About AgentAegis
AgentAegis is an MCP server for AI agents to run cybersecurity checks, from compliance assessments to vulnerability and code scans. It exposes structured tools backed by open-source scanning engines, with pay-per-call access and API-key or x402 payment options.
Key features
- 01Compliance checks and audit reports
- 02Network and web vulnerability scans
- 03Static analysis and secret detection
- 04Threat intelligence and incident triage
- 05MCP plugin and skill scans
- 06API-key and x402 billing
Use cases
- 01Assess controls for SOC 2 or HIPAA
- 02Scan authorized systems for vulnerabilities
- 03Review code and dependencies for security issues
- 04Check an MCP plugin before installation
MCP support
AgentAegis exposes cybersecurity operations as structured tools to MCP clients over stdio or Streamable HTTP. Calls can use API-key authorization or x402 micropayments.
Configuration
Remote servers need no local install. Pick your client, then copy the config or install in one click.
https://agentaegis-mcp-production.up.railway.app/mcpclaude mcp add --transport http astafford8488-agentaegis https://agentaegis-mcp-production.up.railway.app/mcp{"mcpServers":{"astafford8488-agentaegis":{"type":"http","url":"https://agentaegis-mcp-production.up.railway.app/mcp"}}}Open in Cursor{"servers":{"astafford8488-agentaegis":{"type":"http","url":"https://agentaegis-mcp-production.up.railway.app/mcp"}}}Open in VS Code{"mcpServers":{"astafford8488-agentaegis":{"type":"http","url":"https://agentaegis-mcp-production.up.railway.app/mcp"}}}{"mcpServers":{"astafford8488-agentaegis":{"serverUrl":"https://agentaegis-mcp-production.up.railway.app/mcp"}}}Run commands in a terminal; paste JSON into the client’s MCP config and restart. Servers that need sign-in will prompt on first connect.
Tools
28| Parameter | Type | Required | Description |
|---|---|---|---|
| framework | enum | Yes | soc2 | iso27001 | hipaa | pci_dss | nist_csf |
| previous_scan_id | string | No | Optional. A prior scan_id (from agent_history) to record as this call's parent — builds a traversable chained-workflow lineage retrievable via agent_scan_get. Must be one of your own scans; ignored otherwise. Does not change this tool's analysis. |
| organization_profile | object | Yes | |
| organization_profile.industry | string | Yes | |
| organization_profile.handles_phi | boolean | Yes | |
| organization_profile.handles_pii | boolean | Yes | |
| organization_profile.has_pentest | boolean | Yes | |
| organization_profile.tools_in_use | array | Yes | |
| organization_profile.employee_count | number | Yes | |
| organization_profile.has_soc_report | boolean | Yes | |
| organization_profile.cloud_providers | array | Yes | |
| organization_profile.has_security_team | boolean | Yes | |
| organization_profile.handles_payment_cards | boolean | Yes |
Details
The maintainer has not added details yet. Check the README in the repository.
Comments
New to MCP?
From what the protocol is to installing your first server, these answers cover most first questions.
An open protocol that defines how AI applications connect to external tools and data in a uniform way. Clients talk to the model; MCP servers provide tools, resources and prompt templates. They exchange standard messages, so one server can be reused by many clients.