Aegis Mcp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Aegis Mcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
<div align="center">
Give any AI agent its own privacy layer + payment rail — route HTTP through residential & datacenter exit nodes, pay per request in USDC on Solana, and govern its own budget and keys, all from inside Claude, Cursor, or any MCP client.
Website · Get an API key · Docs · X · Telegram
</div>
AEGIS is privacy infrastructure for the open internet — a residential/datacenter proxy + VPN where humans and autonomous agents route traffic through operator-run exit nodes and pay per request in USDC, settled on Solana. No logs. No KYC.
This package exposes AEGIS as a Model Context Protocol server, so an agent can run its entire lifecycle without leaving the chat:
pay‑and‑retry when the balance hits zero.Every tool is a thin, audited wrapper over a public AEGIS REST endpoint. No secrets are baked in — you bring your own API key (and, optionally, a funded wallet) via environment variables.
Add to claude_desktop_config.json:
{
"mcpServers": {
"aegis": {
"command": "npx",
"args": ["-y", "@aegisprivacy/mcp"],
"env": {
"AEGIS_API_KEY": "aegis_your_key_here"
}
}
}
}Grab a key at [aegisprivacy.org/agent](https://aegisprivacy.org/agent), restart Claude, and ask it to "fetch example.com through a German residential node."
Point any MCP‑capable client at the same npx -y @aegisprivacy/mcp command with AEGIS_API_KEY in the environment.
| Variable | Required | Default | Description |
|---|---|---|---|
AEGIS_API_KEY | ✅ | — | Your key from aegisprivacy.org/agent. |
AEGIS_WALLET_SECRET | — | _(off)_ | A funded Solana wallet (base58 or JSON array). Setting this opts into autonomous spending: a 402 (empty balance) is settled on‑chain and the request is retried automatically. |
AEGIS_AUTO_TOPUP_USDC | — | 1 | USDC amount per automatic top‑up. |
AEGIS_SOLANA_RPC | — | api.mainnet-beta.solana.com | Solana RPC endpoint for settlement. |
AEGIS_BASE_URL | — | https://aegisprivacy.org | API base URL. |
Spending is opt‑in. WithoutAEGIS_WALLET_SECRET, an empty balance simply surfaces a402with top‑up instructions — the agent can never spend on‑chain unless you hand it a funded wallet.
#### 🌐 Routing
| Tool | What it does |
|---|---|
aegis_fetch | Privacy‑routed HTTP request (any method, country, ip_class). |
aegis_get / aegis_post | Convenience GET / POST shorthands. |
aegis_fetch_with_receipt | Fetch + return settlement metadata and the no‑log receipt signature. |
#### 💸 Balance & cost
| Tool | What it does |
|---|---|
aegis_balance | Remaining prepaid USDC (+ credits). |
aegis_estimate_cost | Local estimate for a planned batch — spends nothing. |
#### 📡 Network
| Tool | What it does |
|---|---|
aegis_list_countries | Exit countries with online nodes + available ip_classes. |
aegis_network_stats | Live nodes, countries, requests & bytes served. |
#### 📊 Self‑audit
| Tool | What it does |
|---|---|
aegis_agent_stats | This key's requests & USDC spend (today / week / total) + rate budget. |
aegis_request_history | Recent routed requests (URL, country, cost, status, bytes). |
#### 🔑 Key governance
| Tool | What it does |
|---|---|
aegis_list_keys / aegis_key_tree | List keys flat, or as a budget tree with mandates + rolled‑up spend. |
aegis_mint_key | Mint a child key with an AP2‑style mandate (lifetime/daily/monthly USDC caps, country/ip_class lock, expiry). A child can only narrow its parent. |
aegis_set_spend_cap · aegis_rename_key · aegis_revoke_key · aegis_rotate_key | Manage caps, labels, revocation, and credential rotation. |
#### ⚙️ Operator (if you run a node)
| Tool | What it does |
|---|---|
aegis_operator_earnings | Session + request counts and estimated USDC earnings. |
aegis_operator_history | Daily earnings & request history (last N days). |
"Use AEGIS to GET `https://api.ipify.org` through a residential node in Japan and tell me the exit IP."
"Mint a child key labeled `scraper` capped at $5 lifetime, locked to US datacenter, expiring in 24h — then show me the key tree."
"Estimate the cost of 2,000 requests, check my balance, and tell me if I can afford it."
AI agent (Claude / Cursor)
│ MCP (stdio)
▼
@aegisprivacy/mcp ──► aegisprivacy.org ──► exit node (residential / datacenter)
│ Bearer API key x402 per‑request billing │
│ metered in USDC ▼
└── optional wallet ── 402? settle USDC on Solana ── retry & serveThe server holds no privileged state — it authenticates with your API key and (optionally) signs USDC settlements with your wallet. All billing, node selection, and metering happen server‑side on the AEGIS network.
npm install
npm run build # tsc → dist/
npm start # run the stdio serverRequires Node ≥ 18.
MIT © AEGIS Privacy
<div align="center"> <sub>Private by default — no logs, no KYC, settled on Solana.</sub> </div>
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.