aegis

Credential isolation for AI agents. Inject secrets at the network boundary.

stdio v0.9.2

Connection Configuration

Add this to your AI agent's MCP config file to connect.

Run in your terminal:

claude mcp add io.github.getaegis--aegis -- npx

Transport

stdio

Authentication

None

Version

v0.9.2

Server Name

io.github.getaegis/aegis

Last Updated

Mar 12, 2026

How to install and connect this MCP server.

Environment variables you must provide when running this server.

Variable	Description	Required
`AEGIS_MASTER_KEY` secret	Master encryption key for the credential vault	Yes
`AEGIS_SALT` secret	Hex-encoded 32-byte salt for key derivation (generated by aegis init)	Yes
`AEGIS_DATA_DIR`	Directory for vault databases and registry (default: .aegis/)	Optional
`AEGIS_PORT`	Gate proxy port (default: 3100)	Optional
`AEGIS_LOG_LEVEL`	Log verbosity: debug, info, warn, error (default: info)	Optional
`AEGIS_LOG_FORMAT`	Log output format: json or pretty (default: json)	Optional
`AEGIS_VAULT`	Named vault to use (default: default)	Optional
`AEGIS_REQUIRE_AGENT_AUTH`	Require agent authentication on every request (true/false, default: false)	Optional
`AEGIS_POLICY_MODE`	Policy enforcement mode: enforce, dry-run, or off (default: enforce)	Optional
`AEGIS_POLICIES_DIR`	Directory containing YAML policy files	Optional
`AEGIS_METRICS`	Enable Prometheus metrics endpoint (true/false, default: true)	Optional