Compliance & guardrails for AI agents — PII filtering, audit logging, GDPR/AI Act checks, kill switch
SaferSkills independently audited Agent Policy Gateway Mcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Compliance and guardrails server for AI agents. Gives companies the tools to run AI agents safely and within regulatory boundaries.
As AI agents gain autonomy — making purchases, accessing data, sending emails — companies face real compliance risks:
This server provides the "boring infrastructure" that makes autonomous agents enterprise-ready.
| Tool | Description |
|---|---|
check_pii(text) | Scan text for PII (emails, phones, SSNs, credit cards, IBANs). Returns found types and redacted version. |
apply_guardrails(action, context) | Check if an action is allowed by configurable policies (spend limits, domain allowlists, blocked actions). |
log_action(agent_id, action, details) | Append-only audit log entry with timestamp. Stored in ~/.agent-audit-log/. |
get_audit_log(agent_id, limit) | Retrieve audit log entries for compliance review. |
check_compliance(action_type, jurisdiction) | Check EU AI Act risk level and GDPR requirements for an action type. |
emergency_stop(agent_id, reason) | Kill switch — logs critical event and returns immediate stop signal. |
# Via pip
pip install agent-policy-gateway-mcp
# Via uvx (no install needed)
uvx agent-policy-gateway-mcpAdd to your MCP client config:
{
"mcpServers": {
"policy-gateway": {
"command": "uvx",
"args": ["agent-policy-gateway-mcp"]
}
}
}Or with pip install:
{
"mcpServers": {
"policy-gateway": {
"command": "policy-gateway-server"
}
}
}check_pii("Send invoice to [email protected], CC 4532-1234-5678-9012")
→ has_pii: true, found: [email, credit_card], redacted version providedapply_guardrails("make_purchase", {"amount_usd": 500})
→ denied: exceeds $100 spend limit
apply_guardrails("send_email", {})
→ allowed
apply_guardrails("delete_user_data")
→ denied: blocked actioncheck_compliance("automated_decision", "EU")
→ risk_level: high
→ requirements: human oversight, transparency, documentation, fairness audits
→ gdpr_articles: Art. 22 GDPRemergency_stop("agent-007", "Agent attempting unauthorized data export")
→ kill_switch: true, logged to audit trailLogs are stored as JSONL files in ~/.agent-audit-log/:
{"entry_id": "agent-1_1710936000000", "timestamp": "2024-03-20T12:00:00+00:00", "agent_id": "agent-1", "action": "api_call", "details": "Called external pricing API"}| Category | Servers |
|---|---|
| 🔗 Blockchain | Solana |
| 🌍 Data | Weather · Germany · Agriculture · Space · Aviation · EU Companies |
| 🔒 Security | Cybersecurity · Policy Gateway · Audit Trail |
| 🤖 Agent Infra | Memory · Directory · Hub · Reputation |
| 🔬 Research | Academic · LLM Benchmark · Legal |
MIT
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.