Aegis AI — Secure Access Layer

Manage, govern, and audit your AI agents - all from the VS Code sidebar.

Aegis Overview

Features

🔌 50+ MCP Servers — Browse and install from a built-in catalog: GitHub, Playwright, PostgreSQL, Slack, Stripe, MongoDB, and many more. One click to add, one click to go.

🛡️ Policy Engine — Control what your AI can do. Set allow, deny, or prompt rules with wildcard patterns (get*, delete*). Apply built-in profiles — Restrictive, Permissive, or Read-only — in seconds.

🔐 Encrypted Secrets — Store API keys and tokens with encryption. Secrets are scoped per server and injected automatically — no plaintext credentials in config files.

📋 Audit Log — Every tool call is logged: timestamp, server, tool name, result, and duration. Query, filter, and export as JSON or CSV.

🚀 Gateway Proxy — A single MCP endpoint that routes to all your servers. Tool namespacing prevents conflicts. Policies are enforced on every call.

🔄 VS Code Sync — Auto-generates .vscode/mcp.json so Copilot and other MCP clients connect through Aegis instantly.

Getting Started

Click the Aegis shield icon in the Activity Bar
Click + to add an MCP server from the catalog
Click ▶ to start the gateway
Your AI agent is now connected through Aegis

Data Storage

All data is stored locally in ~/.aegis/ - nothing leaves your machine.

Requirements

VS Code 1.85+
Node.js 20+

FAQ

Q: Where is my data stored? A: All data lives locally in ~/.aegis/. Nothing is sent to external servers.

Q: Does it work with agents other than VS Code Copilot? A: Yes. Any MCP-compatible client (Claude Desktop, Cursor, Windsurf, etc.) can connect to the Aegis gateway at http://localhost:6371/mcp.

Q: Can I add my own MCP servers not in the catalog? A: Yes. Use Add MCP Server → choose npm package, custom command, or remote HTTP endpoint.

Q: How are secrets protected? A: Secrets are encrypted using a 256-bit random master key stored with restricted file permissions. The encrypted file is useless without the key.

Q: What happens if I deny a tool in a policy? A: The AI agent receives a "denied by policy" error. The attempt is logged in the audit trail.

Q: How do I reset everything? A: Delete the ~/.aegis directory and run Aegis: Initialize again.

Feedback & Support

For issues, feature requests, or licensing inquiries: officialumangbarthwal@gmail.com

License

Licensed under the Apache License, Version 2.0.

Aegis AI - Secure Access Layer

umangbarthwal