Programmable guardrails proxy for MCP servers with approval workflows, rate limiting, ACL, and audit logging
Aegis is a guardrails proxy, not a primary MCP server. Tool definitions are minimal and scattered across test files and demo assets. Only 2 of 5 tools have visible input schemas in the provided code (echo, get_weather, publish_post, list_posts, admin_reset). Descriptions are present but generic (10-50 chars). No parameter descriptions visible. No output schemas documented. No error handling guidance. Tool definitions appear inferred from test fixtures rather than formally registered. This is a proxy/middleware tool, not a production-grade MCP server.
Reset all data to defaults (admin only).
Echo back the given message. Useful for testing basic connectivity.
Get simulated weather for a city.
List all posts in the system.
Publish a new post (destructive operation).
admin_reset has no visible input schema and generic 10-char description. Destructive operations require explicit confirmation patterns and detailed error guidance.
No parameter descriptions visible for any tool. LLMs cannot infer what 'city' or 'message' parameters control without explicit docstrings.
No output schemas documented. LLMs cannot plan downstream tool calls or extract required fields (e.g., post_id from publish_post).
Tool definitions inferred from test fixtures and demo assets, not formally registered in main server code. Cannot verify actual tool registration mechanism.
| Scored | Grade | Overall | Spec posture | Rubric |
|---|---|---|---|---|
| 2026-09-23 | F | 45 | 2026-07-28+ | v2 |
No error handling guidance. Destructive operations (publish_post, admin_reset) lack recovery hints or permission checks.