Zero-Trust Security & In-Stream DLP Proxy.

Real-time packet inspection for autonomous tool chains. Intercepts destructive OS commands, blocks unauthorized database table drops, and scrubs sensitive credentials in-flight.

$ npx aegis-proxy

Open Security Console

Live Policy Interceptor & DLP Sandbox

Select an attack payload below to observe real-time AST policy evaluation and token scrubbing.

UNTRUSTED INCOMING TOOL CALL JSON-RPC 2.0

{}

AEGIS VERDICT BLOCKED

RULE SEC-001 TRIGGERED Destructive recursive directory removal detected on root/system path.

INSPECTION OVERHEAD 0.24 ms

DLP MASKED 0 tokens

FORWARD STATUS REJECTED

DELIVERED TO AGENT:

{}

Zero-Trust Security Architecture

Full-spectrum defense against prompt injections, rogue tool calls, and credential leakage.

Destructive Command Interception

AST-level pre-execution matching intercepts commands like rm -rf /, DROP TABLE, chmod 777, and force pushes before they execute.

In-Stream Zero-Latency DLP

Sub-millisecond regex scanning automatically scrubs AWS access keys, OpenAI tokens, GitHub PATs, JWTs, and database URIs from tool arguments and outputs.

Transparent stdio / SSE Proxy

Zero code modifications needed. Wraps any existing service binary seamlessly with less than 0.5ms inspection overhead.

Configurable Enforcement Modes

Run in enforce mode to reject malicious requests, audit mode for non-blocking compliance logs, or permissive mode for in-place data masking.

Drop-in Integration

Secure Claude Desktop, Cursor, or your custom Node.js agents in seconds.

# Wrap any tool server directly from the command line
aegis -- npx -y @modelcontextprotocol/server-postgres postgresql://localhost/mydb

# Run in audit mode without blocking execution
aegis --mode=audit -- npx -y @modelcontextprotocol/server-filesystem /Users/me