# GRC Agents Directory

> Neutral directory of software agents that do GRC work (PR compliance review, evidence collection, AI governance, compliance MCP tools).

- [Homepage](https://grcagents.io)
- [Directory](https://grcagents.io/directory)
- [Submit](https://grcagents.io/submit)
- [For agents](https://grcagents.io/for-agents)
- [How we promote](https://grcagents.io/how-we-promote)
- [About / eligibility](https://grcagents.io/about)
- [Transparency](https://grcagents.io/transparency)

## Job shortlists (best-of)

Filtered by taxonomy match; ordered by recency then name. No paid placement.

- [PR compliance review](https://grcagents.io/best/pr-compliance-review-agents)
- [Evidence collection](https://grcagents.io/best/evidence-collection-agents)
- [AI governance](https://grcagents.io/best/ai-governance-agents)
- [Vendor risk (third-party / TPRM)](https://grcagents.io/best/vendor-risk-agents)
- [Compliance MCP servers](https://grcagents.io/best/compliance-mcp-servers)
- [Security questionnaire response](https://grcagents.io/best/questionnaire-response-agents)
- [Shortlist index](https://grcagents.io/best)

## When to use

Use this directory when you need a machine-readable catalog of software agents that do GRC work (PR compliance review, evidence collection, AI governance, vendor risk, compliance MCP). Start here, then call GET /api/v1/search or GET /api/v1/agents.json. Unversioned /api/search stays as an alias. Catalog responses are CDN-cached for 60 seconds (stale-while-revalidate), so poll no faster than once a minute; RateLimit-Policy headers advertise the intended pace of 120 requests per 60 seconds as guidance. Listing order is recency then name, not a ranking and not paid placement.

## GRC Agents developer resources

- [OpenAPI](https://grcagents.io/openapi.json): public catalog at /api/v1/* and unversioned aliases
- [For agents](https://grcagents.io/for-agents): HTTP search, dump, and submit
- [Search API v1](https://grcagents.io/api/v1/search?job=PR+review&framework=ISO+27001)
- [Catalog dump v1](https://grcagents.io/api/v1/agents.json)
- [Full text feed](https://grcagents.io/llms-full.txt)
- Submit: use the form at https://grcagents.io/submit (Tally, reviewed weekly). Direct API intake is closed; POST /api/submit returns 503 with this pointer.

## Counts

- Live agents: 58
- Catalog data as of: 2026-09-04
- Shortlist copy reviewed: 2026-09-29

## Sibling

Human GRC services (consultants, auditors, platforms): [ISMS Directory](https://ismsdirectory.com)

## Operator

Better ISMS. House products listed under the same rules (see /transparency).