Aegis
Server Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
| GROQ_API_KEY | No | API key for Groq, used only for explain_attack_path. Every other tool works without it. |
Capabilities
Features and capabilities supported by this server
| Capability | Details |
|---|---|
| tasks | {
"list": {},
"cancel": {},
"requests": {
"tools": {
"call": {}
}
}
} |
| tools | {
"listChanged": true
} |
| prompts | {
"listChanged": true
} |
| resources | {
"subscribe": true,
"listChanged": true
} |
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
| connect_toolA | Connect a third-party tool (gmail, dropbox, postgres, slack, filesystem, calendar) to an agent, granting it that tool's capabilities. Returns the agent's updated effective capability set. |
| get_capability_graphA | Return the agent's capability graph: nodes (agent/tool/capability), edges (danger=true when part of a detected attack path), detected attack paths, and an overall risk score. |
| detect_attack_pathsA | Run the deterministic toxic-capability-combination detector for an agent and return any detected attack paths with severity and an overall risk score. |
| apply_policy_fixA | Remediate a detected attack path by disconnecting the tool that supplies its riskier (sink) capability from the agent, then return the refreshed capability graph. |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
| explain_attack_path | Explain a detected Aegis attack path in plain English for a non-technical audience. |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
| Aegis Policies | Toxic capability-combination rules Aegis checks for when auditing an agent's effective capabilities. |
| Health Checks | Current health status of all registered health checks |
| Capability Graph | UI component for Capability Graph |
| Attack Path Alert | UI component for Attack Path Alert |
| Widget Examples | Provides metadata and examples for all registered UI widgets |
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/prince-rai88/aegis-mcp'
If you have feedback or need assistance with the MCP directory API, please join our Discord server