Aegis

Credential isolation proxy for AI agents with encrypted vault and audit logging.

Sits between AI agents and external APIs to handle credential injection at the network boundary. Features an AES-256-GCM encrypted vault, domain guard enforcement, per-agent identity and scoping, a declarative YAML policy engine, body inspection for credential leakage, RBAC with granular permissions, Shamir's Secret Sharing for team key management, and a full audit ledger. Includes a web dashboard and Prometheus metrics.