← Back to directory
A

Agent Governance Toolkit MCP Server

Official
Policy enforcement, zero-trust identity, sandboxing, and reliability engineering for autonomous AI agents.
GitHub source repository ↗
★ 6.1k Stars Category · Dev Tools Very popular Source revision 46463ef86894
39FMRS · D
Reliability
6/20
Security and permissions
8/20
Maintenance
9/20
Documentation
9/20
Setup experience
7/20

This MCP server is officially maintained by Microsoft and offers robust governance for AI agents, ideal for scenarios requiring strict compliance and security. However, the manifest does not list specific tools, and installation depends on environment variables.

Read the FMRS scoring method →

The Agent Governance Toolkit MCP server enables building and managing policy-compliant AI agents with safety enforcement and compliance checking. Based on Microsoft's Agent Governance Toolkit, it provides policy enforcement, zero-trust identity, execution sandboxing, and reliability engineering capabilities, covering all of the OWASP Agentic Top 10. The server integrates via MCP, allowing client tools to enforce policies on agent actions, ensuring operations comply with organizational requirements.

Tools

The tool list has not been reviewed yet.

Setup

The server is available as an npm package named 'agentos-mcp-server'. Install with npm install agentos-mcp-server. Configure environment variables AGENTOS_POLICY_MODE (strict or permissive) and AGENTOS_LOG_LEVEL (debug, info, warn, or error) to control policy enforcement and logging.

Fit and risk

Best for

  • Enterprises needing strict governance for AI agents
  • Teams meeting OWASP and regulatory compliance requirements
  • Multi-agent systems requiring unified policy control

Not for

  • Simple chatbots without tool calls or autonomy
  • Prototyping that requires unconstrained flexibility
  • Performance-sensitive scenarios that cannot tolerate enforcement overhead

Required permissions

  • Requires access to policy files and configuration
  • May log tool call audit trails
  • May access identity services for agent verification

Risks and side effects

  • Misconfigured policies may block legitimate operations
  • Over-restriction may hinder agent capabilities
  • Audit logs may contain sensitive operation information

Troubleshooting

  1. Check AGENTOS_POLICY_MODE configuration
  2. Validate policy file syntax and rules
  3. Review log level settings to ensure sufficient output

Use cases

Enforce security policies when deploying AI agents
Audit tool calls for compliance
Implement zero-trust identity and sandboxing

Supported clients

Supported clients have not been confirmed yet.