Back to Browse

Agentaegis MCP Server

Developer ToolsUse Caution3.5MCP RegistryLocalRemote
Free

Server data from the Official MCP Registry

Pay-per-call cybersecurity for AI agents: vuln scans, threat intel, compliance, code security.

About

Pay-per-call cybersecurity for AI agents: vuln scans, threat intel, compliance, code security.

Remote endpoints: streamable-http: https://agentaegis-mcp-production.up.railway.app/mcp

Security Report

3.5
Use Caution3.5High Risk

AgentAegis is a sophisticated MCP server wrapping multiple security scanning engines with a payment infrastructure (API keys + x402 micropayments) and database persistence. The codebase demonstrates good architectural patterns (auth gates, context isolation, payment settlement logic) but contains several moderate security concerns: (1) unauthenticated endpoints that reveal system information (health, pricing, FAQ), (2) potential IDOR in job status endpoint prior to fix attempt, (3) lenient CORS configuration allowing any origin, (4) lack of input validation on user-supplied scan targets before passing to external tools, and (5) overly broad file system and network permissions for a security scanning service. These issues, combined with the inherent risks of running network scanners and code analysis tools, warrant a moderate risk rating. Supply chain analysis found 8 known vulnerabilities in dependencies (0 critical, 5 high severity).

4 files analyzed · 20 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

File System Read

Reads files on your machine. Normal for tools that analyze or process local data.

File System Write

Writes or modifies files on your machine. Check that this is expected for the tool.

HTTP Network Access

Connects to external APIs or services over the internet.

env_vars

Check that this permission is expected for this type of plugin.

database

Check that this permission is expected for this type of plugin.

Shell Command Execution

Runs commands on your machine. Be cautious — only use if you trust this plugin.

process_spawn

Check that this permission is expected for this type of plugin.

system_info

Check that this permission is expected for this type of plugin.

How to Install & Connect

Available as Local & Remote

This plugin can run on your machine or connect to a hosted endpoint. during install.

Reviews

No reviews yet

Be the first to review this server!