Aegis Cipher

Overview

MCP tool gateway for LLM agents on a hardened VPS. mTLS traffic, AES-256-GCM secrets (envelope encryption), HMAC-signed audit trail, tool allowlists and Docker network isolation. Built for IT teams that refuse to expose internal APIs to a naked SaaS LLM.

Stack: Laravel API, Redis workers, Nginx + Let's Encrypt reverse proxy, optional vector store for internal RAG, data-residency policies and scheduled key rotation.