AgentAegis
Server Details
Pay-per-call cybersecurity for AI agents: vuln scans, threat intel, compliance, code security.
- Status
- Healthy
- Last Tested
- Transport
- Streamable HTTP
- URL
- Repository
- astafford8488/agentaegis-mcp
- GitHub Stars
- 1
- Server Listing
- AgentAegis
Glama MCP Gateway
Connect through Glama MCP Gateway for full control over tool access and complete visibility into every call.
Full call logging
Every tool call is logged with complete inputs and outputs, so you can debug issues and audit what your agents are doing.
Tool access control
Enable or disable individual tools per connector, so you decide what your agents can and cannot do.
Managed credentials
Glama handles OAuth flows, token storage, and automatic rotation, so credentials never expire on your clients.
Usage analytics
See which tools your agents call, how often, and when, so you can understand usage patterns and catch anomalies.
Tool Definition Quality
Average 3.1/5 across 26 of 26 tools scored. Lowest: 1.9/5.
Each tool targets a distinct security audit or compliance function. Overlap is minimal and well-defined (e.g., vuln_scan_network vs vuln_scan_web_app). Informational tools (help, agent_whoami) are clearly separate.
Tool names predominantly follow a verb_noun snake_case pattern. Minor exceptions like 'help' (noun only) and 'account_balance' (noun_noun) are still clear and do not cause confusion.
With 26 tools, the set is slightly large but each tool serves a distinct purpose within a broad security toolkit. The scope justifies the count; it does not feel bloated.
The tool surface covers vulnerability scanning, compliance frameworks, credential checks, secret scanning, SSL/TLS, email security, DNS, threat intel, incident triage, policy generation, and more. No obvious gaps for the domain.
Available Tools
28 toolsaccess_reviewInspect
Audit user access against least-privilege.
| Name | Required | Description | Default |
|---|---|---|---|
| users | Yes | ||
| admin_roles | No | ||
| previous_scan_id | No | Optional. A prior scan_id (from agent_history) to record as this call's parent — builds a traversable chained-workflow lineage retrievable via agent_scan_get. Must be one of your own scans; ignored otherwise. Does not change this tool's analysis. | |
| sensitive_permissions | No |
account_balanceInspect
Returns the calling API key's prepaid balance, monthly limit, current month usage, and a breakdown of how many of each tool the customer can still afford. Free to call.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
agent_historyInspect
Lists your recent scans (scan_id, tool, target, status, time) so you can retrieve or chain from a prior result. Optional limit/tool/target/since filters. Free to call.
| Name | Required | Description | Default |
|---|---|---|---|
| tool | No | Filter to a single tool name (e.g. 'cve_lookup'). | |
| limit | No | Max scans to return (default 25). | |
| since | No | ISO-8601 timestamp; only scans started at/after this time. | |
| target | No | Filter to scans of a specific target. |
agent_scan_getInspect
Retrieves one of your prior scans by scan_id, including the stored full output, so you can build on earlier results without re-paying. Free to call.
| Name | Required | Description | Default |
|---|---|---|---|
| scan_id | Yes | The scan id to retrieve (from agent_history). | |
| include_full_output | No | Include the full stored tool output, not just the summary (default true). |
agent_whoamiInspect
Returns your persistent AgentAegis agent identity (agent_id), how you're identified (API key / wallet / anonymous session), and lifetime call count + spend. Free to call.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
audit_report_generateInspect
Generate audit-ready compliance reports.
| Name | Required | Description | Default |
|---|---|---|---|
| framework | Yes | ||
| report_date | Yes | ||
| report_type | Yes | ||
| previous_scan_id | No | Optional. A prior scan_id (from agent_history) to record as this call's parent — builds a traversable chained-workflow lineage retrievable via agent_scan_get. Must be one of your own scans; ignored otherwise. Does not change this tool's analysis. | |
| organization_name | Yes | ||
| assessment_results | Yes |
compliance_framework_checkInspect
Assess an organization's security posture against a compliance framework (SOC 2, ISO 27001, HIPAA, PCI-DSS, NIST CSF).
| Name | Required | Description | Default |
|---|---|---|---|
| framework | Yes | ||
| previous_scan_id | No | Optional. A prior scan_id (from agent_history) to record as this call's parent — builds a traversable chained-workflow lineage retrievable via agent_scan_get. Must be one of your own scans; ignored otherwise. Does not change this tool's analysis. | |
| organization_profile | Yes |
control_gap_analysisInspect
Deep-dive analysis of compliance control gaps with remediation roadmap.
| Name | Required | Description | Default |
|---|---|---|---|
| framework | Yes | ||
| failing_controls | Yes | ||
| previous_scan_id | No | Optional. A prior scan_id (from agent_history) to record as this call's parent — builds a traversable chained-workflow lineage retrievable via agent_scan_get. Must be one of your own scans; ignored otherwise. Does not change this tool's analysis. | |
| budget_constraint | No | ||
| timeline_constraint | No |
credential_checkInspect
Check email/domain in breach databases (HIBP).
| Name | Required | Description | Default |
|---|---|---|---|
| target | Yes | ||
| check_type | Yes | ||
| previous_scan_id | No | Optional. A prior scan_id (from agent_history) to record as this call's parent — builds a traversable chained-workflow lineage retrievable via agent_scan_get. Must be one of your own scans; ignored otherwise. Does not change this tool's analysis. |
cve_lookupInspect
Look up CVE details, CVSS scores, and patches.
| Name | Required | Description | Default |
|---|---|---|---|
| cve_id | Yes | ||
| previous_scan_id | No | Optional. A prior scan_id (from agent_history) to record as this call's parent — builds a traversable chained-workflow lineage retrievable via agent_scan_get. Must be one of your own scans; ignored otherwise. Does not change this tool's analysis. |
dependency_auditInspect
Audit dependencies for known vulnerabilities (npm, pip, Go, Ruby, Java, Cargo).
| Name | Required | Description | Default |
|---|---|---|---|
| source | Yes | ||
| previous_scan_id | No | Optional. A prior scan_id (from agent_history) to record as this call's parent — builds a traversable chained-workflow lineage retrievable via agent_scan_get. Must be one of your own scans; ignored otherwise. Does not change this tool's analysis. |
dns_security_checkInspect
Check DNS security (SPF, DKIM, DMARC, DNSSEC).
| Name | Required | Description | Default |
|---|---|---|---|
| domain | Yes | ||
| previous_scan_id | No | Optional. A prior scan_id (from agent_history) to record as this call's parent — builds a traversable chained-workflow lineage retrievable via agent_scan_get. Must be one of your own scans; ignored otherwise. Does not change this tool's analysis. |
email_security_auditInspect
Comprehensive email security audit.
| Name | Required | Description | Default |
|---|---|---|---|
| domain | Yes | ||
| previous_scan_id | No | Optional. A prior scan_id (from agent_history) to record as this call's parent — builds a traversable chained-workflow lineage retrievable via agent_scan_get. Must be one of your own scans; ignored otherwise. Does not change this tool's analysis. | |
| include_mx_analysis | No |
evidence_collectInspect
Generate evidence collection plans for compliance controls.
| Name | Required | Description | Default |
|---|---|---|---|
| framework | Yes | ||
| control_ids | Yes | ||
| integrations | No | ||
| previous_scan_id | No | Optional. A prior scan_id (from agent_history) to record as this call's parent — builds a traversable chained-workflow lineage retrievable via agent_scan_get. Must be one of your own scans; ignored otherwise. Does not change this tool's analysis. |
helpInspect
Returns AgentAegis FAQ — authentication, balance/billing, tool catalog, async jobs, error codes, x402, rate limits, security. Optional topic filter. Free to call.
| Name | Required | Description | Default |
|---|---|---|---|
| topic | No |
incident_triageInspect
Classify and respond to security incidents.
| Name | Required | Description | Default |
|---|---|---|---|
| indicators | Yes | ||
| previous_scan_id | No | Optional. A prior scan_id (from agent_history) to record as this call's parent — builds a traversable chained-workflow lineage retrievable via agent_scan_get. Must be one of your own scans; ignored otherwise. Does not change this tool's analysis. | |
| environment_context | No | ||
| incident_description | Yes |
mfa_auditInspect
Assess MFA coverage and strength.
| Name | Required | Description | Default |
|---|---|---|---|
| users | Yes | ||
| previous_scan_id | No | Optional. A prior scan_id (from agent_history) to record as this call's parent — builds a traversable chained-workflow lineage retrievable via agent_scan_get. Must be one of your own scans; ignored otherwise. Does not change this tool's analysis. |
policy_generateInspect
Generate tailored security policy documents.
| Name | Required | Description | Default |
|---|---|---|---|
| industry | Yes | ||
| frameworks | Yes | ||
| policy_type | Yes | ||
| customizations | No | ||
| employee_count | Yes | ||
| previous_scan_id | No | Optional. A prior scan_id (from agent_history) to record as this call's parent — builds a traversable chained-workflow lineage retrievable via agent_scan_get. Must be one of your own scans; ignored otherwise. Does not change this tool's analysis. | |
| organization_name | Yes |
sast_scanInspect
Static analysis for security vulnerabilities. Supports Python, JS/TS, Java, Go, Ruby, PHP, C/C++.
| Name | Required | Description | Default |
|---|---|---|---|
| source | Yes | ||
| previous_scan_id | No | Optional. A prior scan_id (from agent_history) to record as this call's parent — builds a traversable chained-workflow lineage retrievable via agent_scan_get. Must be one of your own scans; ignored otherwise. Does not change this tool's analysis. | |
| severity_threshold | No |
scan_mcp_pluginInspect
Scan an MCP server (git repo or code) for supply-chain risk BEFORE trusting it — exfiltration (secrets/env to the network), prompt-injection sinks, dangerous capabilities, npm install hooks, obfuscation, plus Semgrep + secret scanning → a PROCEED/CAUTION/BLOCK verdict with findings.
| Name | Required | Description | Default |
|---|---|---|---|
| source | Yes | ||
| previous_scan_id | No | Optional. A prior scan_id (from agent_history) to record as this call's parent — builds a traversable chained-workflow lineage retrievable via agent_scan_get. Must be one of your own scans; ignored otherwise. Does not change this tool's analysis. |
scan_skillInspect
Scan an agent SKILL (git repo or SKILL.md) for supply-chain risk BEFORE trusting it — prompt-injection / hidden-unicode in the instructions (hard block), over-broad allowed-tools grants, plus exfiltration, dangerous capabilities, secrets and obfuscation in bundled scripts → a PROCEED/CAUTION/BLOCK verdict.
| Name | Required | Description | Default |
|---|---|---|---|
| source | Yes | ||
| previous_scan_id | No | Optional. A prior scan_id (from agent_history) to record as this call's parent — builds a traversable chained-workflow lineage retrievable via agent_scan_get. Must be one of your own scans; ignored otherwise. Does not change this tool's analysis. |
secret_scanInspect
Detect hardcoded secrets in source code.
| Name | Required | Description | Default |
|---|---|---|---|
| source | Yes | ||
| include_history | No | ||
| previous_scan_id | No | Optional. A prior scan_id (from agent_history) to record as this call's parent — builds a traversable chained-workflow lineage retrievable via agent_scan_get. Must be one of your own scans; ignored otherwise. Does not change this tool's analysis. |
ssl_tls_auditInspect
Audit SSL/TLS configuration for a domain.
| Name | Required | Description | Default |
|---|---|---|---|
| port | No | ||
| hostname | Yes | ||
| previous_scan_id | No | Optional. A prior scan_id (from agent_history) to record as this call's parent — builds a traversable chained-workflow lineage retrievable via agent_scan_get. Must be one of your own scans; ignored otherwise. Does not change this tool's analysis. |
threat_intel_lookupInspect
IOC lookup against threat intel feeds.
| Name | Required | Description | Default |
|---|---|---|---|
| indicator | Yes | ||
| indicator_type | Yes | ||
| previous_scan_id | No | Optional. A prior scan_id (from agent_history) to record as this call's parent — builds a traversable chained-workflow lineage retrievable via agent_scan_get. Must be one of your own scans; ignored otherwise. Does not change this tool's analysis. |
vet_endpointInspect
Composite trust verdict (PROCEED/CAUTION/BLOCK) for an endpoint an agent is about to call or pay — combines TLS/cert health, DNS hygiene, threat-intel reputation, and domain age into one decision with reasons.
| Name | Required | Description | Default |
|---|---|---|---|
| endpoint | Yes | The endpoint to vet — a full URL (https://api.example.com/pay) or a bare domain (example.com). | |
| previous_scan_id | No | Optional. A prior scan_id (from agent_history) to record as this call's parent — builds a traversable chained-workflow lineage retrievable via agent_scan_get. Must be one of your own scans; ignored otherwise. Does not change this tool's analysis. |
vuln_prioritizeInspect
Prioritize vulnerabilities by exploitability and business impact.
| Name | Required | Description | Default |
|---|---|---|---|
| findings | Yes | ||
| business_context | No | ||
| previous_scan_id | No | Optional. A prior scan_id (from agent_history) to record as this call's parent — builds a traversable chained-workflow lineage retrievable via agent_scan_get. Must be one of your own scans; ignored otherwise. Does not change this tool's analysis. |
vuln_scan_networkInspect
Scan an IP/domain for open ports, services, and vulnerabilities.
| Name | Required | Description | Default |
|---|---|---|---|
| async | No | ||
| target | Yes | ||
| scan_type | Yes | ||
| port_range | No | ||
| previous_scan_id | No | Optional. A prior scan_id (from agent_history) to record as this call's parent — builds a traversable chained-workflow lineage retrievable via agent_scan_get. Must be one of your own scans; ignored otherwise. Does not change this tool's analysis. |
vuln_scan_web_appInspect
Scan a web app for OWASP Top 10 vulnerabilities.
| Name | Required | Description | Default |
|---|---|---|---|
| async | No | ||
| scan_depth | Yes | ||
| target_url | Yes | ||
| exclude_paths | No | ||
| authentication | No | ||
| previous_scan_id | No | Optional. A prior scan_id (from agent_history) to record as this call's parent — builds a traversable chained-workflow lineage retrievable via agent_scan_get. Must be one of your own scans; ignored otherwise. Does not change this tool's analysis. |
Claim this connector by publishing a /.well-known/glama.json file on your server's domain with the following structure:
{
"$schema": "https://glama.ai/mcp/schemas/connector.json",
"maintainers": [{ "email": "your-email@example.com" }]
}The email address must match the email associated with your Glama account. Once published, Glama will automatically detect and verify the file within a few minutes.
Control your server's listing on Glama, including description and metadata
Access analytics and receive server usage reports
Get monitoring and health status updates for your server
Feature your server to boost visibility and reach more users
For users:
Full audit trail – every tool call is logged with inputs and outputs for compliance and debugging
Granular tool control – enable or disable individual tools per connector to limit what your AI agents can do
Centralized credential management – store and rotate API keys and OAuth tokens in one place
Change alerts – get notified when a connector changes its schema, adds or removes tools, or updates tool definitions, so nothing breaks silently
For server owners:
Proven adoption – public usage metrics on your listing show real-world traction and build trust with prospective users
Tool-level analytics – see which tools are being used most, helping you prioritize development and documentation
Direct user feedback – users can report issues and suggest improvements through the listing, giving you a channel you would not have otherwise
The connector status is unhealthy when Glama is unable to successfully connect to the server. This can happen for several reasons:
The server is experiencing an outage
The URL of the server is wrong
Credentials required to access the server are missing or invalid
If you are the owner of this MCP connector and would like to make modifications to the listing, including providing test credentials for accessing the server, please contact support@glama.ai.
Discussions
No comments yet. Be the first to start the discussion!
Your Connectors
Sign in to create a connector for this server.