io.github.astafford8488/agentaegis

Official28 tools

by astafford8488 · TypeScript

AgentAegis

Pay-per-call cybersecurity for AI agents: vuln scans, threat intel, compliance, code security.

Pay-per-call cybersecurity service for AI agents including vulnerability and threat analysis.

Captured live from the server via tools/list.

compliance_framework_check

Assess an organization's security posture against a compliance framework (SOC 2, ISO 27001, HIPAA, PCI-DSS, NIST CSF).

Parameters (3)

frameworkstringrequired
organization_profileobjectrequired
previous_scan_idstring
Optional. A prior scan_id (from agent_history) to record as this call's parent — builds a traversable chained-workflow lineage retrievable via agent_scan_get. Must be one of your own scans; ignored otherwise. Does not change this tool's analysis.

evidence_collect

Generate evidence collection plans for compliance controls.

Parameters (4)

frameworkstringrequired
control_idsarrayrequired
integrationsobject
previous_scan_idstring
Optional. A prior scan_id (from agent_history) to record as this call's parent — builds a traversable chained-workflow lineage retrievable via agent_scan_get. Must be one of your own scans; ignored otherwise. Does not change this tool's analysis.

control_gap_analysis

Deep-dive analysis of compliance control gaps with remediation roadmap.

Parameters (5)

frameworkstringrequired
failing_controlsarrayrequired
budget_constraintstring
timeline_constraintstring
previous_scan_idstring
Optional. A prior scan_id (from agent_history) to record as this call's parent — builds a traversable chained-workflow lineage retrievable via agent_scan_get. Must be one of your own scans; ignored otherwise. Does not change this tool's analysis.

audit_report_generate

Generate audit-ready compliance reports.

Parameters (6)

frameworkstringrequired
assessment_resultsarrayrequired
organization_namestringrequired
report_datestringrequired
report_typestringrequired
previous_scan_idstring
Optional. A prior scan_id (from agent_history) to record as this call's parent — builds a traversable chained-workflow lineage retrievable via agent_scan_get. Must be one of your own scans; ignored otherwise. Does not change this tool's analysis.

policy_generate

Generate tailored security policy documents.

Parameters (7)

policy_typestringrequired
organization_namestringrequired
industrystringrequired
employee_countnumberrequired
frameworksarrayrequired
customizationsobject
previous_scan_idstring
Optional. A prior scan_id (from agent_history) to record as this call's parent — builds a traversable chained-workflow lineage retrievable via agent_scan_get. Must be one of your own scans; ignored otherwise. Does not change this tool's analysis.

vuln_scan_network

Scan an IP/domain for open ports, services, and vulnerabilities.

Parameters (5)

targetstringrequired
scan_typestringrequired
port_rangestring
asyncboolean
previous_scan_idstring
Optional. A prior scan_id (from agent_history) to record as this call's parent — builds a traversable chained-workflow lineage retrievable via agent_scan_get. Must be one of your own scans; ignored otherwise. Does not change this tool's analysis.

vuln_scan_web_app

Scan a web app for OWASP Top 10 vulnerabilities.

Parameters (6)

target_urlstringrequired
scan_depthstringrequired
authenticationobject
exclude_pathsarray
asyncboolean
previous_scan_idstring
Optional. A prior scan_id (from agent_history) to record as this call's parent — builds a traversable chained-workflow lineage retrievable via agent_scan_get. Must be one of your own scans; ignored otherwise. Does not change this tool's analysis.

vuln_prioritize

Prioritize vulnerabilities by exploitability and business impact.

Parameters (3)

findingsarrayrequired
business_contextobject
previous_scan_idstring
Optional. A prior scan_id (from agent_history) to record as this call's parent — builds a traversable chained-workflow lineage retrievable via agent_scan_get. Must be one of your own scans; ignored otherwise. Does not change this tool's analysis.

cve_lookup

Look up CVE details, CVSS scores, and patches.

Parameters (2)

cve_idstringrequired
previous_scan_idstring
Optional. A prior scan_id (from agent_history) to record as this call's parent — builds a traversable chained-workflow lineage retrievable via agent_scan_get. Must be one of your own scans; ignored otherwise. Does not change this tool's analysis.

ssl_tls_audit

Audit SSL/TLS configuration for a domain.

Parameters (3)

hostnamestringrequired
portinteger
previous_scan_idstring
Optional. A prior scan_id (from agent_history) to record as this call's parent — builds a traversable chained-workflow lineage retrievable via agent_scan_get. Must be one of your own scans; ignored otherwise. Does not change this tool's analysis.

sast_scan

Static analysis for security vulnerabilities. Supports Python, JS/TS, Java, Go, Ruby, PHP, C/C++.

Parameters (3)

sourceobjectrequired
severity_thresholdstring
previous_scan_idstring
Optional. A prior scan_id (from agent_history) to record as this call's parent — builds a traversable chained-workflow lineage retrievable via agent_scan_get. Must be one of your own scans; ignored otherwise. Does not change this tool's analysis.

secret_scan

Detect hardcoded secrets in source code.

Parameters (3)

sourceobjectrequired
include_historyboolean
previous_scan_idstring
Optional. A prior scan_id (from agent_history) to record as this call's parent — builds a traversable chained-workflow lineage retrievable via agent_scan_get. Must be one of your own scans; ignored otherwise. Does not change this tool's analysis.

dependency_audit

Audit dependencies for known vulnerabilities (npm, pip, Go, Ruby, Java, Cargo).

Parameters (2)

sourceobjectrequired
previous_scan_idstring
Optional. A prior scan_id (from agent_history) to record as this call's parent — builds a traversable chained-workflow lineage retrievable via agent_scan_get. Must be one of your own scans; ignored otherwise. Does not change this tool's analysis.

incident_triage

Classify and respond to security incidents.

Parameters (4)

incident_descriptionstringrequired
indicatorsobjectrequired
environment_contextobject
previous_scan_idstring
Optional. A prior scan_id (from agent_history) to record as this call's parent — builds a traversable chained-workflow lineage retrievable via agent_scan_get. Must be one of your own scans; ignored otherwise. Does not change this tool's analysis.

threat_intel_lookup

IOC lookup against threat intel feeds.

Parameters (3)

indicatorstringrequired
indicator_typestringrequired
previous_scan_idstring
Optional. A prior scan_id (from agent_history) to record as this call's parent — builds a traversable chained-workflow lineage retrievable via agent_scan_get. Must be one of your own scans; ignored otherwise. Does not change this tool's analysis.

dns_security_check

Check DNS security (SPF, DKIM, DMARC, DNSSEC).

Parameters (2)

domainstringrequired
previous_scan_idstring
Optional. A prior scan_id (from agent_history) to record as this call's parent — builds a traversable chained-workflow lineage retrievable via agent_scan_get. Must be one of your own scans; ignored otherwise. Does not change this tool's analysis.

email_security_audit

Comprehensive email security audit.

Parameters (3)

domainstringrequired
include_mx_analysisboolean
previous_scan_idstring
Optional. A prior scan_id (from agent_history) to record as this call's parent — builds a traversable chained-workflow lineage retrievable via agent_scan_get. Must be one of your own scans; ignored otherwise. Does not change this tool's analysis.

access_review

Audit user access against least-privilege.

Parameters (4)

usersarrayrequired
admin_rolesarray
sensitive_permissionsarray
previous_scan_idstring
Optional. A prior scan_id (from agent_history) to record as this call's parent — builds a traversable chained-workflow lineage retrievable via agent_scan_get. Must be one of your own scans; ignored otherwise. Does not change this tool's analysis.

mfa_audit

Assess MFA coverage and strength.

Parameters (2)

usersarrayrequired
previous_scan_idstring
Optional. A prior scan_id (from agent_history) to record as this call's parent — builds a traversable chained-workflow lineage retrievable via agent_scan_get. Must be one of your own scans; ignored otherwise. Does not change this tool's analysis.

credential_check

Check email/domain in breach databases (HIBP).

Parameters (3)

check_typestringrequired
targetstringrequired
previous_scan_idstring
Optional. A prior scan_id (from agent_history) to record as this call's parent — builds a traversable chained-workflow lineage retrievable via agent_scan_get. Must be one of your own scans; ignored otherwise. Does not change this tool's analysis.

vet_endpoint

Composite trust verdict (PROCEED/CAUTION/BLOCK) for an endpoint an agent is about to call or pay — combines TLS/cert health, DNS hygiene, threat-intel reputation, and domain age into one decision with reasons.

Parameters (2)

endpointstringrequired
The endpoint to vet — a full URL (https://api.example.com/pay) or a bare domain (example.com).
previous_scan_idstring
Optional. A prior scan_id (from agent_history) to record as this call's parent — builds a traversable chained-workflow lineage retrievable via agent_scan_get. Must be one of your own scans; ignored otherwise. Does not change this tool's analysis.

scan_mcp_plugin

Scan an MCP server (git repo or code) for supply-chain risk BEFORE trusting it — exfiltration (secrets/env to the network), prompt-injection sinks, dangerous capabilities, npm install hooks, obfuscation, plus Semgrep + secret scanning → a PROCEED/CAUTION/BLOCK verdict with findings.

Parameters (2)

sourceobjectrequired
previous_scan_idstring
Optional. A prior scan_id (from agent_history) to record as this call's parent — builds a traversable chained-workflow lineage retrievable via agent_scan_get. Must be one of your own scans; ignored otherwise. Does not change this tool's analysis.

scan_skill

Scan an agent SKILL (git repo or SKILL.md) for supply-chain risk BEFORE trusting it — prompt-injection / hidden-unicode in the instructions (hard block), over-broad allowed-tools grants, plus exfiltration, dangerous capabilities, secrets and obfuscation in bundled scripts → a PROCEED/CAUTION/BLOCK verdict.

Parameters (2)

sourceobjectrequired
previous_scan_idstring
Optional. A prior scan_id (from agent_history) to record as this call's parent — builds a traversable chained-workflow lineage retrievable via agent_scan_get. Must be one of your own scans; ignored otherwise. Does not change this tool's analysis.

account_balance

Returns the calling API key's prepaid balance, monthly limit, current month usage, and a breakdown of how many of each tool the customer can still afford. Free to call.

No parameters.

help

Returns AgentAegis FAQ — authentication, balance/billing, tool catalog, async jobs, error codes, x402, rate limits, security. Optional topic filter. Free to call.

Parameters (1)

topicstring

agent_whoami

Returns your persistent AgentAegis agent identity (agent_id), how you're identified (API key / wallet / anonymous session), and lifetime call count + spend. Free to call.

No parameters.

agent_history

Lists your recent scans (scan_id, tool, target, status, time) so you can retrieve or chain from a prior result. Optional limit/tool/target/since filters. Free to call.

Parameters (4)

limitinteger
Max scans to return (default 25).
toolstring
Filter to a single tool name (e.g. 'cve_lookup').
targetstring
Filter to scans of a specific target.
sincestring
ISO-8601 timestamp; only scans started at/after this time.

agent_scan_get

Retrieves one of your prior scans by scan_id, including the stored full output, so you can build on earlier results without re-paying. Free to call.

Parameters (2)

scan_idstringrequired
The scan id to retrieve (from agent_history).
include_full_outputboolean
Include the full stored tool output, not just the summary (default true).

README.md10 KBView on GitHub

AgentAegis MCP Server

Every cybersecurity service, callable by any AI agent, billed per use.

AgentAegis is an MCP server that lets AI agents perform cybersecurity operations on demand — from compliance checks to vulnerability scans to code security analysis. It wraps best-in-class open-source scanning engines (nmap, Nuclei, sslyze, Semgrep, trufflehog, trivy) in clean, agent-discoverable tool definitions with structured inputs and outputs.

Phase 2 ships: HTTP transport for remote deployment, x402 micropayments, API key auth with monthly limits, Supabase persistence, webhooks, ISO 27001 + HIPAA frameworks, Railway deploy config, and a full test suite.

Quick Start

Local (stdio for Claude Desktop)

bash

git clone https://github.com/astafford8488/agentaegis-mcp.git
cd agentaegis-mcp
pnpm install
cp .env.example .env  # add API keys
pnpm build

Add to claude_desktop_config.json:

json

{
  "mcpServers": {
    "agentaegis": {
      "command": "node",
      "args": ["/path/to/agentaegis-mcp/dist/index.js"],
      "env": {
        "NVD_API_KEY": "...",
        "ABUSEIPDB_API_KEY": "...",
        "OTX_API_KEY": "...",
        "ABUSECH_API_KEY": "...",
        "HIBP_API_KEY": "..."
      }
    }
  }
}

Remote (HTTP, for agent platforms)

bash

# Local dev
pnpm dev:http

# Production via Docker
docker compose -f docker/docker-compose.yml up -d

# Production via Railway
railway up

Connect from any MCP-aware agent:

code

POST https://your-host/mcp
Authorization: Bearer aegis_<your-api-key>

Architecture

code

┌─────────────────────────────────────────────────────────┐
│         AI Agent (Claude, custom MCP client)            │
└────────────────┬───────────────────────┬─────────────────┘
                 │ stdio                 │ HTTP
                 │                       │
┌────────────────▼───────────┐  ┌────────▼─────────────────┐
│   stdio entry (index.ts)   │  │  HTTP entry (http-server)│
└────────────────┬───────────┘  └────────┬─────────────────┘
                 │                       │
                 │      ┌────────────────┴─────────────┐
                 │      │  Auth Gate                   │
                 │      │  - API key (DB-backed)       │
                 │      │  - x402 micropayment         │
                 │      └─────────────┬────────────────┘
                 │                    │
┌────────────────▼────────────────────▼──────────────────────┐
│              MCP Server (server.ts)                          │
│              20 Tool Handlers                                │
├──────────────────────────┬────────────────────────────────┤
│  Engine Wrappers         │  External APIs                  │
│  nmap, Nuclei, sslyze,   │  NVD, AbuseIPDB, AlienVault OTX + abuse.ch,    │
│  Semgrep, trufflehog,    │  HIBP, Shodan                   │
│  trivy                   │                                  │
├──────────────────────────┴────────────────────────────────┤
│  Sandbox    │ Rate Limit │ Target Validation │ Logging     │
└────────────────────────────────────────────────────────────┘
                            │
                  ┌─────────▼──────────┐
                  │  Supabase          │
                  │  - customers       │
                  │  - api_keys        │
                  │  - scan_jobs       │
                  │  - usage_log       │
                  │  - webhooks        │
                  └────────────────────┘

HTTP API (Phase 2)

Endpoint	Method	Auth	Description
`/health`	GET	None	Health check
`/pricing`	GET	None	Tool catalog with prices
`/v1/customers`	POST	None	Create customer account
`/v1/customers/:id/api-keys`	POST	None	Issue an API key
`/v1/customers/:id/usage`	GET	API key	Usage statistics
`/v1/jobs/:jobId`	GET	API key	Async scan job status
`/mcp`	POST	API key OR x402	MCP Streamable HTTP transport

Payment Flow

Option 1: API Key — Customer registers, gets a key, pays via prepaid balance or invoice. Each tool call deducts from the monthly budget.

bash

curl -X POST https://api.agentaegis.org/v1/customers \
  -H "Content-Type: application/json" \
  -d '{"email":"you@company.com","name":"Your Name"}'

curl -X POST https://api.agentaegis.org/v1/customers/<id>/api-keys \
  -H "Content-Type: application/json" \
  -d '{"name":"production","monthly_limit_usd":100}'

Option 2: x402 Micropayment — No signup. Each tool call settles on-chain via USDC. The server returns 402 Payment Required with payment requirements; the client signs and retries with X-PAYMENT header.

Tool Catalog (20 tools)

Tool	Category	Description	Price
`compliance_framework_check`	Compliance	SOC 2, ISO 27001, HIPAA, PCI-DSS, NIST CSF assessment	$0.50
`evidence_collect`	Compliance	Evidence collection plans for audit controls	$0.25
`control_gap_analysis`	Compliance	Prioritized remediation roadmap	$0.50
`audit_report_generate`	Compliance	Audit-ready compliance reports	$1.00
`policy_generate`	Compliance	Tailored security policy documents	$0.50
`vuln_scan_network`	Vuln Mgmt	Network port and vulnerability scan	$1.00
`vuln_scan_web_app`	Vuln Mgmt	OWASP Top 10 web app scan	$1.50
`vuln_prioritize`	Vuln Mgmt	Risk-based vulnerability prioritization	$0.25
`cve_lookup`	Vuln Mgmt	CVE details, CVSS, KEV status	$0.10
`ssl_tls_audit`	Vuln Mgmt	SSL/TLS configuration audit	$0.25
`sast_scan`	Code Security	Static security analysis	$1.00
`secret_scan`	Code Security	Hardcoded secret detection	$0.50
`dependency_audit`	Code Security	Dependency vulnerability scan	$0.50
`incident_triage`	Blue Team	Incident classification & response plan	$0.75
`threat_intel_lookup`	Blue Team	IOC reputation lookup	$0.25
`dns_security_check`	Blue Team	DNS security audit	$0.25
`email_security_audit`	Blue Team	Email security configuration audit	$0.50
`access_review`	Identity	Access privilege audit	$0.50
`mfa_audit`	Identity	MFA coverage assessment	$0.25
`credential_check`	Offensive	Breach database lookup	$0.50

Compliance Frameworks Supported

SOC 2 Type II — Full Trust Services Criteria (35 controls)
ISO 27001:2022 — All 4 Annex A control groups (93 controls)
HIPAA Security Rule — Administrative, physical, and technical safeguards (43 controls)
NIST CSF 2.0 — All 6 functions with categories
PCI DSS v4.0 — All 12 requirements with detailed controls (full evaluation logic)

Development

bash

pnpm install        # Install dependencies
pnpm dev            # stdio mode (for Claude Desktop)
pnpm dev:http       # HTTP mode (with Streamable HTTP transport)
pnpm build          # Build for production
pnpm test           # Run vitest test suite (46 tests)

Deployment

Railway (Recommended)

bash

railway login
railway init
railway up

Required env vars (set in Railway dashboard):

SUPABASE_URL, SUPABASE_SERVICE_KEY
X402_PAYEE_ADDRESS (your wallet)
NVD_API_KEY, ABUSEIPDB_API_KEY, OTX_API_KEY, ABUSECH_API_KEY, HIBP_API_KEY

Database setup

Run the migration in your Supabase SQL editor:

bash

cat supabase/migrations/001_initial_schema.sql

Security Policy

Target validation: Only public IPs and registered domains. Private/reserved ranges blocked.
Scan isolation: Each scan runs in an isolated process with temp directory cleanup.
Code safety: Repos cloned shallow (depth=1), max 500MB, 5-minute timeout, no execution.
Secret redaction: Full secret values never returned — first 4 and last 4 characters only.
Rate limiting: Per API key AND per target. Max 5 concurrent scans, 10/hour per target.
Audit logging: All tool calls logged to usage_log (90-day retention).
API key hashing: Keys stored as SHA-256 hashes; raw keys never stored.

Responsible Use

AgentAegis scanning tools must only be used against systems you own or have explicit written authorization to test. By using this service, you agree that:

You have authorization from the system owner to perform security testing
You will not use these tools for unauthorized access or malicious purposes
You accept responsibility for any scans initiated through your API key

License

MIT

Install

claude_desktop_config.json

{
  "mcpServers": {
    "agentaegis": {
      "command": "npx",
      "args": [
        "-y",
        "mcp-remote",
        "https://agentaegis-mcp-production.up.railway.app/mcp"
      ]
    }
  }
}

Desktop config is stdio-only; this bridges via mcp-remote. Native remote: Settings > Connectors.