Skip to content

com.borisinc/aegis

by borisinc.com · remote · no sign-in to list tools · v1.2.0 · published by com.borisinc

Trust layer for the x402 economy - check any service before you pay. Scores, discovery, routing.

Final · 3Changes · 3

8 tools: 3 do something that can't be undone, 3 change things and 2 only read.

Scanned Oct 21, 2026

No check matched anything in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http aegis https://aegis-mcp.borisinc.com/mcp

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

8 tools

Can't be undone 3Claude Code: ask
  • check_before_payFREE preflight BEFORE you pay: should you pay THIS endpoint?No findings

    Why it is in this group

    • The name "check_before_pay" says "pay": a word that usually means money moves, which cannot be taken back.
    Description, as the server wrote it
    FREE preflight BEFORE you pay: should you pay THIS endpoint? Stored verification signals only (no probe, no spend) - registered?, payment-worthiness, confidence, coverage, reasons, evidence. The top of the funnel for the paid trust_check, which adds the fresh probe pass + ERC-8004 on-chain reputation. Free.
  • routePay THROUGH Aegis: we buy the best verified service for you (by url or capability) and relay the data, failing over if one is down.No findings

    Why it is in this group

    • The description's first verb is "pay": a word that usually means money moves, which cannot be taken back.
    Description, as the server wrote it
    Pay THROUGH Aegis: we buy the best verified service for you (by url or capability) and relay the data, failing over if one is down. One integration reaches the whole registry; not charged if nothing delivers. Dynamic x402 price via _meta.
  • route_batchPay ONCE, Aegis fulfills MANY verified services with per-item failover.No findings

    Why it is in this group

    • The description's first verb is "pay": a word that usually means money moves, which cannot be taken back.
    Description, as the server wrote it
    Pay ONCE, Aegis fulfills MANY verified services with per-item failover. items=[{url|capability, params?}]. Charged only if all deliver. Dynamic x402 via _meta.
Changes things 3Claude Code: ask
  • erc8004_reputationOn-chain ERC-8004 reputation for any registered agent (Base IdentityRegistry) + Aegis probe cross-check + divergence flag.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    On-chain ERC-8004 reputation for any registered agent (Base IdentityRegistry) + Aegis probe cross-check + divergence flag. Paid $0.005 via x402 (_meta['x402/payment']).
  • procureTASK+BUDGET procurement: describe what you need in plain language + max spend; Aegis picks the best verified service, executes with failover, captures only on delivery, returns dat…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    TASK+BUDGET procurement: describe what you need in plain language + max spend; Aegis picks the best verified service, executes with failover, captures only on delivery, returns data + Ed25519-signed receipt. Never over budget. Dynamic x402 via _meta.
  • trust_checkPaid-delivery-verified trust verdict BEFORE you pay: score, tier, recommendation, and explainable confidence+reasons+evidence (Aegis pays real money to confirm delivery; coverage-o…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Paid-delivery-verified trust verdict BEFORE you pay: score, tier, recommendation, and explainable confidence+reasons+evidence (Aegis pays real money to confirm delivery; coverage-only scores cannot). Paid $0.05 via x402 (_meta['x402/payment']).
Only reads 2Claude Code: allow
  • discoverSearch the Aegis registry of agent-payable services, ranked by verification-backed trust.No findings

    Why it is in this group

    • The description's first verb is "search": a word for reading.
    Description, as the server wrote it
    Search the Aegis registry of agent-payable services, ranked by verification-backed trust. Free.
  • smart_discoverDescribe what you need in plain language; Aegis maps it to the best verified services (LLM intent matching).No findings

    Why it is in this group

    • The description's first verb is "describe": a word for reading.
    Description, as the server wrote it
    Describe what you need in plain language; Aegis maps it to the best verified services (LLM intent matching). Paid $0.01 via x402.

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 1.2.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http aegis https://aegis-mcp.borisinc.com/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__aegis__discover",
      "mcp__aegis__smart_discover"
    ],
    "ask": [
      "mcp__aegis__check_before_pay",
      "mcp__aegis__trust_check",
      "mcp__aegis__erc8004_reputation",
      "mcp__aegis__route_batch",
      "mcp__aegis__route",
      "mcp__aegis__procure"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as aegis. Review it before you use it.