← Back to search Server uses network capabilities via: fetch(), urllib Server uses filesystem capabilities via: fs, fs sync ops, open(), os, path, pathlib Server uses shell capabilities via: child_process, execSync(), subprocess Server uses env_vars capabilities via: process.env
@aegisaudit/mcp-server
MCP server for the AEGIS Protocol — exposes on-chain ZK skill attestation queries as MCP tools
D
59.6 / 100
Versions
0.6.0latestMar 18, 2026
0.5.2Mar 18, 2026
0.5.1Mar 18, 2026
0.5.0Mar 6, 2026
0.4.0Mar 5, 2026
+ show 6 moreshow less
0.3.0Mar 5, 2026
0.2.2Feb 28, 2026
0.2.1Feb 28, 2026
0.2.0Feb 28, 2026
0.1.1Feb 28, 2026
0.1.0Feb 27, 2026
Tools 8
aegis_tao_browse_miners annotations: none low
Browse miners on a Bittensor subnet. For each miner, computes the AEGIS skill hash and checks if attestations exist — helping auditors find unaudited TAO miners.
ownerOf annotations: none low
aegis_check_skill annotations: none low
Look up a skill by its bytes32 hash. Returns skill metadata, all non-revoked attestations with auditor reputation data, open disputes, and active bounty information. Use this to get a comprehensive view of a skill before auditing or interacting with it.
aegis-info annotations: none low
Protocol overview and tool discovery
aegis_browse_bounties annotations: none low
Browse open (unclaimed, unreclaimed) bounties sorted by reward amount descending. Great for finding paid audit opportunities. Each bounty is linked to a skill that needs auditing.
aegis_tao_list_subnets annotations: none low
List active Bittensor subnets with basic info. Returns netuid, name, miner count, and the computed AEGIS skill hash for each subnet. Use this to discover TAO subnets available for auditing.
aegis_tao_check_subnet annotations: none low
Check AEGIS attestations for a Bittensor subnet or specific miner. Computes the skill hash from the netuid (and optional hotkey), then queries the AEGIS subgraph for existing attestations and disputes.
aegis_browse_unaudited annotations: none low
Browse skills that have zero attestations — prime candidates for auditing. Returns newest-first with bounty info if available. Use this to find skills that need auditing.
Permissions 4
network medium filesystem low shell high env_vars low Scan Findings 116
low
Tool 'aegis_tao_browse_miners' has no annotations
low
Tool 'ownerOf' has no annotations
low
Tool 'aegis_check_skill' has no annotations
low
Tool 'aegis-info' has no annotations
low
Tool 'aegis_browse_bounties' has no annotations
low
Tool 'aegis_tao_list_subnets' has no annotations
low
Tool 'aegis_tao_check_subnet' has no annotations
low
Tool 'aegis_browse_unaudited' has no annotations
medium
OAuth implementation without PKCE
medium
Vulnerable dependency: hono@4.7.0 (GHSA-hm8q-7f3q-5f36)
high
Remote transport without authentication
info
Sandbox failed to start for behavioral verification
medium
Suspicious package name: react-dom
medium
Suspicious package name: lodash.startcase
medium
Vulnerable dependency: turbo@2.3.0 (GHSA-3qcw-2rhx-2726)
medium
Vulnerable dependency: turbo@2.3.0 (GHSA-hcf7-66rw-9f5r)
medium
Vulnerable dependency: vite@6.0.0 (GHSA-356w-63v5-8wf4)
medium
Vulnerable dependency: vite@6.0.0 (GHSA-4r4m-qw57-chr8)
medium
Vulnerable dependency: vite@6.0.0 (GHSA-4w7w-66w2-5vf9)
medium
Vulnerable dependency: vite@6.0.0 (GHSA-859w-5945-r5v3)
medium
Vulnerable dependency: vite@6.0.0 (GHSA-93m4-6634-74q7)
medium
Vulnerable dependency: vite@6.0.0 (GHSA-fx2h-pf6j-xcff)
medium
Vulnerable dependency: vite@6.0.0 (GHSA-g4jq-h2w9-997c)
medium
Vulnerable dependency: vite@6.0.0 (GHSA-jqfw-vq24-v9c3)
medium
Vulnerable dependency: vite@6.0.0 (GHSA-p9ff-h696-f583)
medium
Vulnerable dependency: vite@6.0.0 (GHSA-v6wh-96g9-6wx3)
medium
Vulnerable dependency: vite@6.0.0 (GHSA-vg6x-rcgg-rjx6)
medium
Vulnerable dependency: vite@6.0.0 (GHSA-x574-m823-4x7w)
medium
Vulnerable dependency: vite@6.0.0 (GHSA-xcj6-pq6g-qj4x)
medium
Vulnerable dependency: tsup@8.3.0 (GHSA-3mv9-4h5g-vhg3)
medium
Vulnerable dependency: vitest@2.1.0 (GHSA-5xrq-8626-4rwp)
medium
Vulnerable dependency: vitest@2.1.0 (GHSA-9crc-q9x8-hgqq)
medium
Vulnerable dependency: @hono/node-server@1.13.8 (GHSA-92pp-h63x-v22m)
medium
Vulnerable dependency: @hono/node-server@1.13.8 (GHSA-frvp-7c67-39w9)
medium
Vulnerable dependency: @hono/node-server@1.13.8 (GHSA-wc8c-qw6v-h7f6)
medium
Vulnerable dependency: hono@4.7.0 (GHSA-26pp-8wgv-hjvm)
medium
Vulnerable dependency: hono@4.7.0 (GHSA-2gcr-mfcq-wcc3)
medium
Vulnerable dependency: hono@4.7.0 (GHSA-3hrh-pfw6-9m5x)
medium
Vulnerable dependency: hono@4.7.0 (GHSA-3vhc-576x-3qv4)
medium
Vulnerable dependency: hono@4.7.0 (GHSA-458j-xx4x-4375)
medium
Vulnerable dependency: hono@4.7.0 (GHSA-5pq2-9x2x-5p6w)
medium
Vulnerable dependency: hono@4.7.0 (GHSA-69xw-7hcm-h432)
medium
Vulnerable dependency: hono@4.7.0 (GHSA-6wqw-2p9w-4vw4)
medium
Vulnerable dependency: hono@4.7.0 (GHSA-79qm-7rj5-m7r9)
medium
Vulnerable dependency: hono@4.7.0 (GHSA-88fw-hqm2-52qc)
medium
Vulnerable dependency: hono@4.7.0 (GHSA-8j4g-w8fx-2239)
medium
Vulnerable dependency: hono@4.7.0 (GHSA-92vj-g62v-jqhh)
medium
Vulnerable dependency: hono@4.7.0 (GHSA-9r54-q6cx-xmh5)
medium
Vulnerable dependency: hono@4.7.0 (GHSA-9vqf-7f2p-gf9v)
medium
Vulnerable dependency: hono@4.7.0 (GHSA-f23p-vx2j-j53r)
medium
Vulnerable dependency: hono@4.7.0 (GHSA-f577-qrjj-4474)
medium
Vulnerable dependency: hono@4.7.0 (GHSA-f67f-6cw9-8mq4)
medium
Vulnerable dependency: hono@4.7.0 (GHSA-gq3j-xvxp-8hrf)
medium
Vulnerable dependency: hono@4.7.0 (GHSA-j6c9-x7qj-28xf)
medium
Vulnerable dependency: hono@4.7.0 (GHSA-m732-5p4w-x69g)
medium
Vulnerable dependency: hono@4.7.0 (GHSA-p6xx-57qc-3wxr)
medium
Vulnerable dependency: hono@4.7.0 (GHSA-p77w-8qqv-26rm)
medium
Vulnerable dependency: hono@4.7.0 (GHSA-q5qw-h33p-qvwr)
medium
Vulnerable dependency: hono@4.7.0 (GHSA-q7jf-gf43-6x6p)
medium
Vulnerable dependency: hono@4.7.0 (GHSA-qp7p-654g-cw7p)
medium
Vulnerable dependency: hono@4.7.0 (GHSA-r354-f388-2fhh)
medium
Vulnerable dependency: hono@4.7.0 (GHSA-r5rp-j6wh-rvv4)
medium
Vulnerable dependency: hono@4.7.0 (GHSA-rv63-4mwf-qqc2)
medium
Vulnerable dependency: hono@4.7.0 (GHSA-v8w9-8mx6-g223)
medium
Vulnerable dependency: hono@4.7.0 (GHSA-w332-q679-j88p)
medium
Vulnerable dependency: hono@4.7.0 (GHSA-w62v-xxxg-mg59)
medium
Vulnerable dependency: hono@4.7.0 (GHSA-wgpf-jwqj-8h8p)
medium
Vulnerable dependency: hono@4.7.0 (GHSA-wmmm-f939-6g9c)
medium
Vulnerable dependency: hono@4.7.0 (GHSA-wwfh-h76j-fc44)
medium
Vulnerable dependency: hono@4.7.0 (GHSA-xf4j-xp2r-rqqx)
medium
Vulnerable dependency: hono@4.7.0 (GHSA-xgm2-5f3f-mvvc)
medium
Vulnerable dependency: hono@4.7.0 (GHSA-xpcf-pg52-r92g)
medium
Vulnerable dependency: hono@4.7.0 (GHSA-xrhx-7g5j-rcj5)
medium
Vulnerable dependency: micromatch@4.0.2 (GHSA-952p-6rrq-rcjv)
medium
Vulnerable dependency: semver@7.3.5 (GHSA-c2qf-rxjj-qqgw)
medium
Vulnerable dependency: undici@7.4.0 (GHSA-2mjp-6q6p-2qxm)
medium
Vulnerable dependency: undici@7.4.0 (GHSA-35p6-xmwp-9g52)
medium
Vulnerable dependency: undici@7.4.0 (GHSA-4992-7rv2-5pvq)
medium
Vulnerable dependency: undici@7.4.0 (GHSA-4cwx-7wf7-3272)
medium
Vulnerable dependency: undici@7.4.0 (GHSA-8xcm-r25x-g524)
medium
Vulnerable dependency: undici@7.4.0 (GHSA-cxrh-j4jr-qwg3)
medium
Vulnerable dependency: undici@7.4.0 (GHSA-f269-vfmq-vjvj)
medium
Vulnerable dependency: undici@7.4.0 (GHSA-g8m3-5g58-fq7m)
medium
Vulnerable dependency: undici@7.4.0 (GHSA-g9mf-h72j-4rw9)
medium
Vulnerable dependency: undici@7.4.0 (GHSA-jr45-8vmc-qm54)
medium
Vulnerable dependency: undici@7.4.0 (GHSA-m8rv-5g2x-5cg5)
medium
Vulnerable dependency: undici@7.4.0 (GHSA-p88m-4jfj-68fv)
medium
Vulnerable dependency: undici@7.4.0 (GHSA-pr7r-676h-xcf6)
medium
Vulnerable dependency: undici@7.4.0 (GHSA-v3r7-h72x-cjcm)
medium
Vulnerable dependency: undici@7.4.0 (GHSA-v9p9-hfj2-hcw8)
medium
Vulnerable dependency: undici@7.4.0 (GHSA-vrm6-8vpv-qv8q)
medium
Vulnerable dependency: undici@7.4.0 (GHSA-vxpw-j846-p89q)
medium
Vulnerable dependency: minimatch@10.2.2 (GHSA-23c5-xmqv-rm74)
medium
Vulnerable dependency: minimatch@10.2.2 (GHSA-7r86-cg39-jmmj)
medium
Buffer.from base64 in aegis-zk-aegisprotocol-c1f05e2/packages/sdk/src/ipfs.ts:126
medium
Buffer.from base64 in aegis-zk-aegisprotocol-c1f05e2/packages/audit-queue/src/runner.ts:91
medium
Buffer.from base64 in aegis-zk-aegisprotocol-c1f05e2/packages/indexer/src/metadata.ts:48
high
Long hex escape sequence in aegis-zk-aegisprotocol-c1f05e2/packages/contracts/lib/openzeppelin-contracts/test/utils/Strings.test.js:360
info
package.json metadata
info
Tool: aegis_tao_browse_miners
info
Tool: ownerOf
info
Tool: aegis_check_skill
info
Tool: aegis-info
info
Tool: aegis_browse_bounties
info
Tool: aegis_tao_list_subnets
info
Tool: aegis_tao_check_subnet
info
Tool: aegis_browse_unaudited
info
Transport: stdio
info
Required env vars (21)
info
Sandbox failed to start for output poisoning scan
medium
Permission: network access detected
low
Permission: filesystem access detected
high
Permission: shell access detected
low
Permission: env_vars access detected
info
SBOM generated: 760 components
medium
No build provenance detected (SLSA L0)