AgentAegis MCP Server

io.github.astafford8488/agentaegis

answering

AgentAegis is answering right now. Last checked 14 min ago. It exposes 28 tools. Last commit 3 Aug 2026.

Pay-per-call cybersecurity for AI agents: vuln scans, threat intel, compliance, code security.

Uptime history 43 hours of history

43 hours agonow

100.0%

Uptime 24h

91 of 91 checks

Tools

read from the server

293 ms

Response time

average over 24h

Stars

last commit 3 Aug 2026

Connect this server

Endpoint below is the one we actually reach during checks — not the one copied from a README. Last verified 14 min ago.

Claude Code Claude Desktop Codex Cursor VS Code

run in your terminal

claude mcp add agentaegis --transport http https://agentaegis-mcp-production.up.railway.app/mcp

~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "agentaegis": {
      "url": "https://agentaegis-mcp-production.up.railway.app/mcp"
    }
  }
}

~/.codex/config.toml

[mcp_servers.agentaegis]
url = "https://agentaegis-mcp-production.up.railway.app/mcp"

.cursor/mcp.json

{
  "mcpServers": {
    "agentaegis": {
      "url": "https://agentaegis-mcp-production.up.railway.app/mcp"
    }
  }
}

.vscode/mcp.json

{
  "mcpServers": {
    "agentaegis": {
      "url": "https://agentaegis-mcp-production.up.railway.app/mcp"
    }
  }
}

Available tools 28

Read directly from the server with tools/list, grouped by what they act on. If a tool disappears, we record the date.

agent

agent_history

Lists your recent scans (scan_id, tool, target, status, time) so you can retrieve or chain from a prior result. Optional limit/tool/target/since filters. Free to call.

agent_scan_get

Retrieves one of your prior scans by scan_id, including the stored full output, so you can build on earlier results without re-paying. Free to call.

agent_whoami

Returns your persistent AgentAegis agent identity (agent_id), how you're identified (API key / wallet / anonymous session), and lifetime call count + spend. Free to call.

vuln

vuln_prioritize

Prioritize vulnerabilities by exploitability and business impact.

vuln_scan_network

Scan an IP/domain for open ports, services, and vulnerabilities.

vuln_scan_web_app

Scan a web app for OWASP Top 10 vulnerabilities.

scan

scan_mcp_plugin

Scan an MCP server (git repo or code) for supply-chain risk BEFORE trusting it — exfiltration (secrets/env to the network), prompt-injection sinks, dangerous capabilities, npm install hooks, obfuscation, plus Semgrep + secret scanning → a PROCEED/CAUTION/BLOCK verdict with findings.

scan_skill

Scan an agent SKILL (git repo or SKILL.md) for supply-chain risk BEFORE trusting it — prompt-injection / hidden-unicode in the instructions (hard block), over-broad allowed-tools grants, plus exfiltration, dangerous capabilities, secrets and obfuscation in bundled scripts → a PROCEED/CAUTION/BLOCK verdict.

access

access_review

Audit user access against least-privilege.

account

account_balance

Returns the calling API key's prepaid balance, monthly limit, current month usage, and a breakdown of how many of each tool the customer can still afford. Free to call.

audit

audit_report_generate

Generate audit-ready compliance reports.

compliance

compliance_framework_check

Assess an organization's security posture against a compliance framework (SOC 2, ISO 27001, HIPAA, PCI-DSS, NIST CSF).

control

control_gap_analysis

Deep-dive analysis of compliance control gaps with remediation roadmap.

credential

credential_check

Check email/domain in breach databases (HIBP).

cve

cve_lookup

Look up CVE details, CVSS scores, and patches.

dependency

dependency_audit

Audit dependencies for known vulnerabilities (npm, pip, Go, Ruby, Java, Cargo).

dns

dns_security_check

Check DNS security (SPF, DKIM, DMARC, DNSSEC).

email_security_audit

Comprehensive email security audit.

evidence

evidence_collect

Generate evidence collection plans for compliance controls.

help

help

Returns AgentAegis FAQ — authentication, balance/billing, tool catalog, async jobs, error codes, x402, rate limits, security. Optional topic filter. Free to call.

incident

incident_triage

Classify and respond to security incidents.

mfa

mfa_audit

Assess MFA coverage and strength.

policy

policy_generate

Generate tailored security policy documents.

sast

sast_scan

Static analysis for security vulnerabilities. Supports Python, JS/TS, Java, Go, Ruby, PHP, C/C++.

secret

secret_scan

Detect hardcoded secrets in source code.

ssl

ssl_tls_audit

Audit SSL/TLS configuration for a domain.

threat

threat_intel_lookup

IOC lookup against threat intel feeds.

vet

vet_endpoint

Composite trust verdict (PROCEED/CAUTION/BLOCK) for an endpoint an agent is about to call or pay — combines TLS/cert health, DNS hygiene, threat-intel reputation, and domain age into one decision with reasons.

Endpoints

URL	Transport	State	Latency	Checked
https://agentaegis-mcp-production.up.railway.app/mcp	streamable-http	answering	311 ms	14 min ago

AgentAegis — questions

Answers built from our own checks of this server.

What can AgentAegis do?

It exposes 28 tools, read directly from the server on our last check. Among them: access_review, account_balance, agent_history, agent_scan_get, agent_whoami, audit_report_generate and 22 more. The full list with descriptions is on this page — we take it from the server itself via tools/list, not from a README. How MCP servers expose tools in the first place →

What is AgentAegis mostly used for?

Its tools cluster around vuln, agent and scan. That is what this server is built to work with — the grouping comes from the actual tool names, not from a category we assigned.

Is AgentAegis working right now?

We send a real MCP handshake every 15 minutes. Over the last 24 hours 91 of 91 checks got a reply (100.0%), average response time 293 ms. The bar chart above shows every period we have measured.

How do I connect AgentAegis?

Copy the ready config from this page — we generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each with the file path that client actually reads. It is a remote server, so there is nothing to install — the client connects to the address.

Does AgentAegis need an API key?

No. AgentAegis completed a full MCP handshake with us as an anonymous client and listed its tools without asking for anything. All 28 of them are readable on this page. This is what we observed, not what the docs claim.

How fast is AgentAegis?

It answers our handshake in 293 ms on average, which is faster than 47% of all working MCP servers we measure. The comparison comes from our own checks across the whole registry, every 15 minutes.

Is AgentAegis open source?

Yes — it is published under the MIT licence, written in TypeScript and 1 stars on GitHub. The source link is on this page, so you can read exactly what it does with your data before you connect it.