AegisAI

io.github.kadopiPublished by GitHub account kadopiv0.6.0Updated Oct 24, 2026

Paid pre-execution risk verification for AI agents over MCP and x402.

VerifiedStreamable HTTPWeb executableFinanceSecurity & Monitoring

Overview

AI-generated overview

AegisAI is a remote MCP server for paid pre-execution risk verification of AI agent actions, plus account-scoped wallet monitoring and alert management.

What you can do
Discover capabilities and x402 testnet payment details, free of charge, without running verification. Run paid risk verification of an agent action, with unpaid calls returning a payment challenge an x402-aware client can settle and retry. Pre-evaluate a public-price sale deterministically without sending, paying or settling. List, read and update the status and note of alerts on the authenticated monitor account. Register, list, update and stop Base Sepolia wallet monitor subscriptions and their policies. Register, list, challenge and stop A2A notification endpoints, including DNS TXT ownership challenges.
When to use it
Use it when an agent needs a paid risk check before executing a commerce or wallet action, or when you want an account-scoped view of monitoring subscriptions, alerts and A2A notification endpoints on Base Sepolia testnet.
Requirements
A remote streamable HTTP endpoint; no local package. An authenticated monitor account for the account-scoped tools. An x402-aware MCP client able to pay the challenge for the paid risk verification tool. Base Sepolia testnet wallets for monitor subscriptions.
Before you install
The risk verification tool is paid and never free; an x402-capable client may pay automatically, so spending should be controlled. Tools register wallets and endpoints and change alert and subscription state, though they do not send notifications or perform wallet actions. Endpoint registration and DNS challenges do not contact the customer endpoint, and delivery stays disabled until verification and approval.

Installation

In SourceWeft

  1. Open AegisAI in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.

Use with an agent

Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.

Read https://sourceweft.com/mcp/io.github.kadopi%2Faegis-ai/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.

Read the install guide the agent follows

Other MCP clients

Add this to your client's mcpServers config.

{
  "mcpServers": {
    "aegisai": {
      "type": "http",
      "url": "https://aegis-api.kadopi.workers.dev/mcp"
    }
  }
}

Tools

17

get_aegis_capabilities

Get AegisAI capabilities

Returns machine-readable discovery links and x402 testnet payment information. This tool is free and does not perform risk verification.

Takes no parameters.

evaluate_agent_commerce_policy

Evaluate Agent Commerce policy

Deterministically pre-evaluates a public-price sale without sending, paying, settling, or changing stored state. Signed Basic and Pro public terms may be allowed; verified-payer velocity is reserved atomically after facilitator verification and before settlement.

Parametersofferrequiredsellerrequiredpurchaserequired

list_monitor_alerts

List on-chain monitor alerts

Lists structured alerts belonging only to the authenticated monitor account. This tool never sends notifications or performs wallet actions.

ParameterslimitseveritycaseStatuswalletAddress

get_monitor_alert

Get an on-chain monitor alert

Returns one structured alert and its bounded evidence for the authenticated monitor account.

ParametersalertIdrequired

update_monitor_alert_status

Update on-chain monitor alert status

Idempotently updates only the case status and note for an alert owned by the authenticated monitor account. It never changes notification state or performs wallet actions.

ParametersnotealertIdrequiredcaseStatusrequired

list_monitor_subscriptions

List monitor subscriptions

Lists account-scoped Base Sepolia monitor subscriptions without changing monitoring or payment state.

Takes no parameters.

get_monitor_subscription

Get a monitor subscription

Returns one account-owned subscription and its current policy and scan state.

ParameterssubscriptionIdrequired

register_monitor_subscription

Register a stopped monitor subscription

Registers a Base Sepolia wallet and validated policy in stopped state. Payment and operator approval are still required before activation.

ParameterslabelpolicyrequiredchainIdrequiredwalletAddressrequired

update_monitor_subscription

Update monitor subscription policy

Idempotently updates label or policy. It never activates monitoring, pays, or changes networks.

ParameterslabelpolicysubscriptionIdrequired

stop_monitor_subscription

Stop a monitor subscription

Idempotently disables monitoring for one account-owned subscription without deleting its audit history.

ParameterssubscriptionIdrequired

register_monitor_a2a_endpoint

Register an A2A alert endpoint

Registers an account-scoped endpoint in pending-verification state. Registration never contacts the endpoint and delivery remains disabled.

ParameterstransportrequiredmaxPerHourendpointUrlrequiredminSeverityprotocolVersionrequired

list_monitor_a2a_endpoints

List A2A alert endpoints

Lists the authenticated account's A2A notification endpoints and delivery-disabled state.

Takes no parameters.

create_monitor_a2a_endpoint_challenge

Create an A2A endpoint ownership challenge

Creates a one-time 15-minute challenge for a pending endpoint. It does not contact or verify the endpoint and never enables delivery.

ParametersendpointIdrequired

create_monitor_a2a_dns_txt_challenge

Create an A2A endpoint DNS TXT challenge

Creates a one-time DNS TXT ownership challenge without contacting the customer endpoint. Verification and delivery remain disabled.

ParametersendpointIdrequired

verify_monitor_a2a_dns_txt_challenge

Verify an A2A endpoint DNS TXT challenge

Checks only Cloudflare's fixed DNS resolver when DNS verification is enabled. It never contacts the customer endpoint and never enables delivery.

ParametersendpointIdrequiredchallengeIdrequired

stop_monitor_a2a_endpoint

Stop an A2A alert endpoint

Idempotently stops an account-owned endpoint and cancels only its unsent deliveries.

ParametersendpointIdrequired

verify_risk

Verify risk with AegisAI

Runs paid AegisAI risk verification and never runs verification for free. An x402-aware MCP client can pay and retry this tool automatically; unpaid calls return the canonical payment challenge.

ParametersplancontentrequiredcontextsourcesrequestedChecks

Version history

1
  1. v0.6.0LatestSep 16, 2026

Score

83% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 daysRequired25 pts
  • Auth declaredRequired10 pts
  • Tools listedRequired15 pts
  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts

    Declare a GitHub repository with a README, or serve resource_documentation in the OAuth protected-resource metadata.

  • LicenseNot applicable

    A hosted service is used under its provider's terms, so no license is expected here. This check is left out of the percentage.