Go
stacklok/toolhive-registry-server
Discover, govern and control access to MCP servers and agent skills across your organization
Apache-2.0Jul 18, 2026 · metrics 2.10.0
All tags
Catalogue tag
#ai-governance
Every repository in the public record carrying this tag — from its GitHub topics or the keywords its package registries publish. Health is measured under the same versioned methodology as the rest of the record.
45 records
npm · Maven
iflytek/skillhub
Self-hosted, open-source agent skill registry for enterprises. Publish & version skill packages, govern with RBAC and audit logs, deploy on-premise with Docker or Kubernetes.
Apache-2.0Aug 28, 2026 · metrics 2.10.0
npm
xpert-ai/xpert
XpertAI is an open-source platform for building, running, and evolving ai agents, providing extensible capabilities and infrastructure for diverse AI systems.
AGPL-3.0Sep 5, 2026 · metrics 2.10.0
PyPI · Go · npm
cordum-io/cordum
The action firewall for AI agents. Enforce policy and human approval before risky tool calls, shell commands, workflows, and production changes, with auditable evidence.
Custom licenseAug 9, 2026 · metrics 2.10.0
PyPI · npm
NuGuardAI/nuguard
opensource repo for validating agentic AI applications: redteam, behavior, supply-chain, static analysis
Custom licenseJul 18, 2026 · metrics 2.10.0
PyPI
agentrust-io/trace-spec
TRACE: Trust Runtime Attestation and Compliance Evidence. Open attestation standard for agentic AI governance.
Custom licenseSep 6, 2026 · metrics 2.10.0
npm · PyPI
issdandavis/SCBE-AETHERMOORE
Geometric AI governance and evaluation framework with a 14-layer security pipeline, semantic projection, and reproducible benchmark lanes.
MITAug 26, 2026 · metrics 2.10.0
PyPI
vaaraio/vaara
Accountable Autonomy: open-source evidence layer that gates every AI agent tool call against your policy and writes a hash-chained record an auditor verifies offline, without trusting you. Root-agnostic; binds to TPM 2.0 / SEV-SNP when present. Your environment, no SaaS, no telemetry. AGPL-3.0.
AGPL-3.0Aug 22, 2026 · metrics 2.10.0
Go
getaxonflow/axonflow
AxonFlow: Runtime control layer for production AI
Custom licenseJul 21, 2026 · metrics 2.10.0
Go
airomhq/airom
Open-source AI Bill of Materials (AIBOM) scanner: inventories AI models, datasets, prompts, embeddings, vector DBs & RAG pipelines across code, containers & Kubernetes — with file:line evidence, load-time risk detection (poisoned pickle / Keras Lambda / unsafe torch.load) and NIST AI RMF / OWASP compliance mapping. CycloneDX · SARIF · JSON.
Apache-2.0Jul 23, 2026 · metrics 2.10.0
Go
g8e-ai/g8e
Governance Architecture for Trustless Execution ⚖️
Apache-2.0Jul 17, 2026 · metrics 2.10.0
PyPI · npm
sseshachala/conductai
AI agent governance for teams. Runtime firewalls tell you what happened; Conduct Guard controls what can happen — signed policy, verified chain, fail-closed by default. Ships with Router (LLM proxy), 20+ compliance packs, canvas UI, and a playbook engine.
Apache-2.0Aug 29, 2026 · metrics 2.10.0
Go · PyPI
Goldziher/ai-rulez
Complete AI development workflow for 19+ tools. Builtin rules, agents, and conventions out of the box. Generate native configs for Claude, Cursor, Copilot, Windsurf, Gemini, Codex and more.
MITAug 25, 2026 · metrics 2.10.0
npm · PyPI
delimit-ai/delimit-mcp-server
The merge gate for AI-written code, with signed, replayable attestation. Works across Claude Code, Codex, Cursor, and Gemini CLI.
MITAug 3, 2026 · metrics 2.10.0
npm
lua-ai-global/governance
Zero-dependency TypeScript SDK for AI agent governance: policy enforcement, injection detection, tamper-evident audit, and standards mapping (EU AI Act, OWASP, NIST, ISO 42001)
MITJul 26, 2026 · metrics 2.10.0
npm
Protocol-Wealth/pwos-core
Open source compliance-first AI operating system for SEC-registered investment advisers. Apache 2.0 licensed with defensive patent grant.
Apache-2.0Jul 25, 2026 · metrics 2.10.0
Go
getaxonflow/axonflow-sdk-go
Official Go SDK for AxonFlow — runtime control, MCP policy enforcement, approvals, and audit trails for production AI
MITJul 23, 2026 · metrics 2.10.0
npm
Craig-Horton/ai-bvf
Open protocol for scoring AI investments. JSON Schema, scoring engine, MCP server. Spec under CC-BY-4.0.
MITJul 31, 2026 · metrics 2.10.0
PyPI
alizahidraja/isnad
Grade every agent, scraper and model in a claim's chain — provenance, trust scoring and audit evidence for LLM pipelines
Apache-2.0Aug 29, 2026 · metrics 2.10.0
npm
cendorhq/cendor-libs-js
Production plumbing for LLM apps in TypeScript: context, cost, testing & governance primitives. Python-interoperable.
Apache-2.0Aug 29, 2026 · metrics 2.10.0
Go
dativo-io/talon
Open-source AI governance gateway for EU teams: enforce PII, cost, model, data residency, and tool policies for LLMs and AI agents with signed evidence.
Apache-2.0Jul 17, 2026 · metrics 2.10.0
crates.io · npm
soapbucket/sbproxy
Self-hosted AI gateway and LLM proxy. OpenAI-compatible API for OpenAI, Anthropic, Gemini, Bedrock and 60+ providers, or serve vLLM/llama.cpp on your GPUs. Keys, budgets, guardrails, semantic cache, MCP
Apache-2.0Jul 30, 2026 · metrics 2.10.0
npm
bookedsolidtech/rea
Zero-trust governance layer for Claude Code. Policy-enforced MCP gateway with autonomy controls, middleware chain, audit log, HALT kill-switch, and prompt-injection defense.
MITJul 27, 2026 · metrics 2.10.0
npm
comisai/comis
Open-source security-first runtime for AI agents that learn and act across sessions.
Apache-2.0Jul 20, 2026 · metrics 2.10.0
crates.io · npm
runxhq/runx
the governed runtime for agent skill workflows, off the leash but on the record
MITJul 15, 2026 · metrics 2.10.0
npm
Keesan12/martin-loop
Make AI coding agents safe to scale autonomously: assign work, cap spend, enforce policy, verify output, roll back failures, learn from loops, and prove ROI across every repo.
Apache-2.0Jul 19, 2026 · metrics 2.10.0
PyPI · npm
aiexponenthq/license-compliance-checker
License Compliance Checker — Multi-ecosystem license + AI model scanner for EU AI Act Article 53 GPAI compliance. SBOM, SARIF, training-data risk. Apache 2.0.
Apache-2.0Jul 27, 2026 · metrics 2.10.0
Go
gumieri/nenya
A lightweight, highly secure AI API Gateway/Proxy written in Go. Acts as transparent middleware between local AI coding clients (OpenCode/Pi/Cursor) and upstream LLM providers (Gemini, DeepSeek, Zhipu z.ai).
Apache-2.0Jul 24, 2026 · metrics 2.10.0
PyPI
philpaz/recusal
Deterministic governance for Claude and MCP tool calls. Pin approved capabilities, detect drift, and refuse unsafe or unapproved actions before execution. No model in the decision path.
Apache-2.0Jul 27, 2026 · metrics 2.10.0
npm
abdelrahmannasr/yadflow
Yadflow (yad = يد, "hand") — the AI-driven SDLC where a human hand moves every gate. Gated, team, multi-repo: author → review → build, with a PR-driven review gate and a zero-dependency CLI. Ships as a BMAD module + 17 skills.
MITJul 16, 2026 · metrics 2.10.0