搜索「Policy」的结果

io.mcp-hangar/hangar

Policy enforcement plane for MCP: every tool call ends in a verdict. Self-hosted, MIT.

io.github.dogrucanemek-alt/cedulon

Policy-gated agent spend with signed receipts and rail-extract audit

io.github.ucsandman/dashclaw

Policy checks, approvals, records, and governed HTTP capabilities for unattended agents.

dev.smartergpt/lex

Episodic memory, Frames, Policy Neighborhoods, and policy enforcement for AI agents.

io.github.toreva/kit

Policy-checked Solana wallet actions with user-set limits, unsigned transactions, and receipts.

io.github.InterAILabs/ai-risk-oracle

Policy gate and signed trust receipts for autonomous agent actions.

io.github.afurlane/copilot-datagate

Policy-driven, read-only MCP server for safe database access from AI tools.

io.github.agentsherpa/yieldsentinel

Policy check on a described yield position. Complement to yieldhunter. Research only.

io.github.sp3ak/safenode-mcp-gateway

Policy proxy for MCP tool calls. A denied call never reaches the downstream server.

io.github.fxjim/agent-commerce-guard

Policy review and purchase discovery for AI-agent commerce actions.

io.github.vantioai/vantio-gate

Vantio Gate — Policy Latch dry-run evaluate for agents. No live enforce from MCP.

io.github.rebelArtists/fortfi-treasury-mcp

Policy-gated MCP treasury for AI agents — x402 subscribe, 50+ tools, multi-chain.

io.github.SureshKhemka/constraints-registry

Policy-as-code guardrails for AI coding agents, validated via OPA, Conftest, Checkov & Semgrep.

io.github.Fabio662/yieldagentx402

Policy-gated x402 MCP for agent workflows with TEE receipts, 18 tools, and no custody.

io.github.Acacian/aegis

Policy-based governance for AI agent tool calls. YAML policy, approval gates, audit logging.

io.github.Guffawaffle/lex

Episodic memory and architectural policy for AI agents. Frames, Atlas, and Policy.

io.github.mukul975/Anthropic-Cybersecurity-Skills/implementing-runtime-security-with-tetragon

Implements eBPF-based runtime observability and in-kernel enforcement in Kubernetes with Cilium Tetragon, monitoring process execution, file access, network connections, and syscalls, and blocking dangerous calls at the kernel level. Use when deploying Tetragon to detect or block syscalls such as ptrace, mount, and unshare, enforcing kernel-level policy, or adding low-overhead runtime detection to a cluster. Keywords: Tetragon, Cilium, eBPF, TracingPolicy, kprobe, enforcement, process lineage. Do not use for Falco-based detection - use detecting-container-runtime-threats-with-falco.

io.github.mukul975/Anthropic-Cybersecurity-Skills/implementing-container-network-policies-with-calico

Uses Calico's own policy CRDs beyond the upstream Kubernetes API - GlobalNetworkPolicy, HostEndpoint, NetworkSet, policy tiers, and DNS-based egress rules - applied and audited with calicoctl. Use when a policy must span namespaces or protect the host itself, when egress has to be expressed by domain name, or when ordering policies into tiers. Keywords: calicoctl, GlobalNetworkPolicy, HostEndpoint, NetworkSet, tier, DNS egress, order. Do not use for portable upstream NetworkPolicy - use implementing-network-policies-for-kubernetes; for installing Calico and writing standard policy with it use implementing-kubernetes-network-policy-with-calico.

io.github.mukul975/Anthropic-Cybersecurity-Skills/implementing-network-policies-for-kubernetes

Writes portable upstream Kubernetes NetworkPolicy YAML - default-deny-all, DNS egress, namespace and pod selector rules - that works on any conformant CNI such as Calico or Cilium. Use when segmentation must stay CNI-portable, introducing a default-deny posture, or restricting east-west traffic between pods and namespaces without depending on a vendor CRD. Keywords: NetworkPolicy, default deny, podSelector, namespaceSelector, ingress, egress, CNI portable. Do not use for Calico-specific resources - use implementing-kubernetes-network-policy-with-calico.

io.github.mukul975/Anthropic-Cybersecurity-Skills/implementing-azure-defender-for-cloud

Enable Microsoft Defender for Cloud (CSPM + CWPP) across VMs, containers, SQL, storage, and Key Vault, using Azure Policy for evaluation, Log Analytics for telemetry, Azure Arc for hybrid coverage, and Logic Apps for automated response. Use for Azure security monitoring, adaptive remediation, or regulatory compliance assessment; not for non-Azure-only protection or identity defense (Defender for Identity).

io.github.a5c-ai/babysitter/mcp-csp-investigation

Comprehensive Content Security Policy audit for MCP Apps in sandboxed iframes. Discovers all network origins, traces them to source, and generates CSP configuration for registerAppResource.

LastLook Data

vlatest

io.smithery.zev.lastlook-data

LastLook Data gives AI agents real-time access to US financial market data: Treasury yields (2yr, 10yr, 30yr), mortgage rates, Fed funds rate, CPI, unemployment, GDP, WTI/Brent crude, natural gas, and G10 FX rates. Also includes derived indicators: yield curve spreads (2s10s, 3m10y) with inversion signal, Sahm Rule recession indicator, Fed policy spread (EFFR vs IORB), and upcoming FRED economic calendar. Data sourced from FRED and ECB. Pay per query via x402 on Base — no accounts, no API keys, no subscriptions.

io.clawhub.infra403/opennews-mcp

Real-time crypto, equities, macro, and financial market news aggregator — 85+ data sources across 6 categories covering digital assets, U.S. stocks, semiconductors, AI infrastructure, supply chains, commodities, rates, policy, and market-moving social/news signals. Sources include Bloomberg, Reuters

Email Deliverability Audit — SPF/DKIM/DMARC Check

vlatest

io.smithery.axel-belfort.email-deliverability

Email deliverability audit API for AI agents. Analyze any domain's email authentication: SPF record validation, DKIM selector check, DMARC policy analysis, MX record health, and composite deliverability score 0-100 with prioritized fix recommendations. Tools: email_audit_deliverability. Use this when auditing email infrastructure, diagnosing delivery issues, or checking domain reputation before sending campaigns. IMPORTANT: This checks the DOMAIN's setup — for individual email validation, use email_verify_address instead. Returns: {score, spf, dkim, dmarc, mx, recommendations[]}. No API key required — x402 micropayment $0.005/call on Base L2.