# Stackduke

> Stackduke is an AI-agent governance platform for policy checks, human approvals, and Action Records on supported model and tool calls.

Early access: governed MCP calls open to beta partners in March 2027. The MCP tracker and scanner are free to use today.

Stackduke (stackduke.com) governs what AI agents may do before they act. MCP-compatible agents point at
a Stackduke MCP server URL on mcp.stackduke.com (no SDK is required), and Stackduke forwards each governed call to the
existing upstream MCP server. Direct model-provider routing currently supports OpenAI only. Published policy
decides whether each action can proceed, needs a person to approve it, or must stop. Every governed action
produces an Action Record that connects the request, the matched policy, any human review, and the execution outcome.

## Free tools

- [Radar, the public MCP tracker](https://stackduke.com/tracker): What official MCP servers let an AI agent do, and what changed, from Stackduke's daily checks. It reads each server's tools with no account or sign-in, and never calls them.
- [1stdibs MCP server](https://stackduke.com/tracker/onestdibs): The tools 1stdibs's official MCP server gives an agent, and recent changes.
- [Aave MCP server](https://stackduke.com/tracker/aave): The tools Aave's official MCP server gives an agent, and recent changes.
- [Agentage MCP server](https://stackduke.com/tracker/agentage): The tools Agentage's official MCP server gives an agent, and recent changes.
- [AlphaGrowth MCP server](https://stackduke.com/tracker/alphagrowth): The tools AlphaGrowth's official MCP server gives an agent, and recent changes.
- [amCharts MCP server](https://stackduke.com/tracker/amcharts): The tools amCharts's official MCP server gives an agent, and recent changes.
- [APIs.io MCP server](https://stackduke.com/tracker/apis-io): The tools APIs.io's official MCP server gives an agent, and recent changes.
- [Apollo GraphQL MCP server](https://stackduke.com/tracker/apollo-graphql): The tools Apollo GraphQL's official MCP server gives an agent, and recent changes.
- [AppCreator24 MCP server](https://stackduke.com/tracker/appcreator24): The tools AppCreator24's official MCP server gives an agent, and recent changes.
- [Authorized.by MCP server](https://stackduke.com/tracker/authorized-by): The tools Authorized.by's official MCP server gives an agent, and recent changes.
- [BeeIMG MCP server](https://stackduke.com/tracker/beeimg): The tools BeeIMG's official MCP server gives an agent, and recent changes.
- [Blockscout MCP server](https://stackduke.com/tracker/blockscout): The tools Blockscout's official MCP server gives an agent, and recent changes.
- [Carat Hunter MCP server](https://stackduke.com/tracker/carat-hunter): The tools Carat Hunter's official MCP server gives an agent, and recent changes.
- [Chainstack MCP server](https://stackduke.com/tracker/chainstack): The tools Chainstack's official MCP server gives an agent, and recent changes.
- [Chessigma MCP server](https://stackduke.com/tracker/chessigma): The tools Chessigma's official MCP server gives an agent, and recent changes.
- [Cisco ThousandEyes MCP server](https://stackduke.com/tracker/thousandeyes): The tools Cisco ThousandEyes's official MCP server gives an agent, and recent changes.
- [Claude Platform Docs MCP server](https://stackduke.com/tracker/claude-platform-docs): The tools Claude Platform Docs's official MCP server gives an agent, and recent changes.
- [Cloudflare Docs MCP server](https://stackduke.com/tracker/cloudflare-docs): The tools Cloudflare Docs's official MCP server gives an agent, and recent changes.
- [Context7 MCP server](https://stackduke.com/tracker/context7): The tools Context7's official MCP server gives an agent, and recent changes.
- [ctxt.io MCP server](https://stackduke.com/tracker/ctxt): The tools ctxt.io's official MCP server gives an agent, and recent changes.
- [DataArt MCP server](https://stackduke.com/tracker/dataart): The tools DataArt's official MCP server gives an agent, and recent changes.
- [DevExpress Docs MCP server](https://stackduke.com/tracker/devexpress-docs): The tools DevExpress Docs's official MCP server gives an agent, and recent changes.
- [dm-drogerie markt MCP server](https://stackduke.com/tracker/dm-drogerie-markt): The tools dm-drogerie markt's official MCP server gives an agent, and recent changes.
- [DMCA.com MCP server](https://stackduke.com/tracker/dmca): The tools DMCA.com's official MCP server gives an agent, and recent changes.
- [draw.io MCP server](https://stackduke.com/tracker/drawio): The tools draw.io's official MCP server gives an agent, and recent changes.
- [Edge MCP server](https://stackduke.com/tracker/edge-network): The tools Edge's official MCP server gives an agent, and recent changes.
- [EmEditor MCP server](https://stackduke.com/tracker/emeditor): The tools EmEditor's official MCP server gives an agent, and recent changes.
- [Engagemii MCP server](https://stackduke.com/tracker/engagemii): The tools Engagemii's official MCP server gives an agent, and recent changes.
- [Ex2 MCP server](https://stackduke.com/tracker/ex2): The tools Ex2's official MCP server gives an agent, and recent changes.
- [Exa MCP server](https://stackduke.com/tracker/exa): The tools Exa's official MCP server gives an agent, and recent changes.
- [Finder MCP server](https://stackduke.com/tracker/finder): The tools Finder's official MCP server gives an agent, and recent changes.
- [Firecrawl MCP server](https://stackduke.com/tracker/firecrawl): The tools Firecrawl's official MCP server gives an agent, and recent changes.
- [GameAnalytics Docs MCP server](https://stackduke.com/tracker/gameanalytics-docs): The tools GameAnalytics Docs's official MCP server gives an agent, and recent changes.
- [GDACS MCP server](https://stackduke.com/tracker/gdacs): The tools GDACS's official MCP server gives an agent, and recent changes.
- [Google Android Management MCP server](https://stackduke.com/tracker/google-android-management): The tools Google Android Management's official MCP server gives an agent, and recent changes.
- [Google Cloud Bigtable MCP server](https://stackduke.com/tracker/google-bigtable): The tools Google Cloud Bigtable's official MCP server gives an agent, and recent changes.
- [Google Cloud Compute Engine MCP server](https://stackduke.com/tracker/google-compute): The tools Google Cloud Compute Engine's official MCP server gives an agent, and recent changes.
- [Google Cloud Datastream MCP server](https://stackduke.com/tracker/google-datastream): The tools Google Cloud Datastream's official MCP server gives an agent, and recent changes.
- [Google Cloud Firestore MCP server](https://stackduke.com/tracker/google-firestore): The tools Google Cloud Firestore's official MCP server gives an agent, and recent changes.
- [Google Cloud Memorystore MCP server](https://stackduke.com/tracker/google-memorystore): The tools Google Cloud Memorystore's official MCP server gives an agent, and recent changes.
- [Google Cloud Monitoring MCP server](https://stackduke.com/tracker/google-monitoring): The tools Google Cloud Monitoring's official MCP server gives an agent, and recent changes.
- [Google Cloud Run MCP server](https://stackduke.com/tracker/google-cloud-run): The tools Google Cloud Run's official MCP server gives an agent, and recent changes.
- [Google Cloud SQL MCP server](https://stackduke.com/tracker/google-cloud-sql): The tools Google Cloud SQL's official MCP server gives an agent, and recent changes.
- [Google Design MCP server](https://stackduke.com/tracker/google-design): The tools Google Design's official MCP server gives an agent, and recent changes.
- [Google Developer Knowledge MCP server](https://stackduke.com/tracker/google-developer-knowledge): The tools Google Developer Knowledge's official MCP server gives an agent, and recent changes.
- [Google Kubernetes Engine MCP server](https://stackduke.com/tracker/google-gke): The tools Google Kubernetes Engine's official MCP server gives an agent, and recent changes.
- [Google Maps MCP server](https://stackduke.com/tracker/google-maps): The tools Google Maps's official MCP server gives an agent, and recent changes.
- [Google Stitch MCP server](https://stackduke.com/tracker/google-stitch): The tools Google Stitch's official MCP server gives an agent, and recent changes.
- [Hebcal MCP server](https://stackduke.com/tracker/hebcal): The tools Hebcal's official MCP server gives an agent, and recent changes.
- [Hugging Face MCP server](https://stackduke.com/tracker/huggingface): The tools Hugging Face's official MCP server gives an agent, and recent changes.
- [ImageKit MCP server](https://stackduke.com/tracker/imagekit): The tools ImageKit's official MCP server gives an agent, and recent changes.
- [Kari MCP server](https://stackduke.com/tracker/kari): The tools Kari's official MCP server gives an agent, and recent changes.
- [Kochava MCP server](https://stackduke.com/tracker/kochava): The tools Kochava's official MCP server gives an agent, and recent changes.
- [LambdaTest MCP server](https://stackduke.com/tracker/lambdatest): The tools LambdaTest's official MCP server gives an agent, and recent changes.
- [Mapbox Docs MCP server](https://stackduke.com/tracker/mapbox-docs): The tools Mapbox Docs's official MCP server gives an agent, and recent changes.
- [MariaDB Docs MCP server](https://stackduke.com/tracker/mariadb-docs): The tools MariaDB Docs's official MCP server gives an agent, and recent changes.
- [Microsoft Learn MCP server](https://stackduke.com/tracker/microsoft-learn): The tools Microsoft Learn's official MCP server gives an agent, and recent changes.
- [Mintlify Docs MCP server](https://stackduke.com/tracker/mintlify-docs): The tools Mintlify Docs's official MCP server gives an agent, and recent changes.
- [Most Recommended Books MCP server](https://stackduke.com/tracker/most-recommended-books): The tools Most Recommended Books's official MCP server gives an agent, and recent changes.
- [NicheDB MCP server](https://stackduke.com/tracker/nichedb): The tools NicheDB's official MCP server gives an agent, and recent changes.
- [Oh My Posh MCP server](https://stackduke.com/tracker/oh-my-posh): The tools Oh My Posh's official MCP server gives an agent, and recent changes.
- [OneUptime MCP server](https://stackduke.com/tracker/oneuptime): The tools OneUptime's official MCP server gives an agent, and recent changes.
- [Panda Video MCP server](https://stackduke.com/tracker/panda-video): The tools Panda Video's official MCP server gives an agent, and recent changes.
- [PGA of America MCP server](https://stackduke.com/tracker/pga): The tools PGA of America's official MCP server gives an agent, and recent changes.
- [Pith MCP server](https://stackduke.com/tracker/pith): The tools Pith's official MCP server gives an agent, and recent changes.
- [Redpanda Docs MCP server](https://stackduke.com/tracker/redpanda-docs): The tools Redpanda Docs's official MCP server gives an agent, and recent changes.
- [ReqRes MCP server](https://stackduke.com/tracker/reqres): The tools ReqRes's official MCP server gives an agent, and recent changes.
- [Riddle MCP server](https://stackduke.com/tracker/riddle): The tools Riddle's official MCP server gives an agent, and recent changes.
- [Robtex MCP server](https://stackduke.com/tracker/robtex): The tools Robtex's official MCP server gives an agent, and recent changes.
- [SerpApi MCP server](https://stackduke.com/tracker/serpapi): The tools SerpApi's official MCP server gives an agent, and recent changes.
- [SimplyPrint MCP server](https://stackduke.com/tracker/simplyprint): The tools SimplyPrint's official MCP server gives an agent, and recent changes.
- [SkillMD MCP server](https://stackduke.com/tracker/skillmd): The tools SkillMD's official MCP server gives an agent, and recent changes.
- [Skiplagged MCP server](https://stackduke.com/tracker/skiplagged): The tools Skiplagged's official MCP server gives an agent, and recent changes.
- [Stealth MCP server](https://stackduke.com/tracker/stealth): The tools Stealth's official MCP server gives an agent, and recent changes.
- [STRING MCP server](https://stackduke.com/tracker/string-db): The tools STRING's official MCP server gives an agent, and recent changes.
- [Sunrise-Sunset MCP server](https://stackduke.com/tracker/sunrise-sunset): The tools Sunrise-Sunset's official MCP server gives an agent, and recent changes.
- [Svelte MCP server](https://stackduke.com/tracker/svelte): The tools Svelte's official MCP server gives an agent, and recent changes.
- [Tech.eu Funding Explorer MCP server](https://stackduke.com/tracker/tech-eu): The tools Tech.eu Funding Explorer's official MCP server gives an agent, and recent changes.
- [trivago MCP server](https://stackduke.com/tracker/trivago): The tools trivago's official MCP server gives an agent, and recent changes.
- [Tudetic MCP server](https://stackduke.com/tracker/tudetic): The tools Tudetic's official MCP server gives an agent, and recent changes.
- [UFCalendar MCP server](https://stackduke.com/tracker/ufcalendar): The tools UFCalendar's official MCP server gives an agent, and recent changes.
- [US Codex MCP server](https://stackduke.com/tracker/uscodex): The tools US Codex's official MCP server gives an agent, and recent changes.
- [Web3Auth MCP server](https://stackduke.com/tracker/web3auth): The tools Web3Auth's official MCP server gives an agent, and recent changes.
- [Wolfram MCP server](https://stackduke.com/tracker/wolfram): The tools Wolfram's official MCP server gives an agent, and recent changes.
- [This week on Radar](https://stackduke.com/tracker/this-week): Every tool change on the tracked servers in the last 7 days.
- [Radar alerts](https://stackduke.com/tracker#tracker-alerts): One email when a tracked server's tools change, or the [Atom feed](https://stackduke.com/tracker/changes.atom).
- [Open-source MCP scanner](https://github.com/Stackduke/mcp-scanner): Lists every tool an MCP server offers and labels what each can do. MIT-licensed, on npm as @stackduke/mcp-scanner.
- [Pre-deploy check](https://stackduke.com/open-source#pre-deploy-check): For teams building MCP servers. A pull request that adds, removes or changes a tool fails in your own CI until a person approves it. [Set it up in CI](https://stackduke.com/docs/guides/check-mcp-tools-in-ci).
- [Tool-change alerts](https://stackduke.com/open-source#tool-change-alerts): A daily job in your own repository that fails, or opens an issue, when an MCP server your agents use changes its tools.

## Product

- [Home](https://stackduke.com/): What Stackduke is and how it governs agent actions.
- [About](https://stackduke.com/about): The founder story and the principles behind Stackduke.
- [Control agent actions](https://stackduke.com/solutions/control-agent-actions): Stackduke is an AI-agent governance platform. Apply policy to supported model and tool calls before they proceed, require human approval, or stop.
- [Human approval](https://stackduke.com/solutions/human-approval-without-bottlenecks): Let policy handle routine requests. Bring a reviewer in for sensitive actions, with the target, amount, and reason already in view.
- [Govern MCP tools](https://stackduke.com/solutions/govern-mcp-tools): Point MCP-compatible agents at Stackduke to govern calls to your existing MCP servers, and route OpenAI model calls through the same boundary. Reuse credentials, govern tool access, and keep the decisions behind every call in view.
- [Govern across teams](https://stackduke.com/solutions/govern-across-teams): Set organization-wide requirements while teams manage their own agents, policies, and reviews. Keep responsibility close to the people doing the work.
- [Pricing](https://stackduke.com/pricing): Plans by governed-action volume, workspaces and evidence retention.
- [Security](https://stackduke.com/security): Trust Center with security, data handling and legal documents.

## Use cases

- [Customer support](https://stackduke.com/use-cases/customer-support): Most teams keep their support agent read-only, or check every action by hand, because nothing stops a wrong refund. With Stackduke, small refunds go through on their own and big ones wait for someone on your team.
- [MCP tool-using agents](https://stackduke.com/use-cases/mcp-tool-using-agents): Connect an agent to Stripe, GitHub and your database, and it can use every tool they offer, even the ones that move money or delete things. Stackduke gives each agent only its own tools, and holds the risky calls for a person.
- [Agents with database access](https://stackduke.com/use-cases/agents-with-database-access): Give an agent a database tool and it can run any query its access allows, including the ones that delete. Here is what you can switch off in Supabase, and how Stackduke makes a person check first.
- [Agents on GitHub](https://stackduke.com/use-cases/agents-on-github): Your agent reads issues anyone can write, and it works with a token that may also open your private repositories. Here is what you can limit in GitHub, and what Stackduke checks.
- [Agents that send messages](https://stackduke.com/use-cases/agents-that-send-messages): When an agent can send emails or post messages, one wrong send reaches people before anyone can stop it. Here is what you can do yourself, and how Stackduke holds a send for a person.
- [Teams building MCP servers](https://stackduke.com/use-cases/teams-building-mcp-servers): One pull request can add a tool, or quietly change what an argument means. The free pre-deploy check fails the build when your MCP server’s tools change, so a person looks at the change first.

## Documentation

- [Complete documentation as Markdown](https://stackduke.com/docs/stackduke-agent.md): All published docs in one file for agents.

- [Stackduke Docs](https://stackduke.com/docs): Learn how to connect agents, set policies, review approvals, and understand every governed action in Stackduke.
- [Action Records](https://stackduke.com/docs/concepts/action-record): An Action Record connects one governed action's Agent, tool, policy version, decision, approval and outcome. Records are designed to be tamper-evident through HMAC hash-chaining and append-only storage.
- [Agents and Connections](https://stackduke.com/docs/concepts/agents-and-connections): An Agent is the identity a client uses to reach Stackduke. A Connection is an upstream MCP server (or OpenAI Model Route) that Agent may use.
- [Approvals bound to an exact action](https://stackduke.com/docs/concepts/approvals): When policy says Require Approval, Stackduke holds the exact action for a reviewer. An approval is single-use, bound to that action, and does not execute it.
- [Governed actions](https://stackduke.com/docs/concepts/governed-actions): A governed action is one agent action that Stackduke evaluated and recorded. It is the unit of your plan allowance.
- [Observe Mode](https://stackduke.com/docs/concepts/observe-mode): Each Agent has an Enforcement mode, Observe or Enforce. In Observe, Stackduke evaluates policy and records the decision without blocking, holding or changing execution. New Agents start in Observe.
- [Organizations and workspaces](https://stackduke.com/docs/concepts/organizations-and-workspaces): An organization holds members, roles and organization-wide policy. Workspaces separate environments such as Production and Staging, each with its own Agents, Connections and records.
- [Policies and decisions](https://stackduke.com/docs/concepts/policies): A Policy is a versioned set of rules. Stackduke evaluates the Policies that apply to an Agent and reaches one decision, Allow, Require Approval or Block.
- [Tool discovery and review](https://stackduke.com/docs/concepts/tool-discovery): Stackduke discovers the tools an MCP server offers, fingerprints each definition, and flags a changed definition for review. You can choose to hold changed tools until someone accepts them.
- [What is Stackduke?](https://stackduke.com/docs/concepts/what-is-stackduke): Understand how Agents, Connections, Policies, approvals, and Action Records work together to govern a call.
- [Check MCP tools in CI](https://stackduke.com/docs/guides/check-mcp-tools-in-ci): Keep your MCP server's approved tool list in its repository, and fail a pull request that changes the tools without approval. Open source, and runs in your own CI.
- [Connect an MCP server](https://stackduke.com/docs/guides/connect-an-mcp-server): Add your existing remote MCP server as a Connection, connect its account, refresh its tools, and assign it to Agents.
- [Create and publish a Policy](https://stackduke.com/docs/guides/create-a-policy): Build a Policy on the Rules tab, in Policy as Code or with the refund template, publish a version, and assign it to an Agent.
- [Investigate in Activity](https://stackduke.com/docs/guides/investigate-activity): Use Activity's Timeline and Action Records views, the Execution Trace, and the Action Record dialog to find out what an Agent did and why.
- [Manage your organization and workspaces](https://stackduke.com/docs/guides/manage-organizations-and-workspaces): See members and their roles, create custom roles, and use workspaces to separate Production from Staging and Development. Inviting members is coming soon.
- [Manage spend and usage](https://stackduke.com/docs/guides/manage-spend-budgets): Set the enforced workspace spend cap, use Agent usage to find contributors, and respond safely when spend approaches the limit.
- [Radar MCP server](https://stackduke.com/docs/guides/radar-mcp-server): Ask an AI client what changed in the tool lists of official vendor MCP servers, from the data behind Radar, Stackduke's public tracker. Read-only, no sign-in.
- [Read the Control Map](https://stackduke.com/docs/guides/read-the-control-map): The Control Map is the Graph in the dashboard. It draws an Agent and the Connections it can reach, and is the place to open each Agent's Connections, Policies, Tools, Activity and Alerts.
- [Register an Agent](https://stackduke.com/docs/guides/register-an-agent): Register an Agent, connect your MCP client with the Stackduke MCP server URL and access key, and set its Connections, Policies, basic controls and spend budget.
- [Respond to Alerts](https://stackduke.com/docs/guides/respond-to-alerts): Find the alerts that need a response, take ownership, act on the next step, and resolve them.
- [Review the Approval Queue](https://stackduke.com/docs/guides/review-approvals): Find a held action in the Approval Queue, check exactly what it would do, and Approve Once or Deny with a reason.
- [Review tool changes](https://stackduke.com/docs/guides/review-tool-changes): When an MCP server's tool definitions change, Stackduke flags the change. Compare the definitions and accept or reject the catalogue; on a Connection that holds changed tools, calls wait for this review.
- [Verify a governance boundary](https://stackduke.com/docs/guides/verify-governance): Test policy boundaries without execution, confirm Observe or Enforce semantics, and verify the resulting decision, approval, outcome and record integrity.
- [Quickstart](https://stackduke.com/docs/quickstart): Protect your first Agent with Stackduke. Register an Agent, connect an MCP server, set one boundary, try it, and inspect the Action Record.
- [Plans and governed actions](https://stackduke.com/docs/reference/plans): Each Stackduke plan includes a monthly allowance of governed actions and a retention period for Action Records.
- [Policy rule model](https://stackduke.com/docs/reference/policy-rules): The fields of a Policy and its rules, as shown in Policy as Code (schema stackduke.policy/v1).
- [Security and data](https://stackduke.com/docs/reference/security-and-data): Where Stackduke processes and stores data, how long Action Records are kept, how record integrity works, and how Agent credentials are handled.
- [Statuses](https://stackduke.com/docs/reference/statuses): Every status label in the Stackduke dashboard, for decisions, approval requests, action outcomes and their lifecycles, evidence integrity, health, coverage, tools, Policies, Agents and alerts.
- [Terminology](https://stackduke.com/docs/reference/terminology): The exact labels used in the Stackduke dashboard, what each one means, and the retired names they replace.
- [Tour the dashboard](https://stackduke.com/docs/tour): Find your way around the Stackduke dashboard and what each surface is for.

## Journal

- [Read-only or full access: when should an AI agent ask a person first?](https://stackduke.com/blog/when-should-an-ai-agent-ask-first): Most tools let you make an AI agent read-only, or let it write. Real jobs sit in between. What your tools already let you limit, the gap those settings leave, and how to decide which calls should wait for a person.
- [MCP rug pulls and tool poisoning: when a server changes its tools after you approve them](https://stackduke.com/blog/mcp-rug-pulls-and-tool-poisoning): An MCP server can change its tool descriptions, schemas or tool list after you approve it. What a tool definition is, how rug pulls and tool poisoning work, how to tell them from a normal update, and how to defend.
- [What an MCP gateway is, and when you need one](https://stackduke.com/blog/what-is-an-mcp-gateway): An MCP gateway sits between your AI agents and their MCP servers. What it does, what it does not do, and how to tell whether you need one yet.
- [Why I am building Stackduke](https://stackduke.com/blog/why-im-building-stackduke): Why I am building Stackduke for AI agent governance: spending limits, tool permissions, and human approval before consequential actions.

## Contact

- Email: hello@stackduke.com
- Early access: https://stackduke.com/waitlist