Back to Browse

Aegis Protocol MCP Server

Developer ToolsUse Caution4.2MCP RegistryLocal
Free

Server data from the Official MCP Registry

Trustless escrow for AI agent-to-agent transactions on Base L2 with ERC-8004 identity and USDC.

About

Trustless escrow for AI agent-to-agent transactions on Base L2 with ERC-8004 identity and USDC.

Security Report

4.2
Use Caution4.2High Risk

The AEGIS MCP server is well-structured with appropriate authentication via private key configuration and reasonable permission scoping for a blockchain/escrow protocol server. No malicious patterns or code injection vulnerabilities detected. Minor code quality findings (broad error handling, environment variable validation, optional input validation improvements) are present but do not materially impact security. Supply chain analysis found 9 known vulnerabilities in dependencies (1 critical, 1 high severity). Package verification found 1 issue (1 critical, 0 high severity).

5 files analyzed · 16 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

env_vars

Check that this permission is expected for this type of plugin.

HTTP Network Access

Connects to external APIs or services over the internet.

File System Read

Reads files on your machine. Normal for tools that analyze or process local data.

What You'll Need

Set these up before or after installing:

Target blockchain (base-sepolia or base)Optional

Environment variable: AEGIS_CHAIN

Custom RPC endpoint URLOptional

Environment variable: AEGIS_RPC_URL

Private key for signing transactions (optional, read-only mode if not set)Required

Environment variable: AEGIS_PRIVATE_KEY

AEGIS REST API relay URLOptional

Environment variable: AEGIS_API_URL

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-im-sham-aegis-protocol": {
      "env": {
        "AEGIS_CHAIN": "your-aegis-chain-here",
        "AEGIS_API_URL": "your-aegis-api-url-here",
        "AEGIS_RPC_URL": "your-aegis-rpc-url-here",
        "AEGIS_PRIVATE_KEY": "your-aegis-private-key-here"
      },
      "args": [
        "-y",
        "@aegis-protocol/api"
      ],
      "command": "npx"
    }
  }
}

Documentation

View on GitHub

From the project's GitHub README.

AEGIS Protocol

Trustless escrow middleware for AI agent-to-agent transactions.

AEGIS composes ERC-8004 (Trustless Agents) and x402 (HTTP-native stablecoin payments) into a complete transaction safety layer on Base L2. It answers the question neither standard addresses: what if the agent takes payment and delivers garbage?

USDC is locked in a smart contract, work is validated through ERC-8004's on-chain Validation Registry, and payment is released only when the deliverable passes quality checks. If it doesn't, a 3-tier dispute resolution system kicks in — no humans required.

How It Works

Agent A (Client)                    AEGIS                         Agent B (Provider)
      │                               │                                 │
      ├──── Create Job + Lock USDC ──►│                                 │
      │                               │◄──── Deliver Work ──────────────┤
      │                               │                                 │
      │                          Validate via                           │
      │                        ERC-8004 Registry                        │
      │                               │                                 │
      │                        Score ≥ Threshold?                       │
      │                         ┌──────┴──────┐                        │
      │                        Yes            No                        │
      │                         │              │                        │
      │                   Auto-settle    Dispute Window                  │
      │                         │              │                        │
      │                   USDC → Provider   3-Tier Resolution           │

Job Lifecycle

CREATED → FUNDED → DELIVERED → VALIDATING → SETTLED
                                    ↘ DISPUTE_WINDOW → DISPUTED → RESOLVED
           ↘ EXPIRED → REFUNDED

Architecture

Four smart contracts on Base L2:

ContractPurpose
AegisEscrowCore vault — creates jobs, locks USDC, routes through ERC-8004 validation, auto-settles or opens dispute window
AegisDispute3-tier dispute resolution: (1) automated re-validation, (2) staked arbitrator, (3) timeout default
AegisTreasuryFee collection with treasury/arbitrator pool split
AegisJobFactoryTemplate system for standardized job types (code-review, data-analysis, etc.)

ERC-8004 Integration

AEGIS composes all three ERC-8004 registries:

  • Identity Registry — verify agents exist, resolve payment addresses
  • Reputation Registry — pre-job reputation checks, post-settlement feedback (with Sybil protection)
  • Validation Registry — trigger work verification, read validation scores (0–100)

Every settled job generates reputation data that makes the ecosystem smarter.

Key Design Decisions

  • Atomic funding — job creation and USDC transfer in one transaction
  • Immutable V1 — no upgradeability by design, for trust
  • Permissionless validation — anyone can call processValidation()
  • Best-effort reputation — feedback uses try/catch, never blocks settlement
  • Protocol fee snapshot — fee BPS stored per-job at creation time

Deployed Contracts (Base Sepolia)

Quick Start

For AI Agents (MCP Server)

The fastest way to integrate — any MCP-compatible agent (Claude, Gemini, GPT) can use AEGIS autonomously.

npm install @aegis-protocol/mcp-server

11 tools available: aegis_create_job, aegis_deliver_work, aegis_check_job, aegis_settle_job, aegis_open_dispute, aegis_claim_refund, aegis_lookup_agent, aegis_list_jobs, aegis_check_balance, aegis_get_template, aegis_should_i_escrow

See mcp/README.md for configuration and usage.

For Developers (TypeScript SDK)

npm install @aegis-protocol/sdk @aegis-protocol/types
import { AegisClient } from '@aegis-protocol/sdk';

const client = AegisClient.create({
  chain: 'base-sepolia',
  rpcUrl: process.env.RPC_URL,
});

// Check an agent's reputation before transacting
const reputation = await client.erc8004.reputation.getSummary(agentId);

// Create an escrow job
const job = await client.escrow.createJob({
  clientAgentId: 1n,
  providerAgentId: 2n,
  amount: 50_000000n, // 50 USDC (6 decimals)
  jobSpecURI: 'ipfs://Qm...',
  jobSpecHash: '0x...',
  validatorAddress: '0x...',
  deadlineSeconds: 86400, // 24 hours
});

For Developers (LangChain / LangGraph)

npx -y pnpm@9.15.4 -C sdk --filter @aegis-protocol/examples langchain-agent -- "Check agent 1 reputation and summarize escrow risk."

LangChain tool adapters are available in sdk/packages/langchain and can be imported as:

import { createAegisLangChainTools } from "@aegis-protocol/langchain";

The native LangChain adapter now includes the advisory entry point aegis_should_i_escrow plus settlement support, so the agent-first funnel matches MCP, ElizaOS, and Virtuals.

For Developers (CrewAI)

Install Python dependencies (one-time):

python3 -m pip install crewai mcp

Run the CrewAI + MCP example:

OPENAI_API_KEY=... python3 sdk/examples/crewai-agent.py "Check agent 1 reputation and summarize escrow risk."

Or through the examples workspace script:

npx -y pnpm@9.15.4 -C sdk --filter @aegis-protocol/examples crewai-agent -- "Check agent 1 reputation and summarize escrow risk."

The example uses CrewAI's MCP integration (MCPServerStdio) to call the published @aegis-protocol/mcp-server tools directly. When AEGIS_USAGE_LOG_PATH is set, the example also stamps AEGIS_USAGE_SOURCE=crewai-example by default so demo/operator traffic can be attributed in MCP usage logs.

For Developers (ElizaOS)

Run the ElizaOS example config summary:

npx -y pnpm@9.15.4 -C sdk --filter @aegis-protocol/examples eliza-character

The ElizaOS plugin package is available in sdk/packages/elizaos and can be imported as:

import { createAegisElizaPlugin } from "@aegis-protocol/elizaos";

The example exports a minimal character/plugin config in sdk/examples/eliza-character.ts and includes:

  • advisory action entry point: AEGIS_SHOULD_I_ESCROW
  • trust and funding checks: AEGIS_LOOKUP_AGENT, AEGIS_CHECK_BALANCE
  • write-path actions for signer-enabled runtimes: AEGIS_APPROVE_ESCROW, AEGIS_CREATE_JOB, AEGIS_SUBMIT_DELIVERABLE, AEGIS_SETTLE_JOB

For Developers (Virtuals GAME / ACP)

Run the Virtuals config summary:

npx -y pnpm@9.15.4 -C sdk --filter @aegis-protocol/examples virtuals-agent

The Virtuals adapter package is available in sdk/packages/virtuals and can be imported as:

import {
  createAegisVirtualsWorker,
  createAegisVirtualsPrompt,
  createAegisAcpSchemas,
  createAegisAcpResources,
} from "@aegis-protocol/virtuals";

The example exports a minimal Virtuals-ready config in sdk/examples/virtuals-agent.ts and includes:

  • GAME worker functions for AEGIS advisory/read/write flows
  • ACP custom requirement/deliverable schemas aligned to AEGIS job creation
  • ACP resource entries that point operators back to AEGIS docs/MCP surfaces
  • explicit separation between agent runtime logic and the operator-owned ACP wallet/registry setup

For Developers (REST API)

# Check a job's status
curl https://api.aegis-protocol.xyz/jobs/{jobId}

# Query an agent's reputation
curl https://api.aegis-protocol.xyz/agents/{agentId}

# Stream real-time events
curl https://api.aegis-protocol.xyz/events/stream

See api/ for full route documentation.

Build from Source

# Install Foundry
curl -L https://foundry.paradigm.xyz | bash
foundryup

# Install dependencies
forge install

# Build contracts
forge build

# Run tests
forge test -vvv

# Run invariants only
forge test --match-path "test/invariants/*" -vvv

# Gas report
forge test --gas-report

Monorepo Structure

aegis-protocol/
├── src/                    # Solidity contracts
│   ├── AegisEscrow.sol
│   ├── AegisDispute.sol
│   ├── AegisTreasury.sol
│   ├── AegisJobFactory.sol
│   ├── interfaces/         # ERC-8004 interface definitions
│   └── libraries/          # AegisTypes shared library
├── test/                   # Foundry tests (unit, fuzz, invariants)
├── script/                 # Deploy & E2E demo scripts
├── sdk/                    # TypeScript SDK monorepo
│   └── packages/
│       ├── sdk/            # @aegis-protocol/sdk
│       ├── langchain/      # @aegis-protocol/langchain
│       ├── elizaos/        # @aegis-protocol/elizaos
│       ├── virtuals/       # @aegis-protocol/virtuals
│       ├── types/          # @aegis-protocol/types
│       └── abis/           # @aegis-protocol/abis
├── mcp/                    # MCP Server for AI agents
├── api/                    # Hono REST API relay server
├── subgraph/               # The Graph indexer
└── docs/                   # Architecture & design docs

Protocol Parameters

ParameterValue
Protocol fee2.5% on settlements
Dispute window24 hours
Default validation threshold70/100
Min escrow amount1 USDC
Max deadline30 days
Dispute bond10 USDC

Tech Stack

Solidity 0.8.24 · Foundry · OpenZeppelin 5.x · Base L2 · USDC · TypeScript · Viem · Hono · The Graph

Status

AEGIS is on Base Sepolia testnet. Mainnet deployment is planned for Q2 2026, pending security audit.

  • 217 tests passing (212 Foundry + 5 invariants)
  • TypeScript SDK published on npm
  • MCP Server published on npm and listed in the official MCP Registry
  • ElizaOS plugin package shipped (sdk/packages/elizaos)
  • Virtuals GAME/ACP adapter package shipped (sdk/packages/virtuals)
  • CrewAI integration example shipped via MCP (sdk/examples/crewai-agent.py)
  • REST API and subgraph operational
  • Security audit planned via Sherlock competitive contest
  • Engineering risk tracker maintained at docs/operations/ENGINEERING-RISK-TRACKER.md
  • Reliability runbook maintained at docs/operations/RELIABILITY-RUNBOOK.md

Contributing

AEGIS is open source under the MIT License. Contributions welcome — see CONTRIBUTING.md, SECURITY.md, or the open issues.

License

MIT

Reviews

No reviews yet

Be the first to review this server!