Local proxy that injects API keys at the network boundary so agents never see them, with domain limits and audit logs.
Setup
Choose your client, copy the config, then fill in any required environment variables.
claude mcp add aegis --env AEGIS_MASTER_KEY='<AEGIS_MASTER_KEY>' --env AEGIS_SALT='<AEGIS_SALT>' -- npx -y @getaegis/cli~/.codex/config.toml
[mcp_servers.aegis]
command = "npx"
args = ["-y", "@getaegis/cli"]
env = { AEGIS_MASTER_KEY = "<AEGIS_MASTER_KEY>", AEGIS_SALT = "<AEGIS_SALT>" }
# codex mcp add aegis --env AEGIS_MASTER_KEY='<AEGIS_MASTER_KEY>' --env AEGIS_SALT='<AEGIS_SALT>' -- npx -y @getaegis/cli~/.cursor/mcp.json
{
"mcpServers": {
"aegis": {
"command": "npx",
"args": [
"-y",
"@getaegis/cli"
],
"env": {
"AEGIS_MASTER_KEY": "<AEGIS_MASTER_KEY>",
"AEGIS_SALT": "<AEGIS_SALT>"
}
}
}
}.vscode/mcp.json
{
"servers": {
"aegis": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"@getaegis/cli"
],
"env": {
"AEGIS_MASTER_KEY": "<AEGIS_MASTER_KEY>",
"AEGIS_SALT": "<AEGIS_SALT>"
}
}
}
}~/.gemini/settings.json
{
"mcpServers": {
"aegis": {
"command": "npx",
"args": [
"-y",
"@getaegis/cli"
],
"env": {
"AEGIS_MASTER_KEY": "<AEGIS_MASTER_KEY>",
"AEGIS_SALT": "<AEGIS_SALT>"
}
}
}
}claude_desktop_config.json
{
"mcpServers": {
"aegis": {
"command": "npx",
"args": [
"-y",
"@getaegis/cli"
],
"env": {
"AEGIS_MASTER_KEY": "<AEGIS_MASTER_KEY>",
"AEGIS_SALT": "<AEGIS_SALT>"
}
}
}
}.trae/mcp.json
{
"mcpServers": {
"aegis": {
"command": "npx",
"args": [
"-y",
"@getaegis/cli"
],
"env": {
"AEGIS_MASTER_KEY": "<AEGIS_MASTER_KEY>",
"AEGIS_SALT": "<AEGIS_SALT>"
}
}
}
}Environment variables
AEGIS_MASTER_KEYAEGIS_SALT
Replace the placeholders with your own credentials and keep them out of version control.