Provides an MCP backend for an Alexa+ (Amazon) multimodal console, enabling live scam-call analysis, household emergency arbitration, and forensic claim dossier generation through the console.
Click on "Deploy Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type @ followed by the MCP server name and your instructions, e.g., "@AegisMCP Check this suspicious call: they say I’ll be arrested unless I pay with gift cards."
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
MCP Specification:
2025-11-25Streamable HTTP (/mcp)
License: MIT
When high-stakes crises strike at home—an elderly parent targeted by a coercive phone scammer demanding gift cards, a basement water heater rupturing near electrical circuits, or a sudden natural gas leak—standard voice assistants fall short. They recite generic web search blurbs while users struggle through 80-page insurance policy PDFs, warranty exclusion clauses, and phone trees.
AegisMCP bridges a simulated Alexa+ Multimodal Console to a self-hosted Model Context Protocol (MCP) server over the unified 2025-11-25 Streamable HTTP transport. It actively arbitrates emergencies across all home components, triggers reversible IoT safety containment, checks policy coverage, and compiles timestamped forensic claim dossiers.
+-----------------------------------------------------------------------------------+
| ALEXA+ SIMULATED MULTIMODAL CONSOLE (HTML/JS) |
| [Voice Command Input] [Live Scam Threat Gauge] [MCP Wire Inspector] |
+-----------------------------------------+-----------------------------------------+
|
HTTP POST /chat, /wire, /reset
v
+-----------------------------------------------------------------------------------+
| HOST BACKEND: "Simulated Alexa+" (FastAPI) |
| • Pure MCP Client (Zero imports from server / aegis_core packages) |
| • Manages Mcp-Session-Id and Streamable HTTP JSON-RPC/SSE wire payloads |
+-----------------------------------------+-----------------------------------------+
|
POST /mcp (Accept: application/json, text/event-stream)
Headers: Mcp-Session-Id, Origin Validation (Spec 2025-11-25)
v
+-----------------------------------------------------------------------------------+
| AEGIS-MCP SERVER (FastMCP Python • Streamable HTTP /mcp) |
| • OriginGuard: Rejects non-localhost origins with HTTP 403 (DNS-Rebinding) |
| • WireLog: Non-intrusive metadata ring buffer served at /debug/wire |
| |
| +-----------------------------+ +--------------------------------------------+ |
| | MCP Tools (@mcp.tool) | | MCP Resources (@mcp.resource, 2025-11-25) | |
| | • analyze_live_scam_call() | | • policy://household/master-insurance-2026 | |
| | • arbitrate_home_emergency()| | (audience: ["user","assistant"], p=0.95) | |
| | • compile_forensic_claim() | | • telemetry://smart-home-sensors | |
| | • reset_demo() | +--------------------------------------------+ |
| +-----------------------------+ |
+-----------------------------------------+-----------------------------------------+
|
v
+-----------------------------------------------------------------------------------+
| AWS STRANDS AGENTS SDK + BEDROCK DUAL-AGENT PIPELINE |
| • Analyst Agent : Read-only; inspects untrusted transcript; cannot act |
| • Responder Agent : Action tools only; never sees raw caller text (Anti-Injection)|
| • Fallback Router : Deterministic keyword tool caller when credentials absent |
+-----------------------------------------------------------------------------------+Related MCP server: Hearth v2
In strict adherence to truth-in-advertising hackathon guidelines:
Innovation | Implementation Details | Status |
Live Coercion Scam Check | Heuristic text analysis on supplied transcripts searching for high-pressure coercion vectors (arrest warrants, gift card demands, wire transfers, safe accounts, OTP harvesting). Method is always reported as | REAL |
Spoofed Institution Directory | Compares caller ID against an official directory of institutions (Chase, BofA, IRS, SSA, etc.). Mismatches add +20 risk points. | REAL (Directory is |
Emergency Arbitration for ALL Home Components | Covers 11 distinct household crisis categories: water heater rupture, pipe burst, electrical surge, natural gas leak, carbon monoxide, fire/smoke, security breach, basement flooding, HVAC failure, appliance breakdown, and garage door malfunction. Reversible actions are automatic; electrical isolation requires explicit user confirmation. | REAL (Devices are |
Streamable HTTP MCP Protocol | Single | REAL |
Forensic Claim Ledger (JSON + PDF) |
| REAL (Data is |
Analyst / Responder Split | Security architecture separating untrusted input analysis from action tool execution to prevent prompt injection attacks. Includes automatic fallback badge. | REAL |
Live Microphone Voice Streaming | Real-time browser speech capture via Web Speech API for both speakerphone call capture and Alexa voice commands. | REAL |
Home Assistant Hardware Bridge | Real Matter/Zigbee hardware integration via Home Assistant REST API with graceful simulated fallback when keys are absent. | REAL (Fallback is SIMULATED) |
Carrier-Grade Phone Intelligence | NPA-NXX area code classification, toll-free verification, VoIP detection, and Twilio/NumVerify API lookup. | REAL |
Semantic Policy RAG | In-memory semantic retrieval matching emergency observations against real standard HO-3 homeowners insurance forms, deductibles, and warranty rules. | REAL |
SHA-256 Forensic Audit Ledger | Cryptographic hashing of incident packets embedded in PDF headers and committed to an immutable append-only ledger (out/forensic_ledger.jsonl). | REAL |
Caregiver Emergency Alerting | Immediate SMS and Webhook dispatch to family guardians/landlords during high-stakes emergencies and predatory scam attempts. | REAL (Fallback is SIMULATED) |
Component | Status | Description |
MCP Protocol Transport | REAL | Full |
Tool Execution & Wire RPC | REAL | Host communicates with server purely over HTTP JSON-RPC / SSE |
Origin Guard Security | REAL | Non-localhost origins rejected with HTTP 403 Forbidden |
Wire Log Ring Buffer | REAL | Captures real HTTP method, path, status, and session IDs |
Claim Document Generation | REAL | Real |
Smart Home Hardware |
| Valves, breakers, locks, sensors, thermostats, and appliances |
Insurance Policies & Terms |
| Fixture policy clauses and deductibles for demonstration |
Phone Directory |
| Curated sample directory of official bank/agency phone numbers |
Vendor Emergency Dispatch |
| Service company names and estimated arrival times |
We evaluated analyze_live_scam_call against a curated 20-case test set (tests/scam_cases.json):
RESULTS (hand-made test set, 20 cases):
Scams caught: 8/8 (100% detection rate on high-coercion calls)
Scams missed: 0/8
Legitimate correct: 8/8 (0 false alarms on standard legitimate calls)
Legitimate false alarms: 0/8
Ambiguous flagged: 2/4 (SSN requests & number mismatches caught)
Ambiguous unflagged: 2/4 (Sub-threshold boundary cases)Run the benchmark yourself:
python -m tests.eval_scamPython 3.10+
pip
cd aegis-mcp-alexa-plus
pip install -r requirements.txt# Verify core logic & realism modules (43 unit tests)
pytest tests/test_core.py tests/test_realism.py -v
# Verify HTTP server lifecycle and OriginGuard (5 integration tests)
pytest tests/test_server_http.py -vpython -m uvicorn server.aegis_mcp_server:app --host 127.0.0.1 --port 8000Health check: http://127.0.0.1:8000/healthz
MCP Endpoint: http://127.0.0.1:8000/mcp
Debug Wire: http://127.0.0.1:8000/debug/wire
In a separate terminal:
python -m uvicorn host.app:app --host 127.0.0.1 --port 8080Open your browser to:
http://localhost:8080Execute the bundled lifecycle bash script:
bash scripts/mcp_lifecycle.sh http://127.0.0.1:8000/mcpThe script proves:
POST /mcp initialize returns session ID and capabilities.
POST /mcp notifications/initialized acknowledges handshake.
POST /mcp tools/list enumerates all crisis arbitration tools.
POST /mcp tools/call invokes analyze_live_scam_call.
POST /mcp resources/read fetches telemetry://smart-home-sensors.
Origin: http://evil.example is blocked with HTTP 403 Forbidden.
mcp-streamable-crisis-kitAs part of the Open Source Mini Challenge ($5,000), this repository includes a standalone reusable Python package located at packages/mcp-streamable-crisis-kit/:
LocalhostOriginGuard: Reusable ASGI middleware to prevent DNS-rebinding attacks on local MCP endpoints.
MemoryWireLog: Privacy-preserving in-memory wire logger capturing diagnostic traffic without leaking sensitive request bodies.
Full developer friction logs documenting real engineering challenges, workarounds, and actionable SDK feature requests are recorded in FRICTION_LOG.md and docs/FRICTION_LOG.md:
Windows Loopback Socket Permissions: WinError 10013 socket binding in sandboxed agent environments.
Windows CP1252 Console Output: Standard output crash on multi-byte unicode emojis.
ReportLab Type 1 Unicode Glyphs: Font rendering failures on unicode punctuation in PDF claim reports.
Strands SDK Import Namespace Divergence: Graceful fallback routing when Bedrock dependencies diverge.
FastMCP Streamable HTTP Session Invalidation: Auto-reconnect handling for HTTP 404 Session Not Found.
Native llowed_origins in FastMCP Streamable HTTP: Top-level CORS/Origin parameter needed in mcp.run(transport='streamable-http') to avoid manual ASGI middleware for localhost web clients.
AegisMCP is an academic/hackathon prototype developed for the Amazon Developer Hackathon. It does not provide certified legal, insurance, or emergency dispatch services. All smart home devices, telemetry streams, and insurer responses are SIMULATED. In any genuine emergency, call 911 or your local emergency services immediately.
This server cannot be deployed
Zero-secret MCP gateway for AI agents: risk-scored, audited calls with human-in-the-loop approval.
Live behavioral security verifier, schema auditor, and trust oracle for A2A, MCP & x402 agents.
A paid remote MCP for HyperFrames, built to return verdicts, receipts, usage logs, and audit-ready J
A paid remote MCP for ZeroLang, built to return verdicts, receipts, usage logs, and audit-ready JSON