🛡️ AegisGate MCP v1.5.1 is LIVE — 23 security layers, Streamable HTTP transport with SSE streaming, server-initiated notifications, resource subscriptions, resource templates, tool poisoning detection, ML threat detection, zero dependencies. View on GitHub (free, open source, Apache 2.0).

🛡️ AegisGate MCP is a free, open-source MCP server framework built for security-first AI agent deployments. 23 layers of defense, zero external dependencies, signed releases.

View on GitHub → Download v1.5.1 →

What Is AegisGate MCP?

AegisGate MCP is a standalone MCP server framework that applies 23 security layers to every JSON-RPC request — from prompt injection detection to tool poisoning prevention to response scanning. It’s the security-hardened alternative to the official MCP SDKs, designed for teams that can’t afford to treat MCP security as an afterthought.

Protocol: MCP 2025-06-18
Language: Go 1.26.9
License: Apache 2.0
Dependencies: Zero (no require directives in go.mod)

23 Security Layers

#	Layer	What It Does
1	Regex Pattern Matching	30 patterns detect known injection vectors
2	ATLAS Compliance	Maps to ATLAS threat framework
3	Neural ML Detection	CharCNN-BiLSTM v13, 1.6M params, <1ms CPU inference
4	Tool Poisoning Detection	Scans tool descriptions and schemas at registration
5	RBAC	Role-based access control per tool
6	Policy Engine	Configurable allow/deny rules
7	Audit Logging	Full session recording, ATLAS-mapped
8	Response Scanning	Scans tool outputs before returning to client
9	Rate Limiting	Per-session, per-tool, per-client
10	Session Management	256-bit session IDs, 30-min expiry
11-23	Additional layers	Signature verification, guardrails, chain analysis, evasion detection (L2.5), elicitation support, and more

Transports

Mode	Flag	Description
TCP	`--transport tcp` (default)	TCP listener, supports TLS/mTLS
stdio	`--transport stdio`	Standard MCP stdin/stdout for local clients
HTTP	`--transport http`	Streamable HTTP (MCP 2025-06-18) with `Mcp-Session-Id` session management and SSE streaming

What’s New in v1.5.1

Evasion Detection (L2.5) — 15 regex patterns detecting encoding (base64, URL, unicode, HTML entities), splitting (zero-width chars, interleaving), obfuscation (leet speak, padding, markup), and semantic evasion (role-play framing, instruction override)
Elicitation Support — Server-asks-client across all 3 transports (async HTTP, sync TCP+stdio) via elicitation/create
Per-Tool Rate Limiting — MaxCallsPerToolPerSession with per-tool overrides
JSON-RPC 2.0 Batch Support — Array requests across all transports
SSE Reconnection — Last-Event-ID header with ring buffer replay
Per-Session SSE Multiplexing — Multiple concurrent SSE streams per session
643 tests (611 unit/integration + 32 load/stress), 14 benchmarks, 3 fuzz targets, 92.0% coverage
Race detector clean — CI runs go test -race on every PR

Quick Start

# Download signed binary
wget https://github.com/aegisgatesecurity/aegisgate-mcp/releases/download/v1.5.1/mcp-server-linux-amd64
chmod +x mcp-server-linux-amd64

# Run with demo tools
./mcp-server-linux-amd64 --demo --addr :8081

# Or use Docker
docker run -p 8081:8081 ghcr.io/aegisgatesecurity/aegisgate-mcp:1.5.1

Use as a Go Library

import "github.com/aegisgatesecurity/aegisgate-mcp"

srv, _ := mcpsecurity.NewSecuredMCPServer(cfg)
srv.RegisterTool("my-tool", "Description", 10, inputSchema, handler)
srv.RegisterResource("file:///data", "Data", "Data resource", "application/json", resourceHandler)
srv.RegisterPrompt("greeting", "Greeting prompt", promptHandler)
srv.Start(ctx)

Supply Chain Integrity

Every release includes 12 Cosign-signed assets:

4 binaries (Lite+ML × amd64+arm64)
4 SHA256 checksums
4 Cosign bundles (Sigstore/Fulcio/Rekor)
SBOM attestation on container images

Comparison

Feature	AegisGate MCP	Official MCP SDK	mcpgate	mcp-shield
Security layers	23	0	~5	~3
Tool poisoning detection	✅	❌	❌	❌
ML threat detection	✅	❌	❌	❌
SSE streaming	✅	❌	❌	❌
External dependencies	0	Many	Many	Many
Supply chain signing	✅ Cosign	❌	❌	❌
Protocol version	2025-06-18	2025-06-18	2024-11-05	2024-11-05

See full comparison and OWASP MCP Top 10 mapping.

When to Upgrade to Platform

AegisGate MCP is free and standalone. When you need enterprise scale (unlimited ML inference, OAuth/SAML/SSO, SIEM integration, 31 compliance frameworks, multi-protocol support), upgrade to AegisGate Platform.

Need	AegisGate MCP (free)	AegisGate Platform
Secure MCP server	✅ 23 layers	✅ Embedded
ML threat detection	✅ 100 inf/min	✅ Unlimited
OAuth/SAML/SSO	❌ Bearer tokens	✅ Full SSO
SIEM integration	❌ File + Prometheus	✅ 11 platforms
Compliance	❌	✅ 31 frameworks
Scale	250 connections	Unlimited