Credential isolation for AI agents. Inject secrets at the network boundary.
Connect Runs on your machine
claude mcp add aegis -e AEGIS_MASTER_KEY=<AEGIS_MASTER_KEY> -e AEGIS_SALT=<AEGIS_SALT> -e AEGIS_DATA_DIR=<AEGIS_DATA_DIR> -e AEGIS_PORT=<AEGIS_PORT> -e AEGIS_LOG_LEVEL=<AEGIS_LOG_LEVEL> -e AEGIS_LOG_FORMAT=<AEGIS_LOG_FORMAT> -e AEGIS_VAULT=<AEGIS_VAULT> -e AEGIS_REQUIRE_AGENT_AUTH=<AEGIS_REQUIRE_AGENT_AUTH> -e AEGIS_POLICY_MODE=<AEGIS_POLICY_MODE> -e AEGIS_POLICIES_DIR=<AEGIS_POLICIES_DIR> -e AEGIS_METRICS=<AEGIS_METRICS> -- npx -y @getaegis/[email protected]{
"mcpServers": {
"aegis": {
"command": "npx",
"args": [
"-y",
"@getaegis/[email protected]"
],
"env": {
"AEGIS_MASTER_KEY": "<AEGIS_MASTER_KEY>",
"AEGIS_SALT": "<AEGIS_SALT>",
"AEGIS_DATA_DIR": "<AEGIS_DATA_DIR>",
"AEGIS_PORT": "<AEGIS_PORT>",
"AEGIS_LOG_LEVEL": "<AEGIS_LOG_LEVEL>",
"AEGIS_LOG_FORMAT": "<AEGIS_LOG_FORMAT>",
"AEGIS_VAULT": "<AEGIS_VAULT>",
"AEGIS_REQUIRE_AGENT_AUTH": "<AEGIS_REQUIRE_AGENT_AUTH>",
"AEGIS_POLICY_MODE": "<AEGIS_POLICY_MODE>",
"AEGIS_POLICIES_DIR": "<AEGIS_POLICIES_DIR>",
"AEGIS_METRICS": "<AEGIS_METRICS>"
}
}
}
}{
"mcpServers": {
"aegis": {
"command": "npx",
"args": [
"-y",
"@getaegis/[email protected]"
],
"env": {
"AEGIS_MASTER_KEY": "<AEGIS_MASTER_KEY>",
"AEGIS_SALT": "<AEGIS_SALT>",
"AEGIS_DATA_DIR": "<AEGIS_DATA_DIR>",
"AEGIS_PORT": "<AEGIS_PORT>",
"AEGIS_LOG_LEVEL": "<AEGIS_LOG_LEVEL>",
"AEGIS_LOG_FORMAT": "<AEGIS_LOG_FORMAT>",
"AEGIS_VAULT": "<AEGIS_VAULT>",
"AEGIS_REQUIRE_AGENT_AUTH": "<AEGIS_REQUIRE_AGENT_AUTH>",
"AEGIS_POLICY_MODE": "<AEGIS_POLICY_MODE>",
"AEGIS_POLICIES_DIR": "<AEGIS_POLICIES_DIR>",
"AEGIS_METRICS": "<AEGIS_METRICS>"
}
}
}
}{
"servers": {
"aegis": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"@getaegis/[email protected]"
],
"env": {
"AEGIS_MASTER_KEY": "<AEGIS_MASTER_KEY>",
"AEGIS_SALT": "<AEGIS_SALT>",
"AEGIS_DATA_DIR": "<AEGIS_DATA_DIR>",
"AEGIS_PORT": "<AEGIS_PORT>",
"AEGIS_LOG_LEVEL": "<AEGIS_LOG_LEVEL>",
"AEGIS_LOG_FORMAT": "<AEGIS_LOG_FORMAT>",
"AEGIS_VAULT": "<AEGIS_VAULT>",
"AEGIS_REQUIRE_AGENT_AUTH": "<AEGIS_REQUIRE_AGENT_AUTH>",
"AEGIS_POLICY_MODE": "<AEGIS_POLICY_MODE>",
"AEGIS_POLICIES_DIR": "<AEGIS_POLICIES_DIR>",
"AEGIS_METRICS": "<AEGIS_METRICS>"
}
}
}
}Replace the values in angle brackets with your own. Keys stay on your machine; we never see them.
Tools
This server runs locally, so its tools are listed by your MCP client once it starts.
Environment variables
| Name | Description |
|---|---|
AEGIS_MASTER_KEYRequired, secret | Master encryption key for the credential vault |
AEGIS_SALTRequired, secret | Hex-encoded 32-byte salt for key derivation (generated by aegis init) |
AEGIS_DATA_DIROptional | Directory for vault databases and registry (default: .aegis/) |
AEGIS_PORTOptional | Gate proxy port (default: 3100) |
AEGIS_LOG_LEVELOptional | Log verbosity: debug, info, warn, error (default: info) |
AEGIS_LOG_FORMATOptional | Log output format: json or pretty (default: json) |
AEGIS_VAULTOptional | Named vault to use (default: default) |
AEGIS_REQUIRE_AGENT_AUTHOptional | Require agent authentication on every request (true/false, default: false) |
AEGIS_POLICY_MODEOptional | Policy enforcement mode: enforce, dry-run, or off (default: enforce) |
AEGIS_POLICIES_DIROptional | Directory containing YAML policy files |
AEGIS_METRICSOptional | Enable Prometheus metrics endpoint (true/false, default: true) |
Details
| Package | @getaegis/[email protected] (NPM, stdio) |
| First published | 6 Aug 2026 |
| Last updated | 6 Aug 2026 |
| Registry name | io.github.getaegis/aegis |
More ai and media servers See all
Listing data from the official MCP registry. Status and tools from NestDaddy's daily check. Browse all MCP servers.