Aegis
Aegis
Claude Code's sandbox lets an agent read your SSH keys and AWS credentials by default. Aegis doesn't.
[GIF HERE — agent tries .env, gets denied, Activity shows it]
What it does
Sits between your AI coding agent and your machine:
Deny by default on every tool call
Kernel sandbox on subprocesses —
cat .envcan't bypass itTamper-evident audit log — hash-chained, verifiable offline with a script that shares no code with the writer
Outbound requests checked before they're made
Secrets never reach the MCP server
Related MCP server: SentinelGate
Install (2 minutes, macOS Apple Silicon)
pip install aegis-mcp
aegis init # detects Claude Code / Cursor, asks 2 questions
aegis doctor # proves the proxy is actually runningOptional Mac app: [releases link]
What it does NOT do
Does not stop prompt injection
Cannot protect anything outside the MCP boundary
Kernel escape defeats the sandbox
No external security review, no certifications
Full threat model: THREAT-MODEL.md
License
MIT
This server cannot be installed
Maintenance
Resources
Unclaimed servers have limited discoverability.
Looking for Admin?
If you are the server author, to access and configure the admin panel.
Related MCP Connectors
Governance layer for AI coding agents: knowledge-graph grounding, session audit, policy controls.
AgentGuard — 20-tool AI safety MCP: policy preflight, risk scoring, audit logging, rate limits.
Security gateway for AI agents: policy, approval, and audited execution, no secrets shared.
Formally-verified injection/exfiltration detector for AI agents (MCP-02).
Related MCP Servers
- AlicenseNot gradedqualityFmaintenanceGovernance kernel for AI agents — policy enforcement, code safety verification, multi-model hallucination detection (CMVK), trust attestation (IATP), and immutable audit trails. Works with Claude Desktop, Cursor, and any MCP client.73MIT

SentinelGateofficial
AlicenseNot gradedqualityAmaintenanceOpen-source MCP proxy that enforces security policies, content scanning, and audit logging between AI agents and tool servers25AGPL 3.0- AlicenseAqualityAmaintenanceMCP security server for AI coding agents. 12 tools: pre-install guardian, vulnerability audit, supply-chain attack detection via static code analysis, and CycloneDX 1.6 SBOM generation. Zero runtime dependencies.143615Apache 2.0
- AlicenseNot gradedqualityCmaintenanceRuntime safety guardrails for AI coding agents. Checks file access, validates shell commands, and scores your repo's AI safety — all via MCP.58MIT
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/Adarsh14734/aegis'
If you have feedback or need assistance with the MCP directory API, please join our Discord server