + gated, audited restore tier. | 4/4All passed | 40health of 100 | DockerRuns locally | 2secrets asked | 2.2.0 | ||
★ 33 io.github.agentkitai/agentgate Human-in-the-loop approval gateway for AI agents over MCP: request, decide, approve. | 7/7All passed | 64health of 100 | npmRuns locally | Noneno keys asked | 0.0.3 | ||
★ 1 io.github.BlueprintLabIO/tidebase Inspect Tidebase agent runs, resolve approval gates, and trigger recovery from your AI assistant. | 7/7All passed | 43health of 100 | npmRuns locally | Noneno keys asked | 0.1.1 | ||
io.github.eltociear/contract-guard-mcp EVM contract/token risk check + ERC20 approval (proxy, EIP-7702, unlimited-allowance). Zero deps. | 4/4All passed | 42health of 100 | DockerRuns locally | Noneno keys asked | 1.1.0 | ||
★ 4 io.github.DinanathDash/envault Secure secret management with a Human-In-The-Loop (HITL) interceptor for agent mutations. | 6/71 warning | 56health of 100 | npmRuns locally | 1secret asked | 1.12.0 |
Showing 1 to 49 of 49