An MCP server that exposes cybersecurity and compliance operations to AI agents, including network scans, web app vulnerability scans, code security analysis, secret detection, and audit/report generation. It supports both local stdio use and remote HTTP access with API key or x402 payment-based authentication.
From the registry: Pay-per-call cybersecurity for AI agents: vuln scans, threat intel, compliance, code security.
$ npm install -g pnpm$ git clone https://github.com/astafford8488/agentaegis-mcp.git && cd agentaegis-mcp && pnpm install && pnpm buildPlease install the `agentaegis` MCP server into my current AI client (that's you).
Optional prerequisites:
- Install pnpm — pnpm is required to install dependencies and build the server from source. Run: `npm install -g pnpm` (https://pnpm.io/installation/)
- Clone and build the server — The README only documents running this MCP server from a local cloned repository for stdio usage. Build the project before configuring your MCP client. Run: `git clone https://github.com/astafford8488/agentaegis-mcp.git && cd agentaegis-mcp && pnpm install && pnpm build` (https://github.com/astafford8488/agentaegis-mcp)
- Obtain external API keys — Several tools rely on third-party security data providers. Add the relevant API keys to the environment before running the server.
Canonical MCP server config (stdio transport):
- command: `node`
- args: ["<path-to-agentaegis-mcp>/dist/index.js"]
- optional environment variables:
- `NVD_API_KEY`: API key for the National Vulnerability Database used for CVE and vulnerability data. (example: `<your-nvd-api-key>`)
- `ABUSEIPDB_API_KEY`: API key for AbuseIPDB used for IP reputation and threat intelligence lookups. (example: `<your-abuseipdb-api-key>`)
- `OTX_API_KEY`: API key for AlienVault OTX used for threat intelligence lookups. (example: `<your-otx-api-key>`)
- `ABUSECH_API_KEY`: API key for abuse.ch integrations used for threat intelligence data. (example: `<your-abusech-api-key>`)
- `HIBP_API_KEY`: API key for Have I Been Pwned used for breach and credential checks. (example: `<your-hibp-api-key>`)
Note: The README also documents an HTTP transport for remote deployment at POST <your-host>/mcp with Authorization: Bearer aegis_<your-api-key>, but it does not provide a canonical client config snippet in command/args/env form. For stdio, the documented path is a locally built repository rather than an npm package.
Add this MCP server to my current client's config in the correct format for you. If you need secrets or credentials I haven't provided, ASK me — do not invent values or leave raw placeholders. After adding it, tell me how to verify the server is connected.NVD_API_KEYrequiredUsed for NVD/CVE vulnerability data lookups.ABUSEIPDB_API_KEYrequiredUsed for threat intelligence and IP reputation lookups.OTX_API_KEYrequiredUsed for AlienVault OTX threat intelligence lookups.ABUSECH_API_KEYrequiredUsed for abuse.ch threat intelligence lookups.HIBP_API_KEYrequiredUsed for Have I Been Pwned breach and credential checks.SUPABASE_URLrequiredSupabase project URL for persistence and API backend.SUPABASE_SERVICE_KEYrequiredSupabase service key for database access.X402_PAYEE_ADDRESSrequiredWallet address used for x402 micropayment settlement.Dead code, security, secrets detection and code quality for Python, TypeScript, Go.