Aegis Security Skills

io.github.drupadsachania/aegis-skills · v1.5.0

Measured by MCP Station

Last check	Reachable
Checked at	—
Check success 7 / 30 days	—
First-try success 30 days	—
Median response	—
Lookups 30 days	—
Authentication	No auth
MCP version	2025-06-18
Rank score	—
Declared risk	Read-only (all tools declare readOnlyHint)
Capabilities declared	tools
Tool definitions	3 tools · with description 100% · input schema is an object 100% · read/destructive hints 100%

Read-only library of 24 defensive cybersecurity skills: ATT&CK, ATLAS, DFIR, CTEM and more.

streamable-http · https://aegis-skills.vercel.app/api/mcp

claude mcp add --transport http aegis-skills https://aegis-skills.vercel.app/api/mcp

{
  "mcpServers": {
    "aegis-skills": {
      "url": "https://aegis-skills.vercel.app/api/mcp"
    }
  }
}

list_skills
List available defensive security skills, optionally filtered by family or a free-text query (matched against name, description, tags and frameworks).
get_skill
Return a skill's description, frameworks, tags, context and ordered phase ids.
get_skill_phase
Load the methodology content for one phase of a skill. The phase is given as a phase id or as a 0-based index among authored phases.

Repository · Website · JSON · Text for agents · Registry updated 2026-10-13