AegisFlow

AegisFlow is a local-first policy gateway for coding agents. It allows, reviews, or blocks routed MCP, shell, SQL, GitHub, and HTTP actions. It can issue scoped credentials and write signed, hash-linked evidence for each session.

Run local proof

No provider key or paid service is required.

git clone https://github.com/saivedant169/AegisFlow.git
cd AegisFlow/starter-kit
./install-pr-writer.sh

Installer builds binaries, starts local services, loads PR-writer policy, then checks allow, review, and block decisions.

Pick boundary

Client or protocol	Start here	Covered behavior
Claude Code	Claude Code security	Messages API and routed MCP calls
Cursor	Cursor policy gateway	Routed MCP calls
MCP client or server	MCP gateway security	Tool discovery, calls, review resume
Coding-agent workflow	Coding-agent governance	Policy decisions, credentials, evidence

Know boundary

AegisFlow governs traffic sent through a configured AegisFlow endpoint. It does not sandbox an agent process and cannot stop calls that bypass gateway. Built-in editor file and shell tools need explicit routing through MCP or another supported boundary.

Use production checklist before exposing services outside local machine. Read threat model before treating evidence or policy as security control.