Aegis

Aegis is an open-source, local-first credential isolation proxy for AI agents and Model Context Protocol (MCP) workflows. It sits between AI agents and their target APIs, injecting secrets only at the network boundary so agents never see, store, or transmit actual credentials. Aegis enforces domain restrictions, granular access controls, and creates audit trails for all credential use. It is aimed at developers, infrastructure/security teams, and anyone deploying autonomous AI agents that interact with sensitive APIs.