authensor-mcp-server
OfficialProvides a drop-in adapter to enforce safety policies, budget limits, and tool governance for agents built with the CrewAI framework.
Offers a guardrail adapter to evaluate and authorize agent actions, tool calls, and API requests within LangChain workflows before execution.
Enables governance, policy enforcement, and audit trails for complex agentic workflows and tool interactions built using LangGraph.
Integrates with the OpenAI Agents SDK to provide content safety scanning, action authorization, and session-level threat detection.
Features built-in governance and monitoring capabilities specifically designed to provide coverage against the OWASP Agentic Top 10 security vulnerabilities.
Facilitates human-in-the-loop approval workflows for high-risk agent actions through mobile Progressive Web App notifications.
Enables real-time human approval workflows for high-consequence agent actions directly via Slack notifications and interactions.
Governs agent interactions with the Stripe API, allowing for policy enforcement on charges, spending limits, and detailed audit logging of financial actions.
Provides an adapter for the Vercel AI SDK to add a comprehensive safety layer, including policy evaluation and tamper-evident action receipts.
npx @authensor/create-authensor my-agent
cd my-agent && npm install && npm run demoResearch
Authensor audits the infrastructure the AI safety field uses to measure itself, and files every finding upstream in public.
99 defect reports across 46 organizations in evaluation, guardrail, and training infrastructure
16 landed fixes, including 7 in UK AI Security Institute repos (
inspect_ai,inspect_evals,inspect_cyber,control-arena), plus Meridian Labs, Databricks, NVIDIA and Presidio76 of those defects are a single class: the evaluator trusts an artifact the evaluated system controls
The stack is hardened against what that audit found.
Related MCP server: cordon
Work With Us
Red-team engagements, evaluator and scorer audits, and adversarial testing for teams shipping AI agents.
authensor.com · john@authensor.com
Documentation
How the pieces fit: engine, control plane, scanners, receipts | |
All 18 packages, framework adapters, companion tools | |
Self-hosted setup, TypeScript and Python integration, framework adapters, CLI | |
The problem, the five layers, why the stack is free | |
Aegis content safety, session rules, budgets, Sentinel monitoring, shadow policies | |
The adversarial harness, what gets tested, how it runs | |
Control-plane endpoints | |
Self-hosted vs hosted, production deployment | |
Building and testing the monorepo | |
Coverage mapping, 10/10 | |
Article-by-article alignment |
Contributing
We welcome contributions! See CONTRIBUTING.md for guidelines.
Authensor is built on the belief that safety tooling should not have a paywall. We open-source every line of safety code because the more people who use these tools, the safer agents get for everyone.
License
MIT. Use it however you want.
This server cannot be installed
Maintenance
Resources
Unclaimed servers have limited discoverability.
Looking for Admin?
If you are the server author, to access and configure the admin panel.
Related MCP Servers
- AlicenseBqualityCmaintenanceSecurity gateway that wraps any MCP server with per-tool policies, approval gates, and optional Ed25519-signed decision receipts. Shadow mode logs every tool call without blocking; enforce mode applies block, rate-limit, and minimum-tier rules. Receipts are independently verifiable offline with no accounts needed.Last updated51,6119MIT
- Alicense-qualityAmaintenanceSecurity gateway for MCP tool calls. Sits between your LLM client and MCP servers, enforcing per-tool policies (allow/block/approve/read-only), logging every call, and pausing dangerous operations for human approval in terminal or Slack.Last updated18MIT
- AlicenseBqualityAmaintenanceA governance proxy for AI tools — every MCP/agent tool call is policy-gated, secret-redacted, and written to a hash-chained, offline-verifiable audit trail.Last updated13MIT
- Flicense-qualityBmaintenanceSelf-hosted MCP gateway that applies deterministic, compiled policy to tool discovery, invocation, and outbound data flow, with no model in the enforcement path. Every decision emits a hash-chained receipt sealed with Ed25519 and verifiable using public keys only.Last updated
Related MCP Connectors
Security firewall for AI agents — scans MCP calls for injection, secrets, and risks.
Runtime permission, approval, and audit layer for AI agent tool execution.
See, price, and control every tool call your AI agents make: policy checks, cost, and audit tools.
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/AUTHENSOR/authensor'
If you have feedback or need assistance with the MCP directory API, please join our Discord server