"Information on agent swarm architecture" matching MCP servers:

Enables deterministic request screening and, after native owner approval, fixed-target DeadBolt enforcement actions such as kill, deny, revoke, and evidence retrieval through local stdio MCP. Model analysis can advise but cannot approve actions.

Enables agent settlement, trust verification, and ledger operations for multi-agent workflows, with tools for blueprint management, credit tracking, and provenance recording.

Screens AI agent tool calls before execution and tool results before the agent reads them, acting as an MCP proxy and hooks adapter with shadow, enforce, and strict policy modes.

An MCP Server that enables users to interact with Google's On-Demand Scanning API (v1beta1) through natural language, likely providing capabilities for vulnerability scanning and security analysis of containers and artifacts.

Registers a set of inert, tempting decoy tools with any MCP-capable client so that any call from a hijacked or prompt-injected agent instantly raises an alert with full attack context and a per-call trace token. Also plants worthless canary tokens in honeypot files that trigger zero-false-positive leak alerts when they surface in agent output, files, or outbound requests.

Enables AI agents to access authenticated websites by reusing your existing browser profile and cookies, so you never share passwords and sessions persist between runs.

Local static inspection of MCP and AI-agent tool manifests before attachment, reporting findings and missing evidence without executing proposed tools. Results do not establish runtime safety.

Cryptographic accountability for AI agents. Ed25519-signed receipts for every MCP tool call. Constraints, chains, AI judgment, invoicing, and local dashboard included.

Security scanning, prompt injection detection, secret leak detection, and agent permission auditing for AI agent workflows.

Enables AI agents to securely store and retrieve secrets and make authenticated API calls on their behalf, keeping API keys out of conversation context and supporting local file or GCP Secret Manager backends.

MCP server for AI agent guardrails — validates and signs agent decisions (OAA tokens) so third parties can verify them without server access

agent-bom is an open security scanner and self-hosted control plane for AI, MCP, and cloud infrastructure. The default scan profile in MCP server mode exposes 8 MCP tools. Additional profiles provide inventory, findings, compliance, graph, and runtime workflows. See the published Glama release for its packaged version.

Enables coding agents to send files and notes into approved Zas channels and read items back, with content encrypted before leaving the machine and scoped, revocable agent access.

Enables AI agent tool calls to be intercepted and judged before execution, allowing, asking a human, or blocking based on calibrated risk and policy.

Pay-per-call MCP and x402 v2 server on Base USDC providing 19 keyless tools for AI agents: web extraction, social and academic search, B2B lead and domain intelligence, npm/PyPI package and smart-contract security audits, OFAC compliance screening, and DeFi swap quotes

Cryptographic identity and trust protocol for AI agents. 38 MCP tools across 8 protocol layers: Ed25519 identity, delegation chains, values compliance, signed communication, policy engine, task coordination, cross-layer integration, and agentic commerce. 264 tests passing.

Enables AI agents to search, read, and write a shared tree of markdown articles hosted on Amazon S3, with per-folder and per-article permissions, attribution of every change to the signed-in user, and full version history. Agents get exactly the access granted to the person they act for, and cannot grant permissions or hard-delete content.

Enables AI agents to control a Linux desktop and browser through governed tools for mouse, keyboard, windows, clipboard, screenshots, navigation, and page interaction, with policy verdicts, human confirmation, secret redaction, and an append-only audit trail.

Enables authenticated clients to call a streamable HTTP MCP endpoint with a whoami tool, providing identity lookup for authenticated sessions.

An MCP server that lets agents act as the person who added them, giving them identity, shared context (data, documents, goals, calendar, skills), and a place to publish apps and pages behind sign-in. It also brokers access to models, data APIs and other tools' MCP servers through one key, with consent prompts, per-person access checks and encrypted credentials as guardrails.

Enables defenders to deploy a decoy MCP tool server that records and fingerprints how LLM agents probe, escalate, and persist, without exposing real systems.

A local human-in-the-loop gate for AI agents that blocks actions until human approval, with timeout defaulting to denial.

A permission-aware MCP server for restaurant backend operations, enabling role-based access to menus, orders, sales, and drafting specials with a human approval workflow.

A security checkpoint for AI agents that intercepts and polices tool calls with allow/block/ask verdicts, taint tracking, and audit logging.

MCP server providing immutable audit logging, policy enforcement, and compliance reporting for AI agent workflows, enabling regulatory compliance and chain integrity verification.

An open-source MCP server that provides AI agents with secure access to read, search, and manage emails via Microsoft 365 and Gmail. It features security-first defaults like recipient allowlists and markdown content conversion to facilitate safe agent interaction with mailboxes.

A read-only MCP server that lets agents scan a project's AI agent setup — Claude Code, Codex, Cursor, MCP servers and instruction files — and surface security findings such as the lethal trifecta, broad permissions, exposed secrets and unpinned packages.

Provides AI agents with a transparent proxy and journal for every tool action, including pre-state snapshots and approval gates for risky operations. Enables per-action undo, rewind to a point in time, and a kill switch that agents cannot override.

A local capability layer for AI agents providing persistent memory, credential management, connectors, and activity tracking.

Encrypted secrets management MCP server for AI agents, enabling secure storage, retrieval, rotation, and auditing of API keys and credentials with AES-128 encryption.