Search / io.github.kadopi/aegis-ai
protogridR0· no sign-inPaid pre-execution risk verification for AI agents over MCP and x402.
v0.6.0 · active · descriptor JSON · versions
{
"mcpServers": {
"aegis-ai": {
"type": "http",
"url": "https://aegis-api.kadopi.workers.dev/mcp"
}
}
}claude mcp add --transport http aegis-ai https://aegis-api.kadopi.workers.dev/mcp[mcp_servers.aegis-ai]
url = "https://aegis-api.kadopi.workers.dev/mcp"
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"aegis-ai": {
"type": "remote",
"url": "https://aegis-api.kadopi.workers.dev/mcp",
"enabled": true
}
}
}{
"mcpServers": {
"aegis-ai": {
"type": "http",
"url": "https://aegis-api.kadopi.workers.dev/mcp"
}
},
"deeplink": "cursor://anysphere.cursor-deeplink/mcp/install?name=aegis-ai&config=eyJ0eXBlIjoiaHR0cCIsInVybCI6Imh0dHBzOi8vYWVnaXMtYXBpLmthZG9waS53b3JrZXJzLmRldi9tY3AifQ%3D%3D"
}{
"servers": {
"aegis-ai": {
"type": "http",
"url": "https://aegis-api.kadopi.workers.dev/mcp"
}
}
}{
"mcpServers": {
"aegis-ai": {
"httpUrl": "https://aegis-api.kadopi.workers.dev/mcp"
}
}
}extensions:
"aegis-ai":
enabled: true
name: "aegis-ai"
type: streamable_http
uri: "https://aegis-api.kadopi.workers.dev/mcp"
timeout: 300
protocol.modernsupports 2026-07-28 (server/discover)protocol.statelessanswers without a sessionprotocol.transportstreamable HTTPprotocol.list_ttltools/list declares ttlMs 0, so clients re-fetch it on every useauth.prm, auth.as_metadata, auth.cimdno remote uses OAuthauth.secret_in_urlno templated URLtools.descriptionsevery tool has a descriptiontools.description_lengthdescriptions are concisetools.schemasevery tool has an object input schematools.annotations17 of 17 tools declare readOnlyHint or destructiveHinttools.directory_hintsevery tool declares readOnlyHint, destructiveHint, idempotentHint and openWorldHinttools.token_costabout 4,314 tokens to load every tooltools.api_dumptools are not a one-to-one API dumpstability.changesno tool changes in 30 daysstability.rug_pullno tool changed its meaning under the same namedeps.known_vulns, deps.mcp_sdk_version, deps.resolvableno npm or PyPI packageNo tool definition changes recorded. A server's first observation is its baseline; later probes record what changes.
Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.
+reachable +uptime-97% ~updated-59d-ago -no-repository
Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. How it is computed.
| remote | auth | reachable | uptime 30d | p50 | protocol | last ok |
|---|---|---|---|---|---|---|
https://aegis-api.kadopi.workers.dev/mcp streamable-http | none | yes | 97% | 351 ms | 2026-07-28 | 2026-10-20 |
create_monitor_a2a_dns_txt_challenge | Creates a one-time DNS TXT ownership challenge without contacting the customer endpoint. Verification and delivery remain disabled. |
create_monitor_a2a_endpoint_challenge | Creates a one-time 15-minute challenge for a pending endpoint. It does not contact or verify the endpoint and never enables delivery. |
evaluate_agent_commerce_policyread-only | Deterministically pre-evaluates a public-price sale without sending, paying, settling, or changing stored state. Signed Basic and Pro public terms may be allowed; verified-payer velocity is reserved atomically after facilitator verification and before settlement. |
get_aegis_capabilitiesread-only | Returns machine-readable discovery links and x402 testnet payment information. This tool is free and does not perform risk verification. |
get_monitor_alertread-only | Returns one structured alert and its bounded evidence for the authenticated monitor account. |
get_monitor_subscriptionread-only | Returns one account-owned subscription and its current policy and scan state. |
list_monitor_a2a_endpointsread-only | Lists the authenticated account's A2A notification endpoints and delivery-disabled state. |
list_monitor_alertsread-only | Lists structured alerts belonging only to the authenticated monitor account. This tool never sends notifications or performs wallet actions. |
list_monitor_subscriptionsread-only | Lists account-scoped Base Sepolia monitor subscriptions without changing monitoring or payment state. |
register_monitor_a2a_endpoint | Registers an account-scoped endpoint in pending-verification state. Registration never contacts the endpoint and delivery remains disabled. |
register_monitor_subscription | Registers a Base Sepolia wallet and validated policy in stopped state. Payment and operator approval are still required before activation. |
stop_monitor_a2a_endpoint | Idempotently stops an account-owned endpoint and cancels only its unsent deliveries. |
stop_monitor_subscriptiondestructive | Idempotently disables monitoring for one account-owned subscription without deleting its audit history. |
update_monitor_alert_status | Idempotently updates only the case status and note for an alert owned by the authenticated monitor account. It never changes notification state or performs wallet actions. |
update_monitor_subscription | Idempotently updates label or policy. It never activates monitoring, pays, or changes networks. |
verify_monitor_a2a_dns_txt_challenge | Checks only Cloudflare's fixed DNS resolver when DNS verification is enabled. It never contacts the customer endpoint and never enables delivery. |
verify_riskread-only | Runs paid AegisAI risk verification and never runs verification for free. An x402-aware MCP client can pay and retry this tool automatically; unpaid calls return the canonical payment challenge. |
Schemas: list_tools.
{
"name": "io.github.kadopi/aegis-ai",
"title": "AegisAI",
"$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
"remotes": [
{
"url": "https://aegis-api.kadopi.workers.dev/mcp",
"type": "streamable-http"
}
],
"version": "0.6.0",
"description": "Paid pre-execution risk verification for AI agents over MCP and x402."
}