🛡️ AegisMCP: Zero-Trust Security & Cost Firewall for AI Agents

AegisMCP is a local-first security gateway and visual dashboard that sits between your filesystem and your AI coding agents (Claude Desktop, Cursor, Copilot). It strictly protects your infrastructure from destructive commands and heavily defends your API unit economics from runaway token costs.

<div align="center"> <img src="./AegisMCP.PNG" alt="AegisMCP Dashboard showing Firewall Active and 30% Profit Margin Guarantee" width="800"/> </div>

---

🚨 The Problem

Giving AI agents raw, unmonitored access to the Model Context Protocol (MCP) or your local terminal is a massive risk. A hallucination or infinite loop can wipe out a database, expose your .env files, or rack up thousands of dollars in API bills overnight, destroying your project's profit margins.

✨ How AegisMCP Solves It

AegisMCP acts as an impenetrable, zero-trust proxy:

• Financial Guardrails (Guaranteed Margins): Hard-caps daily API spend and enforces a strict structural markup (e.g., 30%) calculation before execution to guarantee positive unit economics.
• Semantic Threat Interception: Blocks prompt injections and malicious commands (chmod 777, DROP TABLE) instantly.
• Real-Time Visual Dashboard: A Next.js hub that lets you monitor agent activity and requires explicit approval for dangerous actions.
• Zero-Latency Local Compute: The interceptor runs locally alongside your agent, meaning zero cloud latency and no third-party data tracking.

---

🚀 Seamless Setup & Connection Guide

AegisMCP is designed for frictionless integration. You can boot the entire firewall in under 60 seconds.

1. Install & Boot the Firewall

Initialize the monorepo locally without complex configurations:

git clone [https://github.com/thekartikeyamishra/AegisMCP.git](https://github.com/thekartikeyamishra/AegisMCP.git)
cd AegisMCP




2. Connect Claude Desktop
Tell Claude to route its tools through your local Aegis firewall.

Open your Claude configuration file:

Mac: ~/Library/Application Support/Claude/claude_desktop_config.json

Windows: %APPDATA%\Claude\claude_desktop_config.json

Add AegisMCP to the mcpServers object:
npm install
npm run dev

{
  "mcpServers": {
    "AegisFirewall": {
      "command": "node",
      "args": ["/absolute/path/to/AegisMCP/packages/cli/dist/index.js"]
    }
  }
}



Restart Claude Desktop. You will see a 🔨 icon indicating Aegis is connected.

3. Connect Cursor AI
Open Cursor Settings > Features > MCP Servers.

Click + Add New MCP Server.

Name it AegisFirewall.

Set the command to node and the argument to the absolute path of packages/cli/dist/index.js.

Click Save. Cursor will now route all system calls through Aegis.

🔍 Search Keywords & SEO Tags
mcp-server, model-context-protocol, claude-desktop-skills, ai-agent-security, llm-firewall, prompt-injection-protection, cursor-agent-tools, openai-cost-control, api-token-tracker, zero-trust-ai, local-mcp-proxy.

🤝 Contributing
AegisMCP is a community-driven defense layer. We actively accept Pull Requests! If you discover a new AI jailbreak or destructive pattern, please submit a PR. Check out our Good First Issues in the issue tracker to get started.

⚖️ License & Liability
Distributed under the MIT License. AegisMCP is provided "AS IS". The authors hold no liability for API costs incurred or data lost by third-party AI agents. See LICENSE for more information.