Aegis Mcp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Aegis Mcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Quantitative governance for AI agents and engineering decisions. AEGIS evaluates proposals through six quantitative gates — Risk, Profit, Novelty, Complexity, Quality, Utility — and returns a structured decision (PROCEED / PAUSE / HALT / ESCALATE) with confidence scores, rationale, and a hash-chained audit trail.
Give your agent a decision gate it can call before it acts — and an audit record compliance can actually read (NIST AI RMF, EU AI Act Annex IV).
pip install "aegis-governance[mcp]"Claude Code
claude mcp add aegis -- aegis-mcp-serverCursor (.cursor/mcp.json) / Windsurf / any stdio MCP client:
{
"mcpServers": {
"aegis": { "command": "aegis-mcp-server" }
}
}VS Code (.vscode/mcp.json):
{
"servers": {
"aegis": { "type": "stdio", "command": "aegis-mcp-server" }
}
}Runs in sandbox mode out of the box. Set AEGIS_API_KEY in the server's environment (free key) to unlock decision history, usage reports, and risk checks. Requires Python >= 3.10.
Get a free API key at portal.undercurrentholdings.com (GitHub/Google sign-in, key provisioned automatically), then:
Claude Code
claude mcp add --transport streamable-http aegis https://mcp.aegis.undercurrentholdings.com/mcp \
--header "Authorization: Bearer YOUR_API_KEY"Cursor (.cursor/mcp.json) / Windsurf / any streamable-http MCP client:
{
"mcpServers": {
"aegis": {
"type": "streamable-http",
"url": "https://mcp.aegis.undercurrentholdings.com/mcp",
"headers": {
"Authorization": "Bearer YOUR_API_KEY"
}
}
}
}VS Code (.vscode/mcp.json):
{
"servers": {
"aegis": {
"type": "http",
"url": "https://mcp.aegis.undercurrentholdings.com/mcp",
"headers": {
"Authorization": "Bearer YOUR_API_KEY"
}
}
}
}The Python SDK has a sandbox mode that works with no account at all (10 evaluations/day):
pip install aegis-governancefrom aegis import Aegis
decision = Aegis().evaluate(
proposal_summary="Add Redis caching layer to reduce API latency",
risk_baseline=0.02, risk_proposed=0.05,
novelty_score=0.75, complexity_score=0.8, quality_score=0.9,
)
print(decision.status) # "proceed"The local stdio MCP server above ships inaegis-governance>= 1.3.0 via the[mcp]extra.
| Tool | What it does |
|---|---|
aegis_evaluate_proposal | Full six-gate evaluation of a proposal; returns PROCEED/PAUSE/HALT/ESCALATE with per-gate scores and rationale |
aegis_quick_risk_check | Fast risk screen for a proposed change |
aegis_check_thresholds | Current gate threshold configuration |
aegis_get_scoring_guide | Domain-specific guidance for deriving gate parameters (e.g. cicd) |
aegis_record_proposal | Record a proposal for later verification |
aegis_list_proposals | List recorded proposals |
aegis_verify_proposals | Verify recorded proposals against outcomes |
aegis_list_decisions | List past governance decisions |
aegis_get_decision | Fetch a specific decision with full audit detail |
aegis_crypto_status | Hash-chain audit integrity status |
AI agents make thousands of decisions with no record of why. AEGIS gives every consequential action a quantitative evaluation and a tamper-evident audit entry — so "the agent decided to deploy" becomes a signed, replayable record with gate scores and rationale.
aegis-governance (BSL-1.1)Built by Undercurrent — Agency over agents.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.