agent-policy-enforcement-mcp 1.0.3

Per-agent-pair IAM for A2A. Define policies ('orchestrator may call billing only when amount<1000'), gate every A2A call via evaluate_call. EU AI Act Art 14 + ISO 42001 Annex A.7 evidence with signed policy-decision attestations.

Agent Policy Enforcement MCP

Buy Starter — £29/mo

Signed attestations + unlimited audits + email support. 👉 Subscribe at meok.ai — instant HMAC signing key + Stripe-managed billing.

Free tier remains MIT-licensed and zero-config. Upgrade only when you need signed compliance artefacts for audit.

Per-agent-pair IAM for A2A orchestration

The runtime-governance primitive that EU AI Act Article 14 (human oversight) + ISO 42001 Annex A.7 (authorisation) demand for agent-to-agent systems.

By MEOK AI Labs.

Install

pip install agent-policy-enforcement-mcp

Tools

• define_policy
• evaluate_call
• list_policies
• remove_policy
• decision_log
• sign_policy_attestation

Claude Desktop

{
  "mcpServers": {
    "agentpolicyenforcement": { "command": "agent-policy-enforcement-mcp" }
  }
}

Tiers

• Free — generous daily limit (100-1,000 depending on operation)
• Pro £199/mo — unlimited + signed HMAC attestations with public verify URLs — subscribe
• Enterprise £1,499/mo — multi-tenant + custom predicate DSL + SIEM webhook push — subscribe

Why this exists

The EU AI Act (Aug 2026), DORA (live), ISO 42001, and OWASP LLM01 Top-10 all demand runtime controls for agent systems — not just deployment-time audits. This MCP is that runtime control layer, emitting cryptographically signed evidence your auditor accepts.

Related MEOK A2A MCPs

• agent-policy-enforcement-mcp — per-pair IAM
• agent-handoff-certified-mcp — signed delegation chain
• agent-prompt-injection-firewall-mcp — prompt injection WAF
• agent-rate-limiter-mcp — fleet-wide quota
• agent-audit-logger-mcp — hash-chained signed log
• a2a-governance-bridge-mcp — map A2A to compliance frameworks
• meok-attestation-verify — independent cert verifier

License

MIT — MEOK AI Labs, 2026.