# AgentAegis MCP server

Pay-per-call cybersecurity for AI agents: vuln scans, threat intel, compliance, code security.

## Links
- Registry page: https://www.getdrio.com/mcp/io-github-astafford8488-agentaegis
- Repository: https://github.com/astafford8488/agentaegis-mcp

## Install
- Endpoint: https://agentaegis-mcp-production.up.railway.app/mcp
- Auth: Not captured

## Setup notes
- Remote endpoint: https://agentaegis-mcp-production.up.railway.app/mcp

## Tools
- compliance_framework_check - Assess an organization's security posture against a compliance framework (SOC 2, ISO 27001, HIPAA, PCI-DSS, NIST CSF). Endpoint: https://agentaegis-mcp-production.up.railway.app/mcp
- evidence_collect - Generate evidence collection plans for compliance controls. Endpoint: https://agentaegis-mcp-production.up.railway.app/mcp
- control_gap_analysis - Deep-dive analysis of compliance control gaps with remediation roadmap. Endpoint: https://agentaegis-mcp-production.up.railway.app/mcp
- audit_report_generate - Generate audit-ready compliance reports. Endpoint: https://agentaegis-mcp-production.up.railway.app/mcp
- policy_generate - Generate tailored security policy documents. Endpoint: https://agentaegis-mcp-production.up.railway.app/mcp
- vuln_scan_network - Scan an IP/domain for open ports, services, and vulnerabilities. Endpoint: https://agentaegis-mcp-production.up.railway.app/mcp
- vuln_scan_web_app - Scan a web app for OWASP Top 10 vulnerabilities. Endpoint: https://agentaegis-mcp-production.up.railway.app/mcp
- vuln_prioritize - Prioritize vulnerabilities by exploitability and business impact. Endpoint: https://agentaegis-mcp-production.up.railway.app/mcp
- cve_lookup - Look up CVE details, CVSS scores, and patches. Endpoint: https://agentaegis-mcp-production.up.railway.app/mcp
- ssl_tls_audit - Audit SSL/TLS configuration for a domain. Endpoint: https://agentaegis-mcp-production.up.railway.app/mcp
- sast_scan - Static analysis for security vulnerabilities. Supports Python, JS/TS, Java, Go, Ruby, PHP, C/C++. Endpoint: https://agentaegis-mcp-production.up.railway.app/mcp
- secret_scan - Detect hardcoded secrets in source code. Endpoint: https://agentaegis-mcp-production.up.railway.app/mcp
- dependency_audit - Audit dependencies for known vulnerabilities (npm, pip, Go, Ruby, Java, Cargo). Endpoint: https://agentaegis-mcp-production.up.railway.app/mcp
- incident_triage - Classify and respond to security incidents. Endpoint: https://agentaegis-mcp-production.up.railway.app/mcp
- threat_intel_lookup - IOC lookup against threat intel feeds. Endpoint: https://agentaegis-mcp-production.up.railway.app/mcp
- dns_security_check - Check DNS security (SPF, DKIM, DMARC, DNSSEC). Endpoint: https://agentaegis-mcp-production.up.railway.app/mcp
- email_security_audit - Comprehensive email security audit. Endpoint: https://agentaegis-mcp-production.up.railway.app/mcp
- access_review - Audit user access against least-privilege. Endpoint: https://agentaegis-mcp-production.up.railway.app/mcp
- mfa_audit - Assess MFA coverage and strength. Endpoint: https://agentaegis-mcp-production.up.railway.app/mcp
- credential_check - Check email/domain in breach databases (HIBP). Endpoint: https://agentaegis-mcp-production.up.railway.app/mcp
- vet_endpoint - Composite trust verdict (PROCEED/CAUTION/BLOCK) for an endpoint an agent is about to call or pay — combines TLS/cert health, DNS hygiene, threat-intel reputation, and domain age into one decision with reasons. Endpoint: https://agentaegis-mcp-production.up.railway.app/mcp
- scan_mcp_plugin - Scan an MCP server (git repo or code) for supply-chain risk BEFORE trusting it — exfiltration (secrets/env to the network), prompt-injection sinks, dangerous capabilities, npm install hooks, obfuscation, plus Semgrep + secret scanning → a PROCEED/CAUTION/BLOCK verdict with findings. Endpoint: https://agentaegis-mcp-production.up.railway.app/mcp
- scan_skill - Scan an agent SKILL (git repo or SKILL.md) for supply-chain risk BEFORE trusting it — prompt-injection / hidden-unicode in the instructions (hard block), over-broad allowed-tools grants, plus exfiltration, dangerous capabilities, secrets and obfuscation in bundled scripts → a PROCEED/CAUTION/BLOCK verdict. Endpoint: https://agentaegis-mcp-production.up.railway.app/mcp
- account_balance - Returns the calling API key's prepaid balance, monthly limit, current month usage, and a breakdown of how many of each tool the customer can still afford. Free to call. Endpoint: https://agentaegis-mcp-production.up.railway.app/mcp
- help - Returns AgentAegis FAQ — authentication, balance/billing, tool catalog, async jobs, error codes, x402, rate limits, security. Optional topic filter. Free to call. Endpoint: https://agentaegis-mcp-production.up.railway.app/mcp
- agent_whoami - Returns your persistent AgentAegis agent identity (agent_id), how you're identified (API key / wallet / anonymous session), and lifetime call count + spend. Free to call. Endpoint: https://agentaegis-mcp-production.up.railway.app/mcp
- agent_history - Lists your recent scans (scan_id, tool, target, status, time) so you can retrieve or chain from a prior result. Optional limit/tool/target/since filters. Free to call. Endpoint: https://agentaegis-mcp-production.up.railway.app/mcp
- agent_scan_get - Retrieves one of your prior scans by scan_id, including the stored full output, so you can build on earlier results without re-paying. Free to call. Endpoint: https://agentaegis-mcp-production.up.railway.app/mcp

## Resources
Not captured

## Prompts
Not captured

## Metadata
- Owner: io.github.astafford8488
- Version: 0.3.0
- Runtime: Streamable Http
- Transports: HTTP
- License: Not captured
- Language: Not captured
- Stars: Not captured
- Updated: Jun 16, 2026
- Source: https://registry.modelcontextprotocol.io