Compliance

App: QueryStory

New

Agentic data platform that turns business questions into defensible, auditable narratives — with sources, assumptions and lineage attached.

App: Tines

Featured

Build workflows, internal apps and AI agents on one governed platform, so IT and security keep visibility and control over everything teams ship.

App: Referent

New

AI-native practice management for small law firms: agents run intake, drafting, deadlines and billing; the lawyer approves every action.

App: Traccia

New

An OpenTelemetry-native control plane for AI agents that enforces policy mid-run instead of paging you after the incident, with cost attribution and EU AI Act evidence built in.

App: Decawork

An IT control plane that puts every internal AI agent — whoever built it and in whatever tool — behind one identity, access policy and audit trail.

App: xpander.ai

A governed platform for running AI agents in production, with Omni — an automated forward-deployed engineer that builds and maintains them for you.

App: Nuphos

Zeabur, Inc.

A shared DevOps workspace where AI agents investigate incidents and operate AWS, GCP and Kubernetes under IAM scoping, approval gates and a full audit trail.

App: WRITER

Writer, Inc.

Enterprise agentic AI platform built on its own Palmyra models — delegate marketing, sales and support work to agents that stay on-brand and inside IT's controls.

App: Prefactor

Prefactor Pty Ltd

Agent observability and evaluation that scores every production run for quality, drift and risk — and can pause or block a risky action before it executes.

App: Prelint

Prelint, Inc.

Reviews every pull request against your product specs, catching business-logic, compliance and scope drift that code review alone misses.

App: Spellbook

AI contract review and drafting that lives inside Microsoft Word, aimed at transactional lawyers.

App: Tabnine

Highly personalized AI that fits how you work · Context-aware suggestions based on your code and patterns

Skill: Supply Chain Risk Auditor

by Trail of Bits

New

Audits npm, PyPI and Go dependencies for advisories, abandoned upstreams, publisher concentration and install-time scripts — measured by scripts, not estimated.

Skill: PlanetScale Change Gates

by PlanetScale

New

PlanetScale's approval contract for agents: five operation classes that decide what a database agent may do freely, what needs a named approval, and what it must never do alone.

Skill: Snowflake Cortex Code Router

by Snowflake

New

Snowflake's official skill that routes Snowflake work from Claude Code to the Cortex Code CLI, with semantic routing, approval modes and audit logging.

Skill: Cloudflare One Zero Trust

by Cloudflare

Cloudflare's official skill for designing, configuring and troubleshooting Cloudflare One — Access, Gateway, WARP, Tunnel, DLP, CASB, device posture and identity — with retrieval over recalled docs.

Skill: Twilio Messaging & Voice Compliance

by Twilio

The rules that apply to live Twilio traffic — TCPA consent tiers, quiet hours and DNC, GDPR deletion rights, PCI DSS call recording, HIPAA, FDCPA, CAN-SPAM, WhatsApp policy and SHAKEN/STIR — with a consent-management pattern to implement.

Skill: Datadog Audit Trail

by Datadog

Answer "who changed what" from Datadog Audit Trail — configuration-change forensics, API key compromise, cost-spike root cause, SOC 2/PCI evidence and AI activity audits.

MCP: Vanta

by Vanta

New

Vanta's official remote MCP server — query controls, tests, vendors, vulnerabilities and policies across SOC 2 and ISO 27001, and remediate failing tests from your agent.

MCP: Cloudsmith MCP

by Cloudsmith

New

Cloudsmith's official MCP server, built into its CLI: manage artifact repositories, packages and policies through an agent, with write operations off by default.

MCP: Automox MCP Server

by Automox

Automox's official MCP server for endpoint management — 130+ tools over devices, patches, policies, groups and audit data, self-hosted or on Automox's hosted endpoint.