MCP Server

io.github.getaegis/aegis MCP Server

Name: io.github.getaegis/aegis MCP Server
Author: io.github.getaegis

io.github.getaegis/aegis

Repository Registry

What is the io.github.getaegis/aegis MCP server?

Credential isolation for AI agents. Inject secrets at the network boundary.

How to install io.github.getaegis/aegis

Copy-paste configuration for popular MCP clients.

transport: stdio

Config generated by PluginBench — verify against the source before use.

Environment / auth

AEGIS_MASTER_KEY
required
secret
Master encryption key for the credential vault
AEGIS_SALT
required
secret
Hex-encoded 32-byte salt for key derivation (generated by aegis init)
AEGIS_DATA_DIR
Directory for vault databases and registry (default: .aegis/)
AEGIS_PORT
Gate proxy port (default: 3100)
AEGIS_LOG_LEVEL
Log verbosity: debug, info, warn, error (default: info)
AEGIS_LOG_FORMAT
Log output format: json or pretty (default: json)
AEGIS_VAULT
Named vault to use (default: default)
AEGIS_REQUIRE_AGENT_AUTH
Require agent authentication on every request (true/false, default: false)
AEGIS_POLICY_MODE
Policy enforcement mode: enforce, dry-run, or off (default: enforce)
AEGIS_POLICIES_DIR
Directory containing YAML policy files
AEGIS_METRICS
Enable Prometheus metrics endpoint (true/false, default: true)

Claude Desktop

~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "aegis": {
      "command": "npx",
      "args": [
        "-y",
        "@getaegis/cli"
      ],
      "env": {
        "AEGIS_MASTER_KEY": "<YOUR_AEGIS_MASTER_KEY>",
        "AEGIS_SALT": "<YOUR_AEGIS_SALT>",
        "AEGIS_DATA_DIR": "<YOUR_AEGIS_DATA_DIR>",
        "AEGIS_PORT": "<YOUR_AEGIS_PORT>",
        "AEGIS_LOG_LEVEL": "<YOUR_AEGIS_LOG_LEVEL>",
        "AEGIS_LOG_FORMAT": "<YOUR_AEGIS_LOG_FORMAT>",
        "AEGIS_VAULT": "<YOUR_AEGIS_VAULT>",
        "AEGIS_REQUIRE_AGENT_AUTH": "<YOUR_AEGIS_REQUIRE_AGENT_AUTH>",
        "AEGIS_POLICY_MODE": "<YOUR_AEGIS_POLICY_MODE>",
        "AEGIS_POLICIES_DIR": "<YOUR_AEGIS_POLICIES_DIR>",
        "AEGIS_METRICS": "<YOUR_AEGIS_METRICS>"
      }
    }
  }
}

Cursor

~/.cursor/mcp.json

{
  "mcpServers": {
    "aegis": {
      "command": "npx",
      "args": [
        "-y",
        "@getaegis/cli"
      ],
      "env": {
        "AEGIS_MASTER_KEY": "<YOUR_AEGIS_MASTER_KEY>",
        "AEGIS_SALT": "<YOUR_AEGIS_SALT>",
        "AEGIS_DATA_DIR": "<YOUR_AEGIS_DATA_DIR>",
        "AEGIS_PORT": "<YOUR_AEGIS_PORT>",
        "AEGIS_LOG_LEVEL": "<YOUR_AEGIS_LOG_LEVEL>",
        "AEGIS_LOG_FORMAT": "<YOUR_AEGIS_LOG_FORMAT>",
        "AEGIS_VAULT": "<YOUR_AEGIS_VAULT>",
        "AEGIS_REQUIRE_AGENT_AUTH": "<YOUR_AEGIS_REQUIRE_AGENT_AUTH>",
        "AEGIS_POLICY_MODE": "<YOUR_AEGIS_POLICY_MODE>",
        "AEGIS_POLICIES_DIR": "<YOUR_AEGIS_POLICIES_DIR>",
        "AEGIS_METRICS": "<YOUR_AEGIS_METRICS>"
      }
    }
  }
}

Windsurf

~/.codeium/windsurf/mcp_config.json

{
  "mcpServers": {
    "aegis": {
      "command": "npx",
      "args": [
        "-y",
        "@getaegis/cli"
      ],
      "env": {
        "AEGIS_MASTER_KEY": "<YOUR_AEGIS_MASTER_KEY>",
        "AEGIS_SALT": "<YOUR_AEGIS_SALT>",
        "AEGIS_DATA_DIR": "<YOUR_AEGIS_DATA_DIR>",
        "AEGIS_PORT": "<YOUR_AEGIS_PORT>",
        "AEGIS_LOG_LEVEL": "<YOUR_AEGIS_LOG_LEVEL>",
        "AEGIS_LOG_FORMAT": "<YOUR_AEGIS_LOG_FORMAT>",
        "AEGIS_VAULT": "<YOUR_AEGIS_VAULT>",
        "AEGIS_REQUIRE_AGENT_AUTH": "<YOUR_AEGIS_REQUIRE_AGENT_AUTH>",
        "AEGIS_POLICY_MODE": "<YOUR_AEGIS_POLICY_MODE>",
        "AEGIS_POLICIES_DIR": "<YOUR_AEGIS_POLICIES_DIR>",
        "AEGIS_METRICS": "<YOUR_AEGIS_METRICS>"
      }
    }
  }
}

VS Code

.vscode/mcp.json

{
  "servers": {
    "aegis": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "@getaegis/cli"
      ],
      "env": {
        "AEGIS_MASTER_KEY": "<YOUR_AEGIS_MASTER_KEY>",
        "AEGIS_SALT": "<YOUR_AEGIS_SALT>",
        "AEGIS_DATA_DIR": "<YOUR_AEGIS_DATA_DIR>",
        "AEGIS_PORT": "<YOUR_AEGIS_PORT>",
        "AEGIS_LOG_LEVEL": "<YOUR_AEGIS_LOG_LEVEL>",
        "AEGIS_LOG_FORMAT": "<YOUR_AEGIS_LOG_FORMAT>",
        "AEGIS_VAULT": "<YOUR_AEGIS_VAULT>",
        "AEGIS_REQUIRE_AGENT_AUTH": "<YOUR_AEGIS_REQUIRE_AGENT_AUTH>",
        "AEGIS_POLICY_MODE": "<YOUR_AEGIS_POLICY_MODE>",
        "AEGIS_POLICIES_DIR": "<YOUR_AEGIS_POLICIES_DIR>",
        "AEGIS_METRICS": "<YOUR_AEGIS_METRICS>"
      }
    }
  }
}

Claude Code

claude mcp add aegis --env AEGIS_MASTER_KEY=<YOUR_AEGIS_MASTER_KEY> --env AEGIS_SALT=<YOUR_AEGIS_SALT> --env AEGIS_DATA_DIR=<YOUR_AEGIS_DATA_DIR> --env AEGIS_PORT=<YOUR_AEGIS_PORT> --env AEGIS_LOG_LEVEL=<YOUR_AEGIS_LOG_LEVEL> --env AEGIS_LOG_FORMAT=<YOUR_AEGIS_LOG_FORMAT> --env AEGIS_VAULT=<YOUR_AEGIS_VAULT> --env AEGIS_REQUIRE_AGENT_AUTH=<YOUR_AEGIS_REQUIRE_AGENT_AUTH> --env AEGIS_POLICY_MODE=<YOUR_AEGIS_POLICY_MODE> --env AEGIS_POLICIES_DIR=<YOUR_AEGIS_POLICIES_DIR> --env AEGIS_METRICS=<YOUR_AEGIS_METRICS> -- npx -y @getaegis/cli