astafford8488/agentaegis-mcp

Every cybersecurity service, callable by any AI agent, billed per use.
AgentAegis is an MCP server that lets AI agents perform cybersecurity operations on demand — from compliance checks to vulnerability scans to code security analysis. It wraps best-in-class open-source scanning engines (nmap, Nuclei, sslyze, Semgrep, trufflehog, trivy) in clean, agent-discoverable tool definitions with structured inputs and outputs.
**Phase 2 ships:** HTTP transport for remote deployment, x402 micropayments, API key auth with monthly limits, Supabase persistence, webhooks, ISO 27001 + HIPAA frameworks, Railway deploy config, and a full test suite.
Quick Start
Local (stdio for Claude Desktop)
Add to claude_desktop_config.json:
Remote (HTTP, for agent platforms)
Connect from any MCP-aware agent:
Architecture
HTTP API (Phase 2)
| Endpoint | Method | Auth | Description |
|----------|--------|------|-------------|
| /health | GET | None | Health check |
| /pricing | GET | None | Tool catalog with prices |
| /v1/customers | POST | None | Create customer account |
| /v1/customers/:id/api-keys | POST | None | Issue an API key |
| /v1/customers/:id/usage | GET | API key | Usage statistics |
| /v1/jobs/:jobId | GET | API key | Async scan job status |
| /mcp | POST | API key OR x402 | MCP Streamable HTTP transport |
Payment Flow
**Option 1: API Key** — Customer registers, gets a key, pays via prepaid balance or invoice. Each tool call deducts from the monthly budget.
**Option 2: x402 Micropayment** — No signup. Each tool call settles on-chain via USDC. The server returns 402 Payment Required with payment requirements; the client signs and retries with X-PAYMENT header.
Tool Catalog (28 tools: 23 paid + 5 free)
Live pricing is always at /pricing.
| Tool | Category | Description | Price |
|------|----------|-------------|-------|
| compliance_framework_check | Compliance | SOC 2, ISO 27001, HIPAA, PCI-DSS, NIST CSF assessment | $2.00 |
| evidence_collect | Compliance | Evidence collection plans for audit controls | $1.00 |
| control_gap_analysis | Compliance | Prioritized remediation roadmap | $2.00 |
| audit_report_generate | Compliance | Audit-ready compliance reports | $5.00 |
| policy_generate | Compliance | Tailored security policy documents | $2.00 |
| vuln_scan_network | Vuln Mgmt | Network port and vulnerability scan | $3.00 |
| vuln_scan_web_app | Vuln Mgmt | OWASP Top 10 web app scan | $5.00 |
| vuln_prioritize | Vuln Mgmt | Risk-based vulnerability prioritization | $1.00 |
| cve_lookup | Vuln Mgmt | CVE details, CVSS, KEV status | $1.00 |
| ssl_tls_audit | Vuln Mgmt | SSL/TLS configuration audit | $1.00 |
| sast_scan | Code Security | Static security analysis | $5.00 |
| secret_scan | Code Security | Hardcoded secret detection | $2.00 |
| dependency_audit | Code Security | Dependency vulnerability scan | $2.00 |
| incident_triage | Blue Team | Incident classification & response plan | $3.00 |
| threat_intel_lookup | Blue Team | IOC reputation lookup | $2.00 |
| dns_security_check | Blue Team | DNS security audit | $1.00 |
| email_security_audit | Blue Team | Email security configuration audit | $2.00 |