Aegis Mcp
Governance enforcement that sits between your AI agent and the filesystem. Every write, delete, and execute operation gets validated against role-based policies in `.agentpolicy/` before it happens. The server loads your governance rules into its own memory, so the agent never pays the token cost. You get path restrictions, content pattern scanning, quality gates, and an override protocol with append-only logging. Comes with a construction mode for initial builds where the agent reads governance files as a blueprint but skips write restrictions for speed. Universal mode lets the user pick a role at session start, fixed mode locks a role at launch. Works alongside native agent tools, enforcement is opt-in through governed tool routing.
- GitHub stars
- 3
- tools
- 9
- transport
- STDIO
- last updated
- Mar 17, 2026
Tools
9 toolsPublic tool metadata for what this MCP can expose to an agent.
aegis_policy_summaryRole boundaries and governance summary (or available roles in universal mode).
Role boundaries and governance summary (or available roles in universal mode).
No parameter schema in public metadata yet.
aegis_select_roleSelect a role (including construction) in universal mode.
Select a role (including construction) in universal mode.
No parameter schema in public metadata yet.
aegis_check_permissionsPre-check if an operation is allowed.
Pre-check if an operation is allowed.
No parameter schema in public metadata yet.
aegis_write_fileGoverned write with path + content validation.
Governed write with path + content validation.
No parameter schema in public metadata yet.
aegis_read_fileGoverned read with path validation.
Governed read with path validation.
No parameter schema in public metadata yet.
aegis_delete_fileGoverned delete with path validation.
Governed delete with path validation.
No parameter schema in public metadata yet.
aegis_executeGoverned command execution.
Governed command execution.
No parameter schema in public metadata yet.
aegis_complete_taskRun quality gates and close construction mode if active.
Run quality gates and close construction mode if active.
No parameter schema in public metadata yet.
aegis_request_overrideExecute a blocked action after human confirmation.
Execute a blocked action after human confirmation.
No parameter schema in public metadata yet.
Sponsors
Agent CaffeineSponsoredClose your lid, come back to finished work
SnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthly
WaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthly
knobsSponsoredSee your site on any phone, any day, in any languageReadme
aegis-mcp-server
MCP enforcement layer for the Aegis agent governance specification.
Policy at the root. Enforcement at runtime. Accountability on every action.
What It Does
Aegis Lifecycle Overview
aegis-mcp-server is an MCP server that validates every agent action against your .agentpolicy/ files before it happens. Path permissions, content scanning, role boundaries, quality gates — all enforced at runtime with zero token overhead to the agent.
The agent never loads your governance files. The MCP server reads them into its own process memory and validates silently. The agent calls governed tools and gets back either a success or a blocked response with the specific reason.
Details
- Repository
- github.com/cleburn/aegis-mcp
- Package
aegis-mcp-server- Transport
- STDIO
- Registry
- MCP registry, active